letos administrator guide...
TRANSCRIPT
LeTOS Administrator GuideDocumentation
Release 131
Lenovo
June 16 2017
Contents
1 Introduction 211 What is LeTOS 212 LeTOS Features 2
2 Getting Started 321 LeTOS Installation 422 First Boot Wizard 423 Management Server Splash Screen 524 Management Server Indicator 525 Control Panel 626 Network Tools 627 Agent System Information 728 Local Storage 929 File Management 9
3 System Settings 1031 Appearance Settings 1032 Display Settings 1133 Dual Monitors 1234 Imprivata 1435 Input and Time Settings 1736 Local Storage Settings 1837 Management Settings 2038 Network Settings 2239 Power Management 25310 Printer Settings 26311 Screensaver 28312 Sound Settings 29313 USB Permissions 30
4 Connection Settings 3141 Adding New Connections 3142 AnyConnect VPN 32
i
43 Citrix ICA 3344 Firefox Web Browser 3645 RDP 3846 SSH 4247 Telnet 4448 VMware Horizon View 4649 X11 Connection 49410 XenApp View 50
5 Advanced Options 5251 Export Config 5252 Touch Screen Support 5253 Manage Packages 5454 Enabling AMQP Support in LeTOS 5655 Citrix HDX 56
6 Legal 57
Index 59
ii
LeTOS Administrator Guide Documentation Release 131
Note A NOTE indicates important information that helps to make better use of the product
Caution A CAUTION indicates potential damage to hardware or loss of data if instructions are notfollowed
Warning A WARNING indicates a potential for property damage personal injury or death
Information in this publication is subject to change without notice
copy2016 Lenovo All rights reserved
Rev 2016-11
Contents 1
CHAPTER 1
Introduction
11 What is LeTOS
Lenovoreg Terminal Operating System (LeTOStrade) is an embedded Thin Client Operating System designedto be simple secure and centrally manageable LeTOS can be used to access hosted desktops using Mi-crosoftreg Remote Desktop Servicesreg VMwarereg Horizon Viewtrade Citrixreg XenAppViewreg or XenDesk-topreg web-based applications and more
12 LeTOS Features
bull Simple - Configuring a session out of the box is quick and painless using the LeTOS intuitive webbased control panel The same control panel can be used either locally from the thin client or remotelyfrom the management software
bull Modern - LeTOS can connect to hosted desktops using the industryrsquos best protocols including CitricICAreg Client Citrix XenDesktop RDP or Windowsreg Terminal Services and VMware Horizon ViewClient LeTOS also includes a built-in browser that allows accessing web-based applications or kioskusage
bull Centrally Managed - LeTOS-based thin clients can be centrally managed using the Lenovoreg ThinClient Management Consoletrade or LTMtrade
ndash The Management Console is shipped as a virtual appliance so it is easy to set up
ndash LTM can automatically discover and inventory the thin clients on the network
ndash LTM has the concept of a default profile Using a default profile additional thin clients areautomatically configured when plugged into the network
ndash Individual profiles for different users including specific Connections Thin Client Settings andPasswords
ndash LTM supports updates to the thin clientrsquos embedded OS Updates can be scheduled to happenoutside of production hours for example over the weekend
2
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
Contents
1 Introduction 211 What is LeTOS 212 LeTOS Features 2
2 Getting Started 321 LeTOS Installation 422 First Boot Wizard 423 Management Server Splash Screen 524 Management Server Indicator 525 Control Panel 626 Network Tools 627 Agent System Information 728 Local Storage 929 File Management 9
3 System Settings 1031 Appearance Settings 1032 Display Settings 1133 Dual Monitors 1234 Imprivata 1435 Input and Time Settings 1736 Local Storage Settings 1837 Management Settings 2038 Network Settings 2239 Power Management 25310 Printer Settings 26311 Screensaver 28312 Sound Settings 29313 USB Permissions 30
4 Connection Settings 3141 Adding New Connections 3142 AnyConnect VPN 32
i
43 Citrix ICA 3344 Firefox Web Browser 3645 RDP 3846 SSH 4247 Telnet 4448 VMware Horizon View 4649 X11 Connection 49410 XenApp View 50
5 Advanced Options 5251 Export Config 5252 Touch Screen Support 5253 Manage Packages 5454 Enabling AMQP Support in LeTOS 5655 Citrix HDX 56
6 Legal 57
Index 59
ii
LeTOS Administrator Guide Documentation Release 131
Note A NOTE indicates important information that helps to make better use of the product
Caution A CAUTION indicates potential damage to hardware or loss of data if instructions are notfollowed
Warning A WARNING indicates a potential for property damage personal injury or death
Information in this publication is subject to change without notice
copy2016 Lenovo All rights reserved
Rev 2016-11
Contents 1
CHAPTER 1
Introduction
11 What is LeTOS
Lenovoreg Terminal Operating System (LeTOStrade) is an embedded Thin Client Operating System designedto be simple secure and centrally manageable LeTOS can be used to access hosted desktops using Mi-crosoftreg Remote Desktop Servicesreg VMwarereg Horizon Viewtrade Citrixreg XenAppViewreg or XenDesk-topreg web-based applications and more
12 LeTOS Features
bull Simple - Configuring a session out of the box is quick and painless using the LeTOS intuitive webbased control panel The same control panel can be used either locally from the thin client or remotelyfrom the management software
bull Modern - LeTOS can connect to hosted desktops using the industryrsquos best protocols including CitricICAreg Client Citrix XenDesktop RDP or Windowsreg Terminal Services and VMware Horizon ViewClient LeTOS also includes a built-in browser that allows accessing web-based applications or kioskusage
bull Centrally Managed - LeTOS-based thin clients can be centrally managed using the Lenovoreg ThinClient Management Consoletrade or LTMtrade
ndash The Management Console is shipped as a virtual appliance so it is easy to set up
ndash LTM can automatically discover and inventory the thin clients on the network
ndash LTM has the concept of a default profile Using a default profile additional thin clients areautomatically configured when plugged into the network
ndash Individual profiles for different users including specific Connections Thin Client Settings andPasswords
ndash LTM supports updates to the thin clientrsquos embedded OS Updates can be scheduled to happenoutside of production hours for example over the weekend
2
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
43 Citrix ICA 3344 Firefox Web Browser 3645 RDP 3846 SSH 4247 Telnet 4448 VMware Horizon View 4649 X11 Connection 49410 XenApp View 50
5 Advanced Options 5251 Export Config 5252 Touch Screen Support 5253 Manage Packages 5454 Enabling AMQP Support in LeTOS 5655 Citrix HDX 56
6 Legal 57
Index 59
ii
LeTOS Administrator Guide Documentation Release 131
Note A NOTE indicates important information that helps to make better use of the product
Caution A CAUTION indicates potential damage to hardware or loss of data if instructions are notfollowed
Warning A WARNING indicates a potential for property damage personal injury or death
Information in this publication is subject to change without notice
copy2016 Lenovo All rights reserved
Rev 2016-11
Contents 1
CHAPTER 1
Introduction
11 What is LeTOS
Lenovoreg Terminal Operating System (LeTOStrade) is an embedded Thin Client Operating System designedto be simple secure and centrally manageable LeTOS can be used to access hosted desktops using Mi-crosoftreg Remote Desktop Servicesreg VMwarereg Horizon Viewtrade Citrixreg XenAppViewreg or XenDesk-topreg web-based applications and more
12 LeTOS Features
bull Simple - Configuring a session out of the box is quick and painless using the LeTOS intuitive webbased control panel The same control panel can be used either locally from the thin client or remotelyfrom the management software
bull Modern - LeTOS can connect to hosted desktops using the industryrsquos best protocols including CitricICAreg Client Citrix XenDesktop RDP or Windowsreg Terminal Services and VMware Horizon ViewClient LeTOS also includes a built-in browser that allows accessing web-based applications or kioskusage
bull Centrally Managed - LeTOS-based thin clients can be centrally managed using the Lenovoreg ThinClient Management Consoletrade or LTMtrade
ndash The Management Console is shipped as a virtual appliance so it is easy to set up
ndash LTM can automatically discover and inventory the thin clients on the network
ndash LTM has the concept of a default profile Using a default profile additional thin clients areautomatically configured when plugged into the network
ndash Individual profiles for different users including specific Connections Thin Client Settings andPasswords
ndash LTM supports updates to the thin clientrsquos embedded OS Updates can be scheduled to happenoutside of production hours for example over the weekend
2
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Note A NOTE indicates important information that helps to make better use of the product
Caution A CAUTION indicates potential damage to hardware or loss of data if instructions are notfollowed
Warning A WARNING indicates a potential for property damage personal injury or death
Information in this publication is subject to change without notice
copy2016 Lenovo All rights reserved
Rev 2016-11
Contents 1
CHAPTER 1
Introduction
11 What is LeTOS
Lenovoreg Terminal Operating System (LeTOStrade) is an embedded Thin Client Operating System designedto be simple secure and centrally manageable LeTOS can be used to access hosted desktops using Mi-crosoftreg Remote Desktop Servicesreg VMwarereg Horizon Viewtrade Citrixreg XenAppViewreg or XenDesk-topreg web-based applications and more
12 LeTOS Features
bull Simple - Configuring a session out of the box is quick and painless using the LeTOS intuitive webbased control panel The same control panel can be used either locally from the thin client or remotelyfrom the management software
bull Modern - LeTOS can connect to hosted desktops using the industryrsquos best protocols including CitricICAreg Client Citrix XenDesktop RDP or Windowsreg Terminal Services and VMware Horizon ViewClient LeTOS also includes a built-in browser that allows accessing web-based applications or kioskusage
