Configuring Access to Management Tools¶
Secure Environments
Disable the AWI and use the PCoIP Manamgement Console to configure endpoints in environments that have high security requirements. Consider hiding the OSD for extra security.
Setting | Default | AWI | OSD | Management Console |
---|---|---|---|---|
Disable Management Console Interface | Disabled | |||
Disable Administrative Web Interface | Enabled (FW 6.4+) |
|||
Force password change on next login | Disabled | |||
Require password protection for User Settings | Disabled |
From the OSD and AWI, you can:
- Prevent a PCoIP administrative tool from managing the PCoIP Zero Client.
- Disable administrative access to the Tera2 PCoIP Zero Client’s AWI.
- Force an administrative password change the next time someone accesses the AWI or OSD.
From the AWI only, you can:
- Apply the zero client administrative password to the OSD User Settings.
Do Not Disable all 3 Administrative Interfaces
At least one of the PCoIP Zero Client's three administrative configuration interfaces (OSD, AWI, or PCoIP Management Console) must remain enabled at all times. If you have hidden the OSD Configuration menu using the PCoIP Management Console, and you try to disable both the PCoIP Management Console interface and the AWI, you will receive an error message.
As of firmware 6.4, the Administrative Web Interface is disabled by default. You can enable the AWI by using the OSD or by the PCoIP Management Console.
You can configure administrative access settings from the OSD, AWI Access pages, as well as the PCoIP Management Console. In secure environments, the AWI, OSD, or sections of the OSD may not be available. In these cases, settings must be managed by the PCoIP Management Console if deployed.
For more information on using PCoIP Management Console profiles, see the PCoIP Management Console Adminsitrators' Guide
Configure Administrative Access Settings via the PCoIP Management Console¶
-
Follow your IT security policy and if applicable, configure a new or existing profile to enable the Administrative Web Interface or the appropriate parameters of the OSD Menu found in SECURITY section of the PCoIP Management Console profile.
Profile Management Access Settings -
Apply the profile to your Zero Client.
The following instructions provided consider the case when the AWI is disabled and the OSD is available. The images show that the settings in the OSD and AWI are the same, thus the same instructions apply to changes done via the AWI when it is available. The exception being the OSD does not have Require password protection for User Settings and either the AWI or PCoIP Management Console must be used to configure this setting.
OSD Access page
AWI Access page
To Disable or Enable the Administrative Web or PCoIP Management Console Interface¶
-
From the OSD, select Options > Configuration > Access.
-
Uncheck the Disable Administrative Web Interface: or Disable Management Console Interface: option to enable either interface. When either option is selected, you can't access or manage the Tera2 PCoIP Zero Client using the selected interface.
-
Click Apply and then OK to save your changes in the OSD.
To Force an AWI Password Change¶
When this option is selected, a new password is required when you next access your zero client AWI.
-
From the OSD, select Options > Configuration > Access.
-
Select the Force password change on next login: option.
-
Click Apply and then OK to save your changes in the OSD.
The Require password protection for User Settings setting cannot be configured from the OSD therefore the following steps are from the AWI. When Require password protection for User Settings is selected, the Zero Client AWI password is required to change any settings located in OSD > User Settings.
To Require a Password for OSD User Settings¶
-
Ensure there is a password applied to the zero client. See Configuring OSD and AWI Password
-
From an enabled AWI, select Options > Configuration > Access.
-
Enable the Require password protection for User Settings option.
-
Click Apply and then OK to save your changes in the OSD.
Failed Login Attempt Warning
A warning message displays if any failed access attempts to the AWI or OSD were detected since the last successful login. The message provides the date and time of the failed attempt, as shown next.
Failed login attempt message (from AWI)