Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell Wyse ThinOS Version 8.6.1 Administrator's Guide

PDF

Configure the Wyse Device Agent settings

Use this tab to configure the Wyse Management Suite settings. ThinOS supports all the Wyse Management Suite Group Policy settings.

Dell Wyse Device Agent (WDA) has been enhanced to support the following three types of customer security environments:

  • Highly secured environment—Administrators must log in to each device, and use the USB device or File Server to import the server certificate. The server certificate is retained in the device until you reset the device to factory default settings. The device is secured and is not susceptible to a rouge DHCP or DNS server for a new device discovery. Administrators can use either CA-signed or self-signed server certificates.
  • Secured environment—Administrators can configure the server certificate fingerprint as a DNS_Text record or a DHCP_Scope option. If WDA detects the DNS_Text record or the DHCP_Scope option, the server certificate fingerprint is distributed over the network and added locally to the device. When the device is reimaged, the server certificate fingerprint is removed from the device. Administrators can use either CA-signed or self-signed server certificates.
  • Normal environment—You can use either CA-signed or self-signed server certificates for device discovery. The device must establish a connection with CA for certificate validation. This applies when there is no option of DNS_Text record or DHCP_Scope but the server certificate is CA-signed. If the certificate is a self-signed certificate, you must accept the certificate security warning message.

To configure the Wyse Management Suite settings, do the following:

NOTE: : Ensure that you do not disable the on-board NIC. If the on-board NIC is disabled, the Wyse Management Suite server cannot identify the device.

  1. From the desktop menu, click System Setup, and then click Central Configuration.
    The Central Configuration dialog box is displayed.
  2. Click WDA, and use the following guidelines:
    Figure 1. WDA tab
    WDA tab
    1. Enable Wyse Management Suite (WMS)—Select the check box to enable the Wyse Management Suite to discover your thin client.
    2. DNS SRV record—Select this check box if you want the thin client to obtain the Wyse Management Suite values through DNS server, and then try to register into the Wyse Management Suite server. By default, the check box is selected. If the check box selection is canceled, the thin client cannot obtain the Wyse Management Suite values through DNS server.

      To create DNS records in DNS server, use the following information:

      # WMS server URL

      DNS Record Type: DNS SRV

      Record Name: _WMS_MGMT._TCP.<Domain>

      Value Returned: WMS Server URL

      Example: _WMS_MGMT._TCP.WDADEV.com

      # MQTT Server URL

      DNS Record Type: DNS SRV

      Record Name: _WMS_MQTT._TCP.<Domain>

      Value Returned: WMS MQTT Server URL

      Example: _WMS_MQTT._TCP.WDADEV.com

      # Group Token

      DNS Record Type: DNS Text

      Record Name: _WMS_GROUPTOKEN.<Domain>

      Value Returned: Group Token (as String)

      Example: _WMS_GROUPTOKEN .WDADEV.com

      # CA Validation

      DNS Record Type: DNS Text

      Record Name: _WMS_CAVALIDATION.<Domain>

      Value Returned: TRUE or FALSE (as String)

      Example: _WMS_CAVALIDATION.WDADEV.com

    3. Group Registration Key—Enter the Group Registration Key as configured by your Wyse Management Suite administrator for the desired group. To verify the key, click Validate Key.
      A Group Registration Key is not required for the private Wyse Management Suite server. You can provide the Wyse Management Suite server details to enable the device to check in to Wyse Management Suite. ThinOS registers to a quarantine tenant in Wyse Management Suite.
    4. Enable WMS Advanced Settings—Select this check box to enter the Wyse Management Suite server, MQTT server details, and to enable the CA validation. By default, the MQTT server option is disabled. The MQTT server value is populated after the ThinOS device is checked in to the Wyse Management Suite.

      NOTE: : If you enable the Wyse Management Suite, ensure that you have entered the Group Registration Key and configured the Wyse Management Suite advanced settings.

    For more information about using Wyse Management Suite to manage the ThinOS devices, see the Dell Wyse Management Suite Administrator's Guide at www.dell.com/support.
  3. Click OK to save the settings.

When you modify the ThinOS policy of the registered thin client using Wyse Management Suite, a dialog box is displayed prompting you to postpone or restart the thin client. To apply the settings immediately, click Restart Now. If you want to delay this task, click Postpone.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\