bull Centrally Managed - LeTOS-based thin clients can be centrally managed using the Lenovoreg ThinClient Management Consoletrade or LTMtrade
ndash The Management Console is shipped as a virtual appliance so it is easy to set up
ndash LTM can automatically discover and inventory the thin clients on the network
ndash LTM has the concept of a default profile Using a default profile additional thin clients areautomatically configured when plugged into the network
ndash Individual profiles for different users including specific Connections Thin Client Settings andPasswords
ndash LTM supports updates to the thin clientrsquos embedded OS Updates can be scheduled to happenoutside of production hours for example over the weekend
2
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 1
Introduction
11 What is LeTOS
Lenovoreg Terminal Operating System (LeTOStrade) is an embedded Thin Client Operating System designedto be simple secure and centrally manageable LeTOS can be used to access hosted desktops using Mi-crosoftreg Remote Desktop Servicesreg VMwarereg Horizon Viewtrade Citrixreg XenAppViewreg or XenDesk-topreg web-based applications and more
12 LeTOS Features
bull Simple - Configuring a session out of the box is quick and painless using the LeTOS intuitive webbased control panel The same control panel can be used either locally from the thin client or remotelyfrom the management software
bull Modern - LeTOS can connect to hosted desktops using the industryrsquos best protocols including CitricICAreg Client Citrix XenDesktop RDP or Windowsreg Terminal Services and VMware Horizon ViewClient LeTOS also includes a built-in browser that allows accessing web-based applications or kioskusage
bull Centrally Managed - LeTOS-based thin clients can be centrally managed using the Lenovoreg ThinClient Management Consoletrade or LTMtrade
ndash The Management Console is shipped as a virtual appliance so it is easy to set up
ndash LTM can automatically discover and inventory the thin clients on the network
ndash LTM has the concept of a default profile Using a default profile additional thin clients areautomatically configured when plugged into the network
ndash Individual profiles for different users including specific Connections Thin Client Settings andPasswords
ndash LTM supports updates to the thin clientrsquos embedded OS Updates can be scheduled to happenoutside of production hours for example over the weekend
2
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 2
Getting Started
To get started the following actions are necessary
bull Check that the thin client is connected to the network
bull If a management server has been set up in the network check that the thin client was able to contactthe management server and is in managed mode
bull Create a desktop shortcut to allow thin client users to get connected to a remote server (See theconnections-reference chapter for more information)
To check the network connection status click the Start button and then select Control Panel
3
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Along the bottom of the Control Panel is a row of status messages These messages include the LeTOSbuild number the terminalrsquos current IP address and a Thin Client Management Connection Indicator
LeTOS default factory setting is DHCP If there is a DHCP server on the network the status bar should showthe leased IP address If the thin client is going to use a fixed IP address please refer to this guidersquos networksection A message of no IP address will appear if network connectivity is lost or was never established inthe first place This may be related to a loose or faulty network cable It may also be an indication of DHCPissues If troubleshooting a network issue is necessary please refer to the network diagnostic section below
Along with the IP address the Control Panel status section also shows whether the thin client is in man-aged or unmanaged (stand alone) mode By default LeTOS based thin clients try to locate a managementserver If a management server is found the terminal switches to managed mode where it ldquopullsrdquo its con-figuration from the management server If not it will stay in standaloneunmanaged mode and use its localconfiguration
The Control Panel status area also shows the OS build This is a string based on the LeTOS version and thebuild date
21 LeTOS Installation
No installation is required for customers who have purchased LeTOS-based thin clients from Lenovo Thethin client already contains a factory installed LeTOS operating system A USB re-flash utility is availableif reinstalling the operating system is necessary at any point in the future
22 First Boot Wizard
The first time the thin client boots up the first boot wizard will need to be used for the initial setup processThis wizard can help to configure a variety of settings in order to better operate the thin client Users areadvised to become familiar with the material in this guide as well as the LTM Administration Guide to bestimplement the first boot wizard
4 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
23 Management Server Splash Screen
If the thin client cannot make contact with a Management Server during boot-up then a splash screen willappear just prior to the desktop loading This screen contains the Lenovo logo and displays a messagesaying ldquoAttempting to connect to Management Serverrdquo The splash screen will be displayed until successfulcontact is made with a management server the cancel button is pressed or the specified timeout (30 secondsby default) is reached
The Management section found under the Control Panel allows configuration of the behavior of thissplash screen Configuration options include
bull Setting the thin client to Managed or Unmanaged modes
bull Specifying a different management server address
bull Adjusting the timeout value
bull Enabling or disabling the splash screen Cancel button
24 Management Server Indicator
Once the LeTOS Desktop displays the Agent running on the thin client will continue to periodically contacta Management Server on the local area network By default LeTOS will attempt to locate ws-broker unlessa different Management server has been entered When successful the Management Server Indicator boxfound along the bottom of the Control Panel will read Managed Otherwise the icon will change to a redcircle and the status will say Unmanaged In this case verify that the management server is online andaccessible on the LAN Also be sure to check the DNS server to verify that an entry exists and points to theIP address of the management server
23 Management Server Splash Screen 5
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
25 Control Panel
The Control Panel is the local tool for configuring Connection and System settings on the thin client
Connection Settings The thin client has the ability to connect to remote servers utilizing several types ofprotocols The RDPreg client uses the RDP protocol and allows connections to Windowsreg TerminalServers The Citrix ICA client is used to establish connections to Citrix Presentation and XenAppViewservers The VMware Horizon View client allows a connection to a VMware Horizon View serverwhich in turn provides the end-user with their own virtual desktop session Lastly a Firefoxreg webbrowser connection may be created to surf the web This can be used for several purposes
bull Connect to a web applications eg a webmail server
bull Connect to a connection broker web interface eg Citrix XenDesktop
bull Use the thin client as a Kiosk (select the Enable Kiosk Mode button under the Kiosk Modepanel)
System Settings These are the display locale sound keyboard mouse desktop appearance printer anddatetime configurations for the thin client Also under the System section is the ability to set anadministrative password for the control panel and to allow a snapshot of the current desktop configu-ration to be stored
26 Network Tools
The toolbar along the top of the Control Panel window contains a button named Network Tools Click-ing this button will open a separate smaller window that provides the current network status and usefuldiagnostic programs
261 Interface Status
Click the Interface Status tab along the top of the Network Tools window to view the IP address that iscurrently assigned to this thin client The MAC Address for this machine is also reported on this screen
6 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
262 Diagnostics
If there is difficulty connecting to servers on certain segments of the LAN then the ping command is avail-able to verify that specific servers andor gateways on the subnet are being reached To use ping
1 Select the Diagnostics tab from the Network Tools window
2 In the Host Address field type in the IP address or website to test against and then press the Pingbutton
3 If there is an error in the delivery to the destination the ping command displays an error messageOtherwise replies will continuously display for each packet successfully sent and received
4 Press the Stop button to terminate the ping loop
27 Agent System Information
271 Management
This displays the current status and information of the Management server to which the thin client is con-nected
Management Status States if the thin client is currently being associated with a Management server
Management Server The current address of the Management server in use
Change Management Server Change to a different the Management server
UUID Displays the current UUID of the thin client
272 Network Information
This displays information about the current network connection
IP Address The current IP address assigned to the thin client
MAC Address Displays the current MAC address assigned to the thin client
Hostname The name that has been assigned to the thin client
Network Tools Run a diagnostics test with the network connection and to check on the current status of thenetwork connection
27 Agent System Information 7
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
273 System Information
This displays information about the operating system and the thin client
