How to Configure USB Access Control

You can allow and prohibit the use of USB devices on your thin client. Specific rules for individual devices or device classes are possible.

To enable USB access control, proceed as follows:

  1. Open the setup and go to page Devices > USB Access Control.
  2. Enable the option Enable.
  3. Select the Default Rule. The default rule specifies whether the use of USB devices is generally allowed or prohibited.
  4. Create one or more rules for classes of devices or individual devices.

To create a Class Rule, proceed as follows:

  1. To create a new rule, click Hinzufügen in the Class Rules area.
  2. Choose a rule. The rule specifies whether use of the device class defined here is allowed or prohibited.
  3. Under Class ID, select the class of device for which the rule should apply. Examples: Audio, Printer, Mass Storage.
  4. Under Subclass, select the subclass for which the rule should apply or All [device class] for all subclasses.
  5. Under Name, give a name for the rule.
  6. Click OK or Cancel.

    The rule is active.

To create a Device Rule, proceed as follows:

When a rule is defined, at least one of the properties Vendor ID or Product ID or Uuid must be given.

  1. To create a new rule, click Hinzufügen in the Device Rules area.
  2. Choose a rule. The rule specifies whether use of the device defined here is allowed or prohibited.
  3. Give the Vendor ID of the device as a hexadecimal value.
  4. Give the Product ID of the device as a hexadecimal value.
  5. Give the Device Uuid (Universal Unique Identifier) of the device.
  6. Specify Permissions for the device.

    Possible values:

  7. Under Name, give a name for the rule.
  8. Click on Next.
  9. Click on Ok or Cancel.

    The rule is active.

Example:

The set rule prohibits the use of USB devices on the thin client.

A class rule allows the use of all entry devices (HID = Human Interface Devices).

A device rule allows the use of the USB storage device with the UUID 67FC-FDC6.

The use of all other USB devices, for example storage devices or printers , is prohibited.

USB access control

Further settings can be found under Storage Hotplug.