(new related group 1)

Generating Passwords for Thin Clients

Voriges Thema

Nächstes Thema

Transferring the Passwords to the Thin Clients

To connect a thin client to the ICG, the newly generated credentials (fingerprint, password) must be available on the user resp. thin client side. In many cases, the user and device are in a remote location, which leaves it to the user to establish the connection to the ICG.

There are multiple possibilities to provide the credentials:

XML file on a USB stick

To export the XML file from the UMS:

  1. Go to UMS Administration > Global Configuration > Cloud Gateway Options.
  2. In the list First-authentication passwords, select the desired password entries and click Icon Exportieren to export the passwords.
  3. Save the passwords in XML format as icg.xml on a USB stick.

To retrieve the credentials at the thin client:

  1. On the thin client, open setup and go to Devices > Storage Devices > Storage Hotplug.
  2. Activate Enable dynamic client drive mapping.
  3. Click Apply.
  4. Insert the USB stick you prepared earlier.
  5. Open a Local Terminal.
  6. Log in as user
  7. Run the command ls media to see removable media.
  8. Change to your USB stick with cd media/[device label]
  9. View the XML file with cat icg.xml

    The XML file contains all the data required for connecting a thin client to the ICG: host address, ICG server certificate fingerprint, and the password:

Now you can copy the missing certificate fingerprint part and the password from the terminal.

HTML file on a USB stick

To export the HTML file from the UMS:

  1. Go to UMS Administration > Global Configuration > Cloud Gateway Options.
  2. In the list First-authentication passwords, select the desired password entries and click Icon Exportieren to export the passwords.
  3. Save the passwords in XML format as icg.html on a USB stick.

To retrieve the credentials at the thin client:

  1. On the thin client, open setup and go to Devices > Storage Devices > Storage Hotplug.
  2. Activate Enable dynamic client drive mapping.
  3. Click Apply.
  4. Insert the USB stick you prepared earlier.
  5. Open a Local Terminal.
  6. Log in as user
  7. Run the command ls media to see removable media.
  8. Change to your USB stick with cd media/[device label]
  9. View the XML file with firefox icg.html

    The HTML file contains all the data required for connecting a thin client to the ICG: host address, ICG server certificate fingerprint, and the password:

E-Mail created by the UMS

To send an e-mail directly from the UMS, the e-mail settings must be configured correctly. For more information, see the E-mail Settings chapter in the UMS manual.

  1. Go to UMS Administration > Global Configuration > Cloud Gateway Options.
  2. In the list First-authentication passwords, select the desired password entries and click Icon Mailen to create an e-mail.

    The dialog Send first-authentication passwords by mail opens. The e-mail body contains all the data required for connecting a thin client to the ICG: host address, ICG server certificate fingerprint, and the password.

  3. Enter the Mail recipient. To send a multiple-time password to more than one recipients, you can enter all addresses in one go by separating them by a semicolon ';'.

  4. Klick Ok to send the e-mail.

Manually created E-Mail or Printed Letter

  1. Go to UMS Administration > Global Configuration > Cloud Gateway Options.
  2. In the list First-authentication passwords, select the desired password entries and click Icon Kopieren to copy the credentials to the clipboard.

    The data required for connecting a thin client to the ICG is in the clipboard: host address, ICG server certificate fingerprint, and the password.

  3. To send the credentials via e-mail, paste the data into an encrypted e-mail. To send the credentials in a printed letter, paste the data in your e-mail program or word processor.