Operating System The name of the image or operating system that is in use
Processor Displays the processor that the thin client is using
Memory The total internal memory of the thin client
DOM Size Displays the total storage capacity size of the thin client
Hardware Model The name of the thin client device in use
8 Chapter 2 Getting Started
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
28 Local Storage
Persistence within the scope of thin client computing refers to the continuing existence of connections andsettings after a terminal has been rebooted
Upon completion of the first boot wizard a snapshot of the thin client may be taken and saved in a datapartition for basic settings All of the connections settings and network settings assigned during the firstboot wizard will be saved once this snapshot is taken and they will persist and carry over after a reboot
After this point only changes made to Network Settings and Management servers will automatically persistif changed through the Control Panel In order for alterations to connections or settings to persist after thispoint either the changes will have to be applied through the Management console or the Take Snapshotoption located in the Local Storage settings section of the Control Panel must be used after making anychanges (See Local Storage Settings for more information)
29 File Management
LeTOS includes QtFM for basic file management needs using external storage devices With it users areable to perform simple actions for file maintenance
To access QtFM
1 Insert a USB storage device into one of the USB ports available on the device that being used
2 An icon will appear on the desktop taskbar along with a notification stating that the storage devicehas been discovered by LeTOS and may be accessed Click on either the notification or on the taskbaricon to open QtFM
Files within the storage device can be moved copied renamed and even deleted
Note Only files within storage units may be accessed and edited by QtFM
28 Local Storage 9
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 3
System Settings
31 Appearance Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Appearance settings on the left-hand side of the Control Panel under the System settings
Sort Desktop Icons Alphabetically This option will sort all icons on the desktop based on the namesthat have been assigned to them on creation
Sort Desktop Icons By Connection Type This option will sort all icons on the desktop based ontheir connection
10
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
32 Display Settings
This section describes the display options available for a single monitor attached to a terminal
1 Open the LeTOS Control Panel from the Start menu
2 Click the Display settings on the left-hand side of the Control Panel under the System settings
Screen Resolution Select the desired resolution from the dropdown list Auto-detect may be selectedto allow LeTOS to automatically choose the best resolution for the attached monitor
Color Depth All supported color depths for the monitor will be listed in this dropdown box
Enable Screen Blanking Checking this box will reveal two timeout values for screen blanking andsuspend time
Blank Time (min) This is the time needed before the system will blank the monitor setting it into ascreen-saving state
Suspend Time (min) This is the time needed before the monitor will go into a suspended power-saving mode
Rotation This allows the screen display to be rotated to accomodate for specific monitor setups
Once finished press the Apply button for the changes to take effect All display changes will take effectimmediately
32 Display Settings 11
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
33 Dual Monitors
This section describes how to set up and configure dual monitors for terminals that support them
1 While the unit is turned off attach both monitors to the thin client
2 Turn on the thin client
3 Open the LeTOS Control Panel from the Start menu
4 Click the Display settings on the left-hand side of the Control Panel under the System settings
5 Under the Configuration tab the settings for Color Depth and Screen Blanking options will beavailable These settings apply to both monitors regardless of screen positions or visual connectionsused
6 To adjust specific properties for each monitor click the Monitors button along the top of the ControlPanel The names of the two monitors attached to the thin client will be presented The exact nameswill vary depending on how they are detected on that particular thin client
7 Click one of the monitor names from the list This will open a configuration screen that containsScreen Resolution and Position properties for that specific monitor
Screen Resolution Select the desired resolution from the dropdown list Auto-detect maybe selected to allow LeTOS to automatically choose the best resolution for the attachedmonitor
Position
bull Left of or Right of - If the monitors are positioned in a side-by-side arrangementthen this will specify one of the monitors as placed to the Left of or Right of theopposite monitor
bull Above or Below - If the monitors are positioned in a top and bottom arrangementthen this will specify one of the monitors as placed Above or Below the oppositemonitor
bull Clone - Choosing the Clone option will cause the display to be duplicated onboth monitors (Also known as ldquoMirroredrdquo) Clone is the default behavior fordual monitors when powered on for the first time
12 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
bull Offset - When selecting the offset option two additional fields for X and Y co-ordinates will be present For example 50x50 will cause the display to be posi-tioned 50 pixels left of and 50 pixels higher than its normal centered state
Note The X plane is Horizontal The Y plane is Vertical
Primary display Enabling this option will assign the currently selected monitor to be theprimary display for extended dual monitor setups
When finished press the Apply button Changes to the display will take effect immediately
33 Dual Monitors 13
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
34 Imprivata
LeTOS includes Imprivata One-Sign support for one-touch sign-in solutions With One-Sign various singlesign-on methods are available Support is included for proximity card readers
341 Installing the Imprivata Package
Note If Imprivata One-Sign is already pre-installed then these steps may be skipped Proceed to theAdding Certificates section below
Some images may require a package to be installed to use One-Sign To install One-Sign to a device
1 Download the latest Imprivata package Save the file to a flash drive or host the file to an HTTP(S) orFTP server
2 Power on the device that will have Imprivata installed
3 Open the Control Panel Click on the Manage Packages button at the top of the Control Panelwindow
4 Refer to the steps given in the packages-reference section Follow the instructions given based on theinstallation method used
5 Once the package is installed the device will need to reboot After the reboot an Imprivata modulewill be available within the Control Panel
Alternatively the Management Appliance can be used to remotely install the package to multiple devicesFor more information refer to the LTM Administration Guidersquos Imprivata section
342 Adding Certificates
Devices that will be using One-Sign will require a certificate to access servers This certificate must beextracted from the Imprivata servers and installed to devices through the LTM Management Server Formore details on installing the certificate refer to the LTM Administration Guidersquos Imprivata section
For more information refer to the Imprivata serverrsquos documentation
1 On a local machine open a web browser and enter the Imprivata server address Internet Explorer isrecommended for this step Use Port 81 in the address to access the web interface
Note The Imprivata Admin Console is only compatible with Internet Explorer 80 and above TheImprivata Appliance Console will work with most browsers
2 A choice between the Admin Console and the Appliance Console will be present Select the Appli-ance Console and login with Administrator credentials
3 Open the Security tab located at the top of the screen The SSL page will contain a Download thecertificate link Click on this link and select the option to Save the certificate to the local disk Forother web browsers right-click on the link and select ldquoSave Asrdquo to save the certificate to the localdisk
14 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
4 Enter the Management Serverrsquos address in a web browser to access the Web Appliance Access theCertificates inventory page Click on the + icon to add a new certificate Enter a name for thecertificate and click on the Browse button Add the Imprivata certificate Once finished click on thecheckmark icon to add the certificate to the inventory
5 Go to the Devices inventory page Select all the devices that have One-Sign and will need the Impri-vata certificate Open the Options menu (shaped like a gear) and highlight Apply from the menu fornew options Choose the Certificates option
6 Select the Imprivata certificate from the drop-down menu The certificate can be set to install todevices immediately or on a scheduled time Once devices have installed the certificate they areready to run A reboot is not necessary
343 Enabling Imprivata
Finally enable Imprivata One-Sign on devices These are the steps to enable One-Sign locally
1 Power on the thin client that will be using the Imprivata sign-in services
2 Open the Control Panel and locate the Imprivata module
3 Select the option to enable Imprivata One-Sign Then select one of the Bootstrap type optionspresented The Bootstrap server address will vary depending on the Bootstrap type
bull SRV- The SRV record based on the name set in the DNS This record will provide informationto the bootstrap server that makes access easier especially for larger installations The recordreturned must be a fully-qualified domain name of the bootstrap server and not the DNS IPaddress It should match the address given in the Imprivata Admin Control Panel
