Sun Ray Software Administration Guide

Version 5.3

Oracle Legal Notices
Component Licensing


November 2012


This guide describes how to install, configure, and manage the Sun Ray Software 5.3 release.

Document generated on: 2012-11-05 (revision: 1250)

Table of Contents

1. Audience
2. Documentation Accessibility
3. Related Documents
4. Conventions
1. Overview
1.1. What is Sun Ray Computing?
1.1.1. Stateless
1.1.2. Secure
1.1.3. Available
1.2. Parts of the Sun Ray Environment
1.2.1. Clients
1.2.2. Physical Network
1.2.3. Sun Ray Server
1.3. Management Areas
2. Planning a Sun Ray Network Environment
2.1. Using a Shared Network Configuration
2.1.1. Configuring a Shared Network
2.1.2. VPN Capability
2.1.3. IP MultiPathing
2.1.4. IPv4 and IPv6
2.1.5. Network Performance Considerations
2.2. Configuring Sun Ray Server Discovery
2.2.1. Firmware Server
2.2.2. Session Server
2.2.3. Using Domain Name Service (DNS)
3. Installing and Configuring
3.1. Product Requirements
3.1.1. Operating System Requirements
3.1.2. Sun Ray Operating Software
3.1.3. Windows Remote Desktop Support
3.1.4. Feature Differences Between Oracle Solaris and Oracle Linux Platforms
3.1.5. Disk Space Requirements
3.1.6. Additional Oracle Solaris Requirements
3.1.7. Additional Oracle Linux Requirements
3.1.8. Java Runtime Environment (JRE) Requirements
3.1.9. Sun Ray Admin GUI Web Server Requirements
3.1.10. Web Browser Requirements
3.1.11. Sun Ray Data Store Port Requirements
3.1.12. How to Install Apache Tomcat
3.1.13. Ports and Protocols
3.2. Installing
3.2.1. Using the utsetup Command
3.2.2. Not Using the utsetup Command
3.2.3. Automating Sun Ray Software Installations
3.2.4. Installing Firmware Before Sun Ray Software Installation
3.2.5. How to Install and Configure Sun Ray Software
3.2.6. How to Install the Windows Connector Components on a Windows System
3.2.7. How to Clone a Sun Ray Server
3.2.8. How to Install and Configure a Sun Ray Server With Default Settings
3.2.9. How to Remove Sun Ray Software
3.2.10. Installation (utinstall) Error Messages
3.3. Configuring Oracle Solaris Trusted Extensions
3.3.1. How to Configure a Private Network on Oracle Solaris Trusted Extensions
3.3.2. How to Configure Shared Multilevel Ports (MLP) for Sun Ray Services
3.3.3. How to Increase the Number of X Server Ports
3.3.4. How to Configure the Windows Connector on Oracle Solaris Trusted Extensions
3.4. Upgrading
3.4.1. Installing Firmware Before Sun Ray Software Upgrade
3.4.2. How to Upgrade Sun Ray Software
3.4.3. Planning Upgrades Using Failover Groups
3.4.4. How to Preserve Sun Ray Software Configuration Data
4. Admin GUI and Commands
4.1. Sun Ray Software Commands
4.1.1. How to Set Up Access to the Sun Ray Software Man Pages
4.2. Administration Tool (Admin GUI)
4.2.1. Administrative Name and Password
4.2.2. Admin GUI Tab Descriptions
4.3. How to Log In to the Administration Tool (Admin GUI)
4.4. How to Change the Admin GUI Locale
4.5. How to Change the Admin GUI to English Locale
4.6. How to Change the Admin GUI Timeout
4.7. How to Enable or Disable Multiple Administration Accounts (Oracle Linux)
4.7.1. How to Configure Admin GUI Privileges for UNIX Users (Oracle Linux)
4.7.2. How to Limit Admin GUI Privileges to the Admin User (Oracle Linux)
4.8. How to Enable or Disable Multiple Administration Accounts (Oracle Solaris)
4.8.1. How to Configure Admin GUI Privileges for UNIX Users (Oracle Solaris)
4.8.2. How to Limit Admin GUI Privileges to the Admin User (Oracle Solaris)
4.9. How to Audit Admin GUI Sessions
5. Sun Ray Server and Networking
5.1. Log Files
5.2. How to Start or Stop Sun Ray Services
5.2.1. How to Stop Sun Ray Services
5.2.2. How to Start Sun Ray Services (Warm Restart)
5.2.3. How to Start Sun Ray Services (Cold Restart)
5.3. How to Check and Fix Corrupted Configuration Files (Oracle Solaris)
5.4. How to Unconfigure a Sun Ray Server
5.5. How to Disconnect a Sun Ray Server From the Interconnect
5.6. User Fields in the Sun Ray Data Store
5.7. Network Troubleshooting
5.7.1. Network Load
5.7.2. The utcapture Utility
5.7.3. utcapture Examples
5.7.4. The utquery Command
6. Failover Groups
6.1. Failover Groups Overview
6.2. Failover Process
6.3. Load Balancing
6.4. Mixing Different Sun Ray Servers
6.5. Authentication Requirements
6.6. Dedicated Primary Servers for Data Store
6.7. Setting Up a Failover Group
