Installing and Configuring ProveID Embedded on HP Thin Clients

1. Start the thin client and right-click the desktop.

2. Select Administrator/User Mode Switch and enter the administrator password.

3. Open the Control Panel by clicking the main button in the right corner of the Taskbar and selecting Control Panel.

4. Navigate to the System page.

5. From the left tab, select Imprivata Setup.

6. Select Enable Imprivata Appliance Mode.

7. Enter the fully qualified domain name of the appliance in the Imprivata Server box and click Apply.

   You will be logged off from administrator mode and the agent will be downloaded and started.

Step 1: Create the Task

1. In the HPDM Console, select the HP Thin Pro 7 operating system tab.

2. On the Task Templates pane, double-click _File and Registry. The Template Editor opens.

3. Click Add, select Command, and click OK.

4. Add the following commands to the task:

   • mclient set root/Imprivata/enableImprivata 1

   • mclient set root/Imprivata/ImprivataServer appliance_name_FQDN

     NOTE: Enter the fully qualified domain name of the appliance. This value must match the DNS name listed in the self-signed SSL certificate of the appliance.

   • mclient commit root/Imprivata

   • mclient apply root/Imprivata

5. Leave the default values Execute After Reboot: No and Wait: Yes for all of the commands and click OK.

Step 2: Save the Task

1. Deselect Reboot after all subtask finished and click Save as.

2. Enter a name for the new template and click OK.

Step 3: Apply the Task

1. In the Device pane, select the thin clients to which the task applies.

2. Right-click and select Send Task.

3. From the Category list, select File and Registry and then select the template you created.

4. Click OK. The task is sent to the selected devices.

ProveID Embedded is installed and enabled. Restarting the thin clients is not required.

To upload the SSL certificate to one thin client:

1. Insert the thumb drive into the thin client.

2. Click the wrench icon > Advanced > Certificate to open the Certificate Manager.

3. Go to the Local Root Certificate Authorities tab. This is also where you upload certificates for VMware Horizon and Citrix.

4. Click Import from File.

5. Select the SSL certificate file on the thumb drive.

6. Click Open. You do not need to restart the thin client.

To upload the SSL certificate from the HP Management Console:

Step 1: Create a Task

1. Insert the thumb drive into the thin client.

2. In the Task Templates pane, select the _File and Registry template. The Template Editor opens.

3. Click Save as. Give the task a name (CertificateInstall, for example).

4. Click OK.

5. Click Add.... The Sub-Task Chooser opens.

6. Select Deploy Files.

7. Click OK.

8. Select Add from local, and add the SSL certificate file from the thumb drive.

9. In the field Path on Device, enter the location for the SSL certificate on the thin client:
   /usr/local/share/ca-certificates

10. Click OK.

11. Click Add.... The Sub-Task Chooser opens again.

12. Add the following commands to the Command sub-task:

    • cd /usr/lib/hptc-cert-mgr

    • /usr/lib/hptc-cert-mgr/certmgr-apply

    For both commands, the following fields should not be changed from their default settings:

13. • Execute After Restart: NO

    • Wait: YES

13. Click OK. The Package Description Editor opens.

Step 2: Edit the Package Description

1. Complete the following fields:

   • Title: The same name you gave the task.

   • Installation Space (bytes): Enter a value that is more than sufficient to hold the entire SSL certificate file (5000, for example).

   • Architecture: Select the thin client architecture (such as ARM, x86)

   • OS Type: The OS on the thin client

   • Thin Client Models: The thin client model name

   • Description: This field is optional.

2. Click Generate.

Step 3: Apply the Task to the Thin Clients

1. In the Devices pane, right-click the thin client and select Send task.

2. Category field: File and Registry

3. Template: select the task you created.

4. Click Next.

5. Review the Task Editor summary.

6. Click OK. You can monitor the progress in the Manual Tasks pane.

Uninstalling Imprivata Software Directly from One HP Thin Client

To completely remove Imprivata software files and directories from the thin client without resetting to the factory defaults, enter the following commands from any directory on the thin client:

• fsunlock

• dpkg -r onesign-bootstrap-loader

• fslock

Uninstalling Imprivata Software from Multiple HP Thin Clients

To completely remove Imprivata software files and directories from your thin client environment without resetting to the factory defaults, create a task to run the onesign-bootstrap-loader command.

Create a Task:

1. Create a task.

1. In the Task Templates pane, select Files and Registry template. The Template Editor opens.

2. Click Add.... The Sub-Task Chooser opens.

3. Select Command.

4. Click OK. The Sub-Task Chooser opens.

5. Add the following three commands to the Command sub-task:

6. /sbin/fsunlock

7. dpkg -r onesign-bootstrap-loader

8. /sbin/fslock

   For all three commands, the following fields should not be changed from their default settings:

   • Execute After Restart: NO

   • Wait: YES

9. Click OK.

2. Apply the task to your HP thin clients.

1. In the Devices pane, right-click the thin client and select Send-task.

2. Category field: File and Registry

3. Template: select the task you created.

4. Click Next.

5. Review the Task Editor summary.

6. Click OK. You can monitor the progress in the Manual Tasks pane.