bull Server Address- The fully-qualified domain name of the bootstrap server Like SRV the Boot-strap server address is given in the Imprivata Admin Control Panel If Require Valid SSLCertificate is disabled the Alias CNAME may also be used
Note For Server Address if the https is not included it will be included automaticallyHowever the system will not upgrade http to https
34 Imprivata 15
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
4 There is an option to make the client require a valid SSL certificate This will ignore self-signed errorsand hostname mismatch errors If this option is enabled an Imprivata certificate must be installedlocally This option is more secure and will not ignore any SSL errors if they occur
5 An option is available to disable the devicersquos desktop This locks down the kiosk for direct access toCitrix or VMware
6 Once all the information has been entered click on Apply to save the changes made A snapshot willneed to be taken to ensure that the new settings will persist on reboot
7 Reboot the device When the device powers back on the Imprivata login screen will take the place ofthe desktop
16 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
35 Input and Time Settings
This section allows configuration of the locale keyboard mouse and time settings for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the InputTime settings on the left-hand side of the Control Panel under the System settings
Locale English is the default locale setting Switching to a new locale will immediatelyadjust the system locale and translate the user interface of the local LeTOS desktop tothe selected language
Keyboard US is the default keyboard input setting Switching to a new keyboard inputwill alter the keyboard mapping immediately after selecting Apply
Left-handed Mouse Select this checkbox to invert the right and left mouse buttons for aleft-handed mouse
Timezone The time zone options are organized geographically by region first and then bycity Select the appropriate time zone location
Timeserver Defining a timeserver allows the terminal to query an NTP service in orderto keep its date and time in sync By default this is enabled and set to the NationalInstitute of Standards and Technologyrsquos timeserver Using a time server will overwriteany system times and dates that were manually set in the option below
Set System Time Clicking on this button will allow the system time and date to be manu-ally set This will set the time in the BIOS of the device so a snapshot does not needto be taken to store this option
Press the Apply button for the changes to take effect
35 Input and Time Settings 17
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
36 Local Storage Settings
The Local Storage section of the Control Panel allows the user to choose one of two options pertaining topersistence
1 Open the LeTOS Control Panel from the Start menu
2 Click the Local Storage settings icon on the left-hand side of the Control Panel under the Systemsettings
Clear Local Storage Press this button to clear out all configurations currently stored Re-boot the thin client after this option has been selected to clear out all locally storedconfigurations This is a factory reset and will result in starting the first boot wizardagain
Note Clearing Local Storage will not remove any software packages that have beeninstalled Software packages will need to be removed separately
Take Snapshot Press this button to capture the thin clientrsquos current connections and set-tings configuration Rebooting the terminal will allow the terminal to restore to thestate it was in when the snapshot was taken Taking a snapshot after applying newchanges is neccessary to ensure that the adjustments will be retained after a reboot
18 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Additionally the Local Storage module houses advanced Storage Options for other features that may fur-ther enhance a userrsquos experience All options are enabled by default
Enable Sync Writes This feature syncs the writing of information to local storage With this feature en-abled data written to is committed to stable storage This will guarantee that the information canbe read and accessed regardless of a crash or other issue Disabling this option will increase theperformance of writing to storage
Caution If this feature is disabled do not attempt to unplug the device before it has finishedwriting to storage or data may become lost or corrupted
Enable NoExecs This option will prevent file execution from mounted removable storage devices Dis-abling this option will allow file execution from these external devices This option does not affectthe internal local storage
Allow Mounting This will allow the local storage of the device to be mounted and visible to the localdesktop If this option is disabled removable storage devices will not accessible to the local desktop
Note Even if this option is disabled storage devices may still redirect into remote sessions depend-ing on the protocol
36 Local Storage Settings 19
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
37 Management Settings
371 Management Server Configuration
During boot up if the thin client cannot make contact with a Management Server then a splash screen willappear just prior to the LeTOS desktop loading This screen contains a message saying ldquoAttempting toconnect to Management Serverrdquo The splash screen will be displayed until successful contact is made with amanagement server the cancel button is pressed or the specified timeout (30 seconds by default) is reachedThe Management Server Configuration screen allows configuration of the behavior of this splash screenalong with other management server options
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
ManagedUnmanaged By default the thin client is set to Managed mode and will attemptto make contact with a management server There is the option of severing all commu-nications with a management server by selecting the Unmanaged radio button PressApply for this to take effect
Server Address While in managed mode the thin client will maintain contact with a man-agement server named ws-broker Use this field to specify a different hostname or IPaddress for the management server
Splash Screen ndash Timeout Use this field to adjust the number of seconds the splash screenappears on the screen before it times-out and loads the LeTOS Desktop Enter a valueof 0 to bypass the screen altogether
Splash Screen ndash Allow Cancel A Cancel button is provided on the splash screen that al-lows the user to abort the timeout delay Uncheck this box to hide the cancel buttonand force the user to wait the required amount of time
Note The purpose of the splash screen feature is to gracefully handle network latencythat may occur during the thin clientrsquos first contact with a management server duringboot up This feature becomes vital in the case where there may be a managementserver applying connections to the thin client that are configured to Autostart on bootup
20 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
372 Agent Password
A System Password can be set to restrict access to the Control Panel
To set the Password
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Agent Password section of this screen
4 Enter a password in the password field and re-enter it in the confirmation field to set the new password
5 Press the Apply button to save the password
Note Once a system password is set the user will be prompted for the password whenthey attempt to open the Control Panel If the Cancel button is pressed or a user incor-rectly types the password then the Control Panel will open in a read-only mode A smallpadlock icon will also appear along the bottom of the Control Panel window indicatingthat edits are not allowed Keep this password safe
373 Security Restrictions
This will allow screenshots to be taken within LeTOS
To allow screenshots
1 Open the LeTOS Control Panel from the Start menu
2 Click the Management settings on the left-hand side of the Control Panel under the System settings
3 Select the plus [+] to open the Security Restrictions section of this screen
4 Click on the Allow Screenshots (Print Screen) checkbox to enable this feature
5 Press the Apply button to save the changes
6 Screenshots can be taken using the Print Screen button on the keyboard
37 Management Settings 21
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
38 Network Settings
By default the thin client attempts to contact a DHCP server on the network during boot up If thereis a DHCP server then the thin client will acquire an IP address automatically and no further networkconfiguration is require However there are additional options available
Thin clients capable of connecting to wireless networks will still default to a wired connection if one isavailable and an Ethernet cable is plugged in To establish a wireless network connection an Ethernet cablecannot be attached to the thin client To change the network for the connection
1 Open the Thin Client Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Thin Client Panel under the System settings
3 Select the desired connection from the Networks menu in the Networks section Remember that forwireless network connections the Ethernet cable cannot be plugged in to the thin client
4 If a wireless network is selected a Wireless Network section will appear beneath the Networkssection
5 To further configure a wireless connection select the authentication method used on the network fromthe Authentication dropdown menu Depending on the authentication method selected additionalinformation may need to be entered into the fields that appear
6 When all the required fields have been filled click Apply
7 The Allow User Selection of Wireless Networks option may be enabled after a wireless connectionhas been correctly configured in the Control Panel With this option selected the Network tray iconwill allow established access points to be chosen from outside of the Control Panel