6.7.1. How to Configure a Primary Server
6.7.2. How to Add a Secondary Server
6.7.3. How to Synchronize Primary and Secondary Sun Ray Servers
6.7.4. How to Change the Group Manager Signature
6.8. Additional Failover Group Tasks
6.8.1. How to Take a Server Offline and Online
6.8.2. How to Disable Load Balancing
6.8.3. How to Show the Current Sun Ray Data Store Replication Configuration
6.8.4. How to Remove the Replication Configuration
6.8.5. How to View the Failover Group Status
6.9. Recovery Issues and Procedures
6.9.1. How to Rebuild the Primary Server's Administration Data Store
6.9.2. How to Replace the Primary Server with a Secondary Server
6.9.3. Secondary Server Recovery
6.10. Group Manager Details
6.10.1. Group Manager Configuration
7. Sessions and Tokens
7.1. Sessions
7.1.1. Authentication Manager
7.1.2. Session Manager
7.2. Tokens
7.2.1. Registering Tokens
7.2.2. How to Register a Token
7.2.3. How to Register a Pseudo-Token
7.2.4. How to Enable, Disable, or Delete a Token
7.3. Token Readers
7.3.1. How to Configure a Token Reader
7.3.2. How to Locate a Token Reader
7.3.3. How to Get a Token ID From a Token Reader
7.4. Session Troubleshooting
7.4.1. Problem: The dtlogin daemon cannot start the Xsun server properly.
8. Smart Card Services
8.1. Smart Card Bus Protocol
8.2. Smart Card Probe Order
8.3. How to Enable Smart Card Services
8.4. How to Add a Smart Card Configuration File
8.5. How to Change the Smart Card Probe Order
8.6. How to Change the Smart Card Bus Protocol
8.7. Troubleshooting Smart Card Services
8.7.1. Smart Card Transaction Problems
8.8. Setting Up External USB Smart Card Readers
8.8.1. Installation
8.8.2. Uninstallation
8.8.3. Known Problems and Limitations
9. Hotdesking
9.1. Hotdesking Overview
9.2. Hotdesking Without Smart Cards
9.2.1. NSCM and Failover Groups
9.2.2. How to Enable NSCM Sessions
9.2.3. How to Log in to an NSCM Session
9.3. Regional Hotdesking
9.3.1. Regional Hotdesking Process
9.3.2. Regional Hotdesking Site Requirements
9.3.3. Providing Site Integration Logic
9.3.4. How to Configure a Site-specific Mapping Library
9.3.5. How to Use Token Readers with Regional Hotdesking
9.3.6. How to Configure the Sample Data Store
9.4. Remote Hotdesk Authentication (RHA)
9.4.1. How to Disable Remote Hotdesk Authentication
9.4.2. How to Re-enable Remote Hotdesk Authentication
10. Kiosk Mode
10.1. Kiosk Overview
10.2. Kiosk Mode Security and Failover Considerations
10.3. Kiosk User Accounts
10.3.1. Characteristics
10.3.2. Restrictions and Safe Guards
10.3.3. Administering the Kiosk User Pool
10.4. Session Type Components
10.4.1. Session Descriptor
10.4.2. Session Script
10.5. How to Configure Kiosk Mode and User Accounts
10.6. How to Add Kiosk User Accounts
10.7. How to Configure a Kiosk Mode Session Type
10.8. How to Enable and Disable Kiosk Mode
10.8.1. Unconfiguring Kiosk Mode Disables Kiosk Policy
10.9. How to Override the Default Kiosk Mode Policy
10.10. Configuring the Windows Connector Kiosk Session Type
10.10.1. How to Configure a Kiosk Mode Session Type for the Windows Connector
10.11. Configuring the VMware View Connector Kiosk Session Type
10.11.1. How to Configure a Kiosk Mode Session Type for the VMware View Connector
11. Security
11.1. Security Overview
11.2. Encryption and Authentication
11.3. Security Modes
11.4. Client Key Management
11.5. Key Fingerprint
11.6. Displaying Security Status
11.6.1. How to Display Security Status for a Sun Ray Client
11.6.2. How to Display Security Status for All Sessions
11.7. Managing Client Keys
11.7.1. How to Confirm a Specific Client Key
11.7.2. How to Confirm All Unconfirmed Client Keys
11.7.3. How to Display a Client's Fingerprint Key from a Sun Ray Client
11.7.4. How to Display All Client Keys
11.7.5. How to Display All Keys for a Specific Client
11.7.6. How to Delete a Specific Client Key
11.7.7. How to Delete All Client Keys for a Specific Client
11.8. Managing Client Authentication
11.8.1. How to Disable Client Authentication
11.8.2. How to Force Client Authentication From All Clients
11.8.3. How to Deny Access to Clients With Unconfirmed Keys
11.9. Server and Client Authentication Troubleshooting
11.9.1. Error Messages
12. Multiple Monitor Configurations
12.1. Multi-Monitor
12.1.1. Hotdesking and Multi-Monitor Configurations
12.1.2. How to Automatically Set a Client's Multi-Monitor Configuration
