Skip to content

Enabling Automatic Login on Trusted Zero Clients

You can configure Trusted Zero Clients to automatically login to remote desktops from the Trust Center. This enables the clients to operate in environments where they're being used similar to a kiosk.

With Automatic Login, users can bypass the traditional login steps and directly access desktops, streamlining their login experience.

To enable the Kiosk mode on Trusted Zero Clients, the following properties must be configured:

  • autoConnectIfOneBroker: This parameter is set on the Trust Center, and enables login without credentials provided that only one broker is configured to connect to the host.
  • autoLaunchIfOneDesktop: This parameter is set on the broker (Endpoint Management tool), and allows automatic selection of a desktop, provided that only one desktop is available.
  • savedLoginUsername and savedLoginPasswordSecret: This parameter is set on the broker (Endpoint Management tool), and fetches the username and password to be used for login.

Notes

Automatic login works only if the following conditions are met:

  • Only one broker is configured to connect to the host.

  • The user credentials are current. If the username or the password have expired, the user is directed to the password change window.

  • Only one desktop is configured for use. If multiple desktops are available, the Desktop Selection window opens, with a list of desktops from which users can select the desktop to connect to.

To enable Automatic Login, configure the Trust Center and the Broker as described below.

Step I: Set a Secret on Trust Center

To begin, set a secret on Trust Center for the Trusted Zero Client. The Trust Center encrypts the secret value with the Trusted Zero Client's public key, which is available in the client's birth certificate.

The secret represents the password required for automatic login, and is retrieved while authenticating login attempts from a Trusted Zero Client. It is also required while configuring the broker.

Tip

The exact property names depend on the management tool you are using.

  1. Open the Endpoint Management tool.

  2. Set a secret using the set-secret command for the Trusted Zero Client.

  3. Set the password secret to the secretName configured in the step above.

  4. Do this for all the Trusted Zero Clients on which you want to enable automatic login.

Step II: Configure the Broker

Configure a broker for establishing PCoIP sessions. During configuration, provide the secret and the username that will be used for authentication. The secret and username will be verified for each connection attempt.

Info

The secret must be the same value as the Secret you set in Step I.

Configuration also involves enabling the automatic launch of desktops.To do this, set the autoLaunchIfOneDesktop to "True".

The following table lists the parameters that can be configured on the broker:

Value Type Description Notes
autoLaunchIfOneDesktop Boolean This parameter allows automatic selection of a desktop, provided that only one desktop is available. Set this value to True to enable Auto Login.
savedLoginPasswordSecret String This parameter fetches the password encrypted in the endpoint. This value must match the secret that was set in Step I. For example, if you set the secret as mysecret, set this parameter to mysecret as well. The Secret will be used retrieved every time a connection attempt is made to authenticate the user.
savedLoginUsername String This parameter represents the username to be used for login. The username will be used retrieved every time a connection attempt is made to authenticate the user.
enableLoginUsernameCaching Boolean This parameter allows users to control the ability to save their usernames, and display them on the client login window. This parameter is optional to the procedure.

To configure the broker:

  1. Open the Endpoint Management tool.

  2. Set Auto Connect if Only One Connection to "True".

  3. Set Auto Select Desktop if Only One Desktop to "True".

  4. Set a username. The exact configuration for this depends on the management tool.

Step III: Enable Automatic Login on Trust Center

Finally, enable automatic login by setting the autoConnectIfOneBroker flag to "True". This flag allows automatic login, provided that only one broker is configured to connect to the host.

  1. Open the Endpoint Management tool.

  2. Set Auto Connect if One Broker to "True".