8 To connect using the tray icon right click on the Network tray icon in the lower left corner of thedesktop Select from the list of available networks If a password or security key is required aPassword field will appear When finished click OK to connect
22 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Note For WEP connections the standard passphrase cannot be used for authentication Instead theWEP hex key must be used as the passphrase for a successful connection
To set a Static IP address on a LeTOS thin client
1 Open the LeTOS Control Panel from the Start menu
2 Select the Network settings on the left-hand side of the Control Panel under System
3 Expand the IP Configuration section of the Network Settings menu
4 Deselect the Use DHCP checkbox
5 Type in appropriate values for in the address fields if needed and then press Apply It may take a fewmoments to reconfigure to the Static IP
6 To make any changes to the Host Name or to add or edit the DNS servers edit the Hostname field inthe Networks area found near the top of the window Press Apply when finished to save
7 Changes to the Network settings may take a few moments depending on the network speed This isnormal and the thin client will not need to be rebooted for the changes to take effect
Support is also available for users who wish to use the 8021X protocol for wired network connectivityCertain options may require a certificate to progress To set up a thin client for 8021X connectivity
1 If a certificate is needed the the correct certificates will need to be applied through the LTM Man-agement Appliance Open a web browser and browse to the address for the LTM ManagementAppliance If the thin client is not currently managed it will need to be set to be managed by thisserver Open the Certificates page and upload all of the correct certificates that the 8021X connectionrequires
2 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe using an 8021X connection Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
3 Return to the LeTOS Control Panel and open the Network settings Select a Wired network connec-tion This will display the option to use an 8021X connection Click on the Enable 8021X checkboxto enable the protocol A series of Network Security options will display Select the correct EAPmethod from the dropdown menu The appropriate CA Certificate and Client Certificate may be se-lected from the respective dropdown menus if they are necessary Finally enter any credentials thatthe connection may require When finished click on the Apply button to save all changes made
Users who wish to use a SCEP server have the option to do so as well Enabling SCEP support must bedone through LTM For instructions on how to enable SCEP refer to the LTM Administrator Guide
Note LeTOS only supports the Windows Server implementation for SCEP Consult a Network Adminis-trator for more information
The device must connected to an unsecured network before attempting to use SCEP Once the SCEP serveraddress has been sent to the device from LTM 8021X will be configured overwriting any previous config-uration The LeTOS Agent will generate a certificate request from the SCEP server Once SCEP is deployedwith all relevant information connect the device to the secure 8021X port
38 Network Settings 23
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Note Multiple applications of SCEP will not apply Clear Local Storage to set a new SCEP configuration
24 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
39 Power Management
LeTOS includes Energy Star-compliant power saving options When enabled the system will enter a sus-pended mode after a set duration of inactivity The system can be woken up again at the press of a button onthe keyboard
Note Mouse movement or clicking will not wake up the system
System Suspend Timeout Selecting one of the options from this menu will select the when the systementer suspend mode after a set period of inactivity Selecting Off will prevent the system suspendfrom occurring
39 Power Management 25
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
310 Printer Settings
LeTOS supports redirected printing to a locally attached USB printer Once the Printer Settings are properlyconfigured and applied redirected printing will be enabled for all connections created on the thin client thatsupport the feature
1 Open the LeTOS Control Panel from the Start menu
2 Click the Printer settings on the left-hand side of the Control Panel under System
3 Click on the Add button to add a new printer This will allow the printer to be named Do not includespaces in this printer name
4 Enter the following values for Printer Settings
Printer This menu will display multiple printers if there is more than one printer plugged into thethin client Select the printer that will be configured with these settings If only one printer isavailable that will display instead
Printer URI This field will self-populate with information provided by the printer If a printer isconnected while this menu is open but is not displaying click on Find Printers to make it showup in this dropdown menu
Printer Driver This field will fill itself out once a printer has been selected and Apply has beenclicked
Manufacturer This drop-down menu will contain a list of support printer manufacturers making iteasier to locate the drivers needed
Model Select the model of the printer from the list based on the selected printer manufacturer
26 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Find Printers Clicking on this button will allow LeTOS to populate fields based on the printer thatis currently plugged in
Comment This allows a comment regarding the printer to be entered
Location A comment regarding the location of the printer can be entered if necessary
Default Printer The current printer will be set as the default printer
Copies This will have the printer print multiple copies of a document if desired
5 Press the Apply button to save The printer changes will take place immediately No reboot is re-quired
6 Launch any of the local connections to begin utilizing these printer settings
310 Printer Settings 27
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
311 Screensaver
A screensaver can be set using images that are available within a Windows Share directory This will cyclethrough a series of images after a set duration of inactivity
Enable Selecting this checkbox will enable the screensaver feature This will override any Blank Time orSuspend Time settings that were established inactivity the Display module
Screensaver CIFS share Enter the CIFS share directory containing the images that will be used for thescreensaver Supported image types are jpeg png and gif
Username Specifies the name of a user account that will access the server
Password Enter the password for the user account being used
Screensaver timeout The idle time before the screensaver begins set to hhmmss
Image timeout The time in seconds that an image will remain on screen before cycling to the next avail-able image on the server
28 Chapter 3 System Settings
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
312 Sound Settings
This section allows adjustments to be made to the master volume level for the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the Sound settings on the left-hand side of the Control Panel under System
3 Left-click and drag the bar left or right to decrease or increase the volume
4 Press the Apply button to save Changes will take place automatically
LeTOS also comes equiped with a sound test the Test Volume button to verify that audio can be heardthrough the output device of choice This test can also be run to determine of the currently applies volumelevel is sufficient
Note The sound test will only run with the most recently applied volume level To verify other volumelevels adjustments must be made and applied beforehand
312 Sound Settings 29
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
313 USB Permissions
This section allows USB external devices to be enabled or disabled for use on the thin client
1 Open the LeTOS Control Panel from the Start menu
2 Click the USB Permission settings on the left-hand side of the Control Panel under System
3 Click on a check mark to allow or restrict the level of access that a USB device may have within theoperating system By default all options are given full permission
Caution Be sure to understand what each USB option associates itself with DisablingHuman interface Devices for example will disable USB keyboards and mice Thissituation is ideal for hardware that supports PS2 input devices
4 Press the Apply button to save Changes will take place automatically
30 Chapter 3 System Settings
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 4
Connection Settings
41 Adding New Connections
1 Open the LeTOS Control Panel from the Start menu
2 Click on the connection that will be created it is listed under the Connections bar on the left-handside of the Control Panel
3 The main window will split into two separate frames The top frame will list all existing connectionsfor this particular type or protocol To add a new connection click the Add button
4 A prompt will appear requesting for a name to be given to this connection Enter a name for thisconnection and press the OK button to continue
5 The bottom frame will display configuration fields that are specific to the connection type being cre-ated Some connections may only have a couple of fields required for configuration and be listed on asingle form Connections that have several configuration options associated with them will have theirsettings grouped and sorted under separate sections called form panels These panels can be openedand closed by clicking the plus [+] and minus [-] buttons found along the top right-hand side of eachpanel box
6 Once the connection has been completely setup click the Apply button along the bottom of the frameAn icon for the new session will be created on the LeTOS Desktop The end user can double-clickthis icon to launch the connection
Note Certain devices may not support all connections listed
7 As connections are created in the Control Panel icons for those sessions will appear on the desktopDouble-click the icon to launch that session
31
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
42 AnyConnect VPN
The following section describes the basic steps for establishing an AnyConnect VPN connection
421 The General Section
Host Type in the appropriate server location of the VPN host
Username This is the default username that will be used to gain VPN access
Group The group name that the username belongs to
32 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
43 Citrix ICA
The Citrix Receivertrade client allows a connection to Citrix XenAppView Servers (formerly known as Presen-tation Servertrade) This Citrix client also contains the necessary plug-in used for connecting to XenDesktopvia the thin clientrsquos local web browser
431 The Connection Section
The first section displayed for a Citrix ICA session is Connection This form panel will already be expanded
Server Location Type in the IP address or hostname of the server
Protocol Select the appropriate protocol needed to connect to the server There may be multiple methodsavailable for connecting to the server
bull Server - To connect to the desktop of the server click the radio button called Server
bull Published Application - To directly connect to a published application on the server select theradio button called Published Application
Browse for Name Mark the checkbox called Browse for Name then click the Browse button This willcontact the server and populate the list Click the down arrow on the Name menu and select the servername or published application
43 Citrix ICA 33
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
432 The Options Section
Window Size Select the type of window the session will display in
Full screen The session will take up the entire display
Fixed Size A fixed window size may be selected such as 640x480 800x600 and 1024x768
Percentage Based A size may be selected that is based on the percentage of available desktop display suchas 25 50 and 75
Seamless When using the Published Application feature selecting Seamless mode will launch applica-tions directly on the desktop without using the Citrix Window
Windows Colors Color depth options are 16 colors 256 colors 16-bit and 24-bit
Sound Quality Adjust the sound from Low Medium or High Quality
Citrix SLR (Speed Screen Latency Reduction) Options Enabling the following two options are usuallyonly needed when high latency is occurring or poor bandwidth conditions exist
Mouse Click Feedback The mouse cursor will change to an hourglass as soon as a user performs a mouseclick on an event and will wait for a response from the server before it changes back
Local Text Echo This option allows a user to see the character they type into their session on the screenwithout this key press hitting the actual server at that time
Encryption Select the appropriate level of encryption to be used when connecting to this Citrix Server
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
34 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Use data compression In an environment where system and client resources are not a concern data com-pression can be used to decrease the amount of data that must be sent across the network
Use disk cache for bitmaps Allows graphical objects to be stored in the local disk cache on the clientdevice
433 The Firewall Settings Section
Use alternative address for firewall connection Mark this checkbox if the session needs to connect to theCitrix serverrsquos external IP address The external address for the server is specified as the alternateaddress
Proxy Settings If the Citrix environment uses a proxy server an appropriate type will need to be selectedfrom the Proxy Type field Enter the address of the proxy server and port number in the ProxyAddress and Proxy Port fields respectively
434 The User Logon Section
User Name Specify the name of a user account to log on as This is an optional field
Domain Specify the domain to log on to This is an optional field
435 The Application Section
Application Specifies the path of the application on the Citrix server to be automatically launched whenthe connection is made This is an optional field
Working Directory Specifies the working directory used for the application
43 Citrix ICA 35
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
44 Firefox Web Browser
The following section describes the steps for configuring the local Firefox web browser
441 The General Section
Start URL Specifies the initial web page to appear when the browser is first launched
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Click the Apply button to save the connection Double-click the Firefox icon the desktop to launch thebrowser session A browser plug-in for Flash Player has been pre-installed
36 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
442 The Proxy Settings Section
Auto-detect proxy settings for this network This option will allow Firefox to automatically detect theproxy settings for your network
Use system proxy settings This option allows the proxy settings configured for the system to be used
Manual proxy configuration Choose this option to specify which proxy server to use if more than one isavailable Complete these fields listed
Automatic proxy configuration If there is a proxy configuration (pac) file available use this field to spec-ify the URL address to the pac file
443 The Kiosk Mode Section
The Firefox web browser includes a Kiosk Mode When this option is activated certain options within theweb browser can be hidden from use and the ability to exit can be disabled
Show Menu Bar With this box checked the Menu bar will appear This option can be enabled or disabledregardless of Kiosk Mode status
Enable Kiosk Mode This checkbox must be enabled to even view the other three options below
bull Show Navbar in Kiosk With this box checked the user has access to the Address bar to changewebsites and access to the Back Forward Stop and Refresh buttons in the Toolbar
bull Autohide Navbar in Kiosk Check this box to allow the Navbar to automatically hide itselfwhen it is not in use
bull Allow Quit This will allow easy access to any exit options available
Note To use Kiosk Mode correctly make sure there is a Starting URL in the requested field Launch-ing Firefox in Kiosk Mode will automatically launch a Full Screen inescapable Firefox session forend-users with Internet-ONLY access The only way to leave the browser is to shut down the thinclient
44 Firefox Web Browser 37
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
45 RDP
451 The General Section
The first section displayed for an RDPreg session is named General This form panel will already be ex-panded
Server Name Enter the hostname or IP address of the server
Port Enter the port number used in this connection
User Name Specifies the name of a user account to log in as This is optional
Domain Specifies the domain to log on to
452 The Display Section
Operate in full screen mode The RDPreg session will take up the entire display and will not allow mini-mization
Use All Monitors If a multi-monitor setup is being used then enabling this option will allow the RDPsession to display on all monitors
Operate in maximized window mode This option will display the session in a window This window willallow minimizing and maximizing
Use specified screen size The session will launch in a fixed sized window specified by the dimensionschosen in the dropdown list below This window can only be minimized the fixed size is the maximumsize allowed
Color depth for this connection Select the desired color depth for this session
38 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
453 The Local Resources Section
Sound Redirection Options By default sound from the server will redirect to the local thin client If nosound is to be sent to the local device then select either the Do not play sound or Leave sound onthe remote thin client radio buttons
Enable Microphone Redirection Enabling this option will allow a microphone to be used within the ses-sion if the desktop supports audio input
Enable Multimedia Redirection This option allows multimedia devices to be used within the session
Enable Clipboard Redirection This option will allow items on the local desktoprsquos clipboard to be carriedover to this desktop session
Enable Printer Redirection Mark this checkbox to redirect printing to a printer attached the local terminalThe name of the printer will need to be provided
Enable Client Drive Mapping Allows the user plug USB Flash Drives locally into the terminal and accessthe contents of the drive via the RDPreg session
Enable Com Port Mapping Redirects serial devices on the thin client to the server
Enable Smartcard Support Specifies whether redirection of Smart Cards is permitted during server au-thentication
Note To correctly set up Printing make sure the printerrsquos name matches what has been assigned in theControl Panel This can be found in the Printer section under System Settings
454 The Start a Program Section
Program path and filename Specifies the path of the application on the server to be automaticallylaunched when the connection is made This will launch the application in a window within thelocal desktop
Working Directory Specifies the working directory used for the application
45 RDP 39
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
455 The RD Gateway Section
RD Gateway Usage Select whether RD Gateway will be used for this session if it is available The optionsavailable are Do not use Always use Only if direct connection cannot be made or Use defaultsettings
RD Gateway Host Enter the hostname for the RD Gateway server Users may choose to Reuse RD Gate-way Credentials if they wish to reuse their RD Gateway credentials to log in to the server as well
RD Gateway Credential Source This option selects the method in which the RD Gateway server will beaccessed Users may Ask for permissions (NTLM) Use smart card or Select later if they can notor do not want to specify
RD Gateway Profile Method Specifies the working directory used for the application Users may chooseto Use default profile method or Use explicit settings
456 The RemoteApp Section
Users may select from a Normal Session for a standard connection or a RemoteApp Session to enable theRemoteApp services
Disable RemoteApp Support Checking This option may be used to bypass a check for RemoteApp sup-port on a server Disabling the support check is recommended for servers running older versions ofWindowsreg
Application Name The executable name of the application to be used
Application The location of the application Drive redirection may need to be enabled in order for localfiles to open properly
Command Line Parameters to launch the application with This is optional
Expand Commandline If parameters have been entered in the Command Line field then this option maybe enabled so that any environment variables can be expanded to include the values of the remotedesktop Optionally disabling this option will only expand the values of the local desktop
Expand Working Directory Enabling this option will expand any environment variables in RemoteApprsquosshell working directory to the remote desktop Leaving this option disabled will only expand thevalues of the local desktop
40 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
457 The Performance Section
Experience Options These various settings can be enabled or disabled to suit the user experience desiredThese options may affect the performance of networks so users with poor connectivity may wish todisable these options
Enable bitmap caching This option will allow common bmp-based images from the session desktop to bestored on the local hard drive Selecting this option may improve connection performance
Disable cursor from blinking Indicates that cursor blinking should be disabled during the session
Enable window managerrsquos key bindings By default RDPreg attempts to grab all keyboard input when it isin focus
Attach to the console of the server The session will connect to the console of the server (requires Win-dowsreg Server 2003 or newer)
Enable RemoteFX Toggles whether or not the connection will use the RemoteFXreg feature
Enable font smoothing This will enable ClearType for the RDP session making font appear smooth andmore clear
458 The Options Section
Enable compression of the RDP DataStream In an environment where system and client resources arenot capable data compression can be used to decrease the amount of data that must be sent across thenetwork
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - When the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
Enable CredSSP This enables the Security Support Provider for the server This option is enabled bydefault
45 RDP 41
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
46 SSH
The following section describes the basic steps for establishing an SSH connection
461 The General Section
Server Address Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Host Key Enter the encryption type followed by the host key itself This is optional but may be includedfor convenience
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
42 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
46 SSH 43
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
47 Telnet
The following section describes the basic steps for establishing a Telnet connection
471 The General Section
Type Select the type of Telnet connection being run Certain types may have different security restrictions
Server Name Enter the hostname or IP address of the server
Username Specifies the name of a user account to log in as This is optional
Port Enter the port number used by this connection
Use SSL Enable or disable the use of SSL The port number will automatically change depending on thestatus of this option
CA Certificate Depending on the Telnet connection type that is being run a certificate may be required toprogress For more information on uploading certificates to the device refer to the LTM Administra-tion Guidersquos Certificates section
Autostart Enable this checkbox to automatically launch this session each time the thin client completes itsboot procedure
44 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe end-user to stop it from occurring every time it closes
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
47 Telnet 45
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
48 VMware Horizon View
The VMware Horizon View client allows you to connect to a VMware server which in turn providesthe end-user with their own virtual desktop session The following section describes the basic steps forconfiguring the View Client
481 The General Section
Server Address Enter the Hostname or IP address of the VMware Horizon View Broker
Credentials Specify the User Name and Password of the default user account
Domain Specifies the domain to log on to
Desktop Name The name of the desktop can be entered if a connection should always be made to the samedesktop If the field remains empty then the user may be prompted to select an available desktop uponconnecting to the server
Protocol Choose whether to connect to the server using the PCOIP RDP or BLAST protocol
Enable background on startup Selecting this option will cause the client to expand to fullscreen and lockthe desktop layout to a single monitor fullscreen display
Desktop Layout Choose the desktop option that best suits the display setup If Enable background onstartup is selected this will lock to a single monitor fullscreen display
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
46 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
482 The Options Section
Disable Menubar When this option is enabled the VMware Horizon View menu bar will be hidden fromthe desktop
Run Once (Exit on Disconnect) This will close the VMware Horizon View client completely upon loggingout or disconnecting from the server rather than returning users to the desktop selection options ofthe client
Enable kiosk login mode Enabling this option will have VMware use a kiosk-based login mode Thisoption must also be enabled within the server environment
Lock the server URL field This option prevents users from changing the server or selecting a differentserver from the clientrsquos server selection menu
483 The Start A Program Section
Application Name Enter the name of the application that will be run upon server login
Application Size Choose the option that best suits the display setup and the application that will be usedIf Enable background on startup is selected this will lock to a single monitor fullscreen display
48 VMware Horizon View 47
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
484 Troubleshooting Tips for VMware Horizon View Connection
bull If the session is set to full screen but the display covers only a fraction of the entire screen then theallocated RAM for the virtual desktop may need to be set a little higher
bull If certain features like foreign key maps CD-ROM USB stick or printer redirection are not passingthrough to the virtual desktop session check if the VM is at the correct version The latest agent soft-ware executables can be downloaded at VMwarersquos website at httpwwwvmwarecomdownloads
bull If USB flash drives are to be used within the session it is best to use sticks formatted in FAT or NTFSLong delays sometimes occur when using flash drives formatted in FAT32 Other USB troubleshoot-ing tips can be found at the following VMware site httpkbvmwarecomkb1026991
48 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
49 X11 Connection
The X11 client allows a connection to an X11 server which provides the user with their own virtual desktopsession The following section describes the basic steps for configuring the X11 connection
Session Type Choose from the single SSH App type or the XDMCP connection
Server Address Specify which IP address is the X11 server
Credentials For XDMCP sessions specify the User Name and Password of the default user account
Application For SSH App sessions this is the file path needed to launch a single application
Resolution Choose the resolution for your connection ranging from full screen to various fixed resolutions
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
49 X11 Connection 49
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
410 XenApp View
The following section describes the basic steps for configuring the XenAppView connection
Server Address Enter the URL of the Citrix XenApp server
Autostart Enable this checkbox to automatically launch this session after the thin client completes its bootprocedure
Auto Restart
Select Yes or Prompt to automatically restart the connection
bull Yes - Once the session is terminated the session will automatically restart There is no way forthe user to stop it from occurring
bull Prompt - Once the session is terminated the user will receive a YESNO prompt asking themif they wish to reconnect to the session
Disable Desktop This option disables desktop access ensuring that only this connection is accessible Log-ging off from the server will power off the thin client and powering on the thin client will bypass theoperating systemrsquos desktop and immediately log in to the server To revert this option an LTM ad-ministrator will need to push to the thin client a connection that does not have this feature enabledOnce the connection has been pushed reboot the thin client
Caution Be mindful of auto-restart usage to avoid cases where a session will relaunch whendisable desktop is no longer needed
50 Chapter 4 Connection Settings
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
4101 Connecting to Citrix Storefront
A certificate provided by the Domain Certificate Authority or a Trusted Root Certificate Authority willneed to be pushed to the thin client in order to have a secure connection to Citrix Storefront
1 On a separate PC or device open a web browser (Internet Explorer recommended) and connect tothe Receiver Storefront web page Locate the Certificate information and copy the certificate or cer-tificates within the certification path When saving each certificate select the button for the Base64encoded X509 certificate file (CER) and then save each certificate file in any preferred location
2 Browse to the address for the LTM Management Appliance If the thin client is not currently beingmanaged it will need to be set to be managed by this server Open the Certificates page and uploadall of the certificates that were downloaded in the previous step
3 Return to the Devices page to display the thin client inventory Select all of the thin clients that willbe accessing the Citrix Storefront Open the gear-shaped Action Menu and Apply the Certificates tothe thin client(s) A reboot is not required
4 On the LeTOS device(s) create a XenAppView connection that uses a Citrix Storefront address (excitrixstorefrontdomainnamecomcitrixstore) The connection will be now besecure
410 XenApp View 51
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 5
Advanced Options
51 Export Config
In rare instances where support is needed users may be asked to provide the thin clientrsquos current configu-ration to the support team The thin clientrsquos current configuration file can be exported by following thesesteps
1 Plug a USB flash drive into the thin client
2 Click the button found along the top of the Control Panel named Export Config
3 The process only takes a few seconds Once it is finished a message will display saying the export isfinished and the flash drive can be removed
4 A Configtar file will now exist on the flash drive This file contains important diagnostic informationthat can be handled by a Support Analyst and will help troubleshoot and solve issues that may beexperienced
52 Touch Screen Support
Upon connecting a touch screen to the thin client a calibration screen will be presented on first boot toensure the unit functions properly
There are two ways to calibrate the touch screen device when attached to the thin client
52
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
521 Calibration ndash Option 1
Upon first boot of the operating system a calibration screen with a countdown timer in the middle willdisplay if a touch screen device is detected
1 Use a finger or a stylus to tap the center of the red cross that displays Try to get as close as possibleto the small circle in the center of the red cross
2 Another calibration spot will appear Repeat the process for the calibration spots that appear on thescreen
Note If the calibration is inaccurate the calibration tool will ask to re-try the process until a more accuratereading is achieved To cancel the dialog at any time either wait out the calibration time given or press anykey
3 Once the Touch Screen is calibrated the desktop will display as normal
522 Calibration ndash Option 2
The second method of calibrating the hardware can be found in the LeTOS desktop where a CalibrateTouchscreen icon is available
Follow the steps from Option 1 to calibrate the touch screen
Note There is currently no way to configure the calibration of an individual device and push that settingvia the Management Console software Re-imaging or updating the thin client will require the device to bere-calibrated If at any time the calibration seems inaccurate a mouse can be plugged in and an attempt tore-calibrate the device can be performed
52 Touch Screen Support 53
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
53 Manage Packages
In the upper toolbar of the Control Panel is a button that says Manage Packages which opens the PackageManager This tool can be used to enable or disable individual update packages that may be made availableas well as customization packages provided by Lenovo These packages will be in a squashfs file type
There are two methods of locating the files to be added to the list of available packages They can be addedlocally using the Add File button or they can be added from a remote location by clicking the Add URLbutton
To add an update package locally
1 Click on the Add File button in the LeTOS Package Manager
2 Navigate to the location of the update package on the system or on a USB key and select Open TheUSB key will typically be found within the media folder
54 Chapter 5 Advanced Options
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
The package selected will now appear in the Package Manager menu In order to add a package that is storedon a server
1 Click on the Add URL button in the Package Manager
2 Enter the complete URL for the location of the update package using an FTP HTTP or HTTPSprotocol
3 If necessary enter the Username and Password needed to access the location where the file is held
4 Click Ok after all the information needed has been entered
The package will now appear in the Package Manager menu
Newly added update packages will default to the Enabled status In the Package Manager clicking thecheckbox next to a file in the table under the Enabled column will toggle it between being enabled ordisabled Any changes to this status require a reboot before they will take effect
In order to completely remove a package
1 Select the file you wish to remove from the table
2 Click the Remove button
3 A prompt will appear to ensure that this is the action that will be taken Click Confirm to continueor Abort to back out of the process
Once Confirm has been clicked the package will be deleted For this change to become permanent theterminal will need to be rebooted Packages are not removed if a thin clientrsquos local storage is cleared
53 Manage Packages 55
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
54 Enabling AMQP Support in LeTOS
LeTOS supports the AMQP protocol for users who wish to use NAT transversal To enable AMQP support
1 If there is a firewall on the network ensure that the following ports are open
bull Port 80 HTTP - This is a standard web port for the LTM Management Appliance WebUI
bull Port 443 HTTPS - This is a secure (SSL) communication over an HTTP protocol
bull Port 50000 This is used by SOAP This port needs to be open on the Management Serverenvironment (Bidirectional Connection Required) and all devices need to be able to reach it
bull Port 5671 This is used by AMQP This port also needs to be open on the Management Serverenvironment
2 Create an ftp or http server that can be accessed by the relevant thin clients This server will beused to host the script that will enable AMQP support on devices The script can be accessed fromhere (httpdownloadsdevonitcomSalesEngamqpenable-amqp) If it not possible to create a hostserver then this link provided may also be used as a host
3 Open the LTM Management Console WebUI by browsing to the IP address or hostname of the appli-ance within any web browser Log in using Administrator credentials then open the Devices inven-tory
4 Select one or more of the devices that will gain AMQP support Click on the Device Actions button(the Gear icon) and select the Execute a File option Insert the ftp or http location that is hostingthe AMQP script and click on the check button to apply the script to the device(s)
Note Once AMQP support is enabled port 50000 is no longer required to be open
55 Citrix HDX
In order for USB audio and video communication devices such as headsets and webcams to properly workwithin Citrix environments the HDX RealTime Connector will need to be installed to the Citrix virtualmachines Otherwise the device(s) will be rejected The Citrix files and installation instructions will befound here (httpdocscitrixcomen-ushdx-optimization1-8hdx-realtime-installhtml)
Note LeTOS comes with the HDX components pre-installed No installation to devices is required
Caution Make sure that the clientrsquos HDX component version matches with the serverrsquos HDX Connectorversion For example RTME 18 on the client is not compatible with Connector 17 on the server
56 Chapter 5 Advanced Options
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
CHAPTER 6
Legal
copy2016 Lenovo Ltd All rights reserved
Lenovoreg Lenovo Terminal Managertrade and LeTOStrade are trademarks or registered trademarks of Lenovoin the United States other countries or both
Devon IT Echo and DeTOS are trademarks of Devon IT Inc All other company brand product ortrademark names are the property of their respective holders
VMware VMware Server VMware Player VMware ESX VMware ESXi vSphere vCenter Converter andHorizon View are either trademarks or registered trademarks of VMware Inc in the United States andorother jurisdictions
Citrix ICA XenAppView and XenServer are registered trademarks of Citrix Systems Inc andor one ormore of its subsidiaries and may be registered in the United States patent and Trademark Office and in othercountries
Microsoft Hyper-V Windows RDP and Internet Explorer are registered trademarks of Microsoft Corpora-tion in the United States andor other countries
Firefox is a registered trademark of the Mozilla Foundation
AnyConnect is a registered trademark of Cisco Technology Inc andor its affiliates in the United States andcertain other countries
VNCreg is a registered trademark of RealVNC Ltd in the US and in other countries
SSH is a Copyrightcopy 2000-2016 of SSH Communications Security All rights reserved
57
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
LeTOS Administrator Guide Documentation Release 131
58 Chapter 6 Legal
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-
Index
CConnections 31Control Panel 3 6
DDisplay 11 52
FFile Management 9
IImprivata 14
LLocal Storage 9 18Locale 17
MManagement 5 20
NNetworks 6 22 56
PPackage Manager 54Packages 54Power Management 25Printers 26
SScreensaver 28Sound 29 56Support 52System Settings 9
TTime 17
UUSB Devices 30
VVideo 56
59
- Introduction
-
- What is LeTOS
- LeTOS Features
-
- Getting Started
-
- LeTOS Installation
- First Boot Wizard
- Management Server Splash Screen
- Management Server Indicator
- Control Panel
- Network Tools
- Agent System Information
- Local Storage
- File Management
-
- System Settings
-
- Appearance Settings
- Display Settings
- Dual Monitors
- Imprivata
- Input and Time Settings
- Local Storage Settings
- Management Settings
- Network Settings
- Power Management
- Printer Settings
- Screensaver
- Sound Settings
- USB Permissions
-
- Connection Settings
-
- Adding New Connections
- AnyConnect VPN
- Citrix ICA
- Firefox Web Browser
- RDP
- SSH
- Telnet
- VMware Horizon View
- X11 Connection
- XenApp View
-
- Advanced Options
-
- Export Config
- Touch Screen Support
- Manage Packages
- Enabling AMQP Support in LeTOS
- Citrix HDX
-
- Legal
- Index
-