12.1.3. Using xrandr to Set a Specific Multi-Monitor Configuration
12.2. Multihead Groups
12.2.1. Creating a Multihead Group
12.2.2. Multihead Group Screen Indicator
12.2.3. Creating a Single Screen Across Several Monitors (Xinerama)
12.2.4. How to Create a New Multihead Group
12.2.5. How to Enable the Multihead Group Policy
12.2.6. How to Manually Set Multihead Group Screen Dimensions
12.2.7. How to Manually Set Multihead Group Geometry
12.2.8. How to Disable Multihead Group for a Session
12.2.9. How to Enable and Disable Xinerama
12.2.10. How to Disconnect a Secondary Client
13. Sun Ray Clients
13.1. How to Centralize Sun Ray Client Configurations (.parms)
13.2. Sun Ray Client Hot Keys
13.2.1. How to Configure the Utility Hot Keys
13.3. How to Change Sun Ray Client Audio and Display Settings (Sun Ray Settings GUI)
13.4. How to List Available Sun Ray Servers
13.5. How to List the Available Clients
13.6. How to Display Sun Ray Client Information
13.7. How to Redirect a Sun Ray Client Session
13.7.1. How to Manually Redirect to a Different Sun Ray Server (utselect)
13.7.2. How to Manually Redirect to a Different Sun Ray Server (utswitch)
13.8. How to Disconnect a Sun Ray Client Session
13.9. How to Terminate a Sun Ray Client Session
13.10. How to Power Cycle a Sun Ray Client
13.11. How to Enable or Disable XRender
13.12. How to Disable Screen Blanking on a Sun Ray Client
13.12.1. How to Disable Screen Blanking for All Sun Ray Sessions
13.13. How to Modify Screen Resolutions
13.14. How to Enable the NumLock Key for All Sun Ray Sessions
13.15. How To Identify a Hung Session
13.16. How To Kill a Hung Session
13.17. How to Limit Administrative Privileges for Non-root Users (Oracle Linux)
13.18. Keyboard Country Codes
13.19. Sun Ray Client Boot Process
13.20. Audio Output Troubleshooting
13.20.1. Audio Frequencies Used With Applications
13.20.2. Tracking Audio Sessions
13.20.3. Audio Device Emulation
13.20.4. Problem: Audio is not working
13.20.5. Problem: Audio is not working when playing Adobe Flash Videos on an Oracle Linux Desktop
13.20.6. Problem: Audio is not working with Firefox
13.20.7. Problem: An application ignores the $AUDIODEV environment variable
13.20.8. xmms Player Configuration (Oracle Linux)
14. Sun Ray Client Firmware
14.1. Firmware Overview
14.2. Firmware Server Discovery
14.3. How to Update Firmware on Sun Ray Clients
14.4. How to Enable and Disable the Configuration GUI on All Sun Ray Clients
14.5. How to Modify a Sun Ray Client's Local Configuration (Configuration GUI)
14.5.1. Trival File System
14.5.2. Configuration GUI Menu Descriptions
14.5.3. How to Load a Remote Configuration File
14.6. VPN Support
14.6.1. How to Configure VPN Using Cisco Hybrid Authentication
14.7. 802.1x Authentication
14.7.1. How to Configure and Enable 802.1x Authentication on a Sun Ray Client
14.8. How to Display Firmware Versions for All Currently Connected Sun Ray Clients
14.9. How to Display the Firmware Version from a Sun Ray Client
14.10. How to Synchronize the Sun Ray Client Firmware
14.11. How to Disable All Sun Ray Client Firmware Updates
15. Sun Ray Client Peripherals
15.1. Peripherals Overview
15.2. USB Headsets
15.2.1. Tested USB Headsets
15.2.2. Tested Applications
15.2.3. Additional Notes
15.3. USB Operations Failing After Idle Timeout Limit
15.4. Device Nodes and USB Peripherals
15.5. Device Node Paths
15.6. Device Links
15.7. Device Node Ownership
15.8. Hotdesking and Device Node Ownership
15.9. Enabling and Disabling Device Services
15.10. Mass Storage Devices
15.10.1. Device Nodes and Links (Oracle Solaris)
15.10.2. Device Nodes and Links (Oracle Linux)
15.10.3. Mount Points
15.10.4. Device Ownership and Hotdesking
15.10.5. Mass Storage Devices and Idle Sessions
15.10.6. Commands for Common Disk Operation (Oracle Solaris)
15.10.7. Commands for Common Disk Operation (Oracle Linux)
15.11. How to Determine the Current State of Device Services
15.12. How to Enable or Disable USB Services
15.13. How to Unmount a Mass Storage Device From a Client
15.14. Troubleshooting USB Storage
15.14.1. Problem: Device nodes are not created.
15.14.2. Problem: The device is not automatically mounted.
15.14.3. Problem: The device is not automatically unmounted.
15.15. Setting Up Printers
15.15.1. How to Set Up an Attached PostScript Printer (Oracle Solaris)
15.15.2. How to Set Up an Attached PostScript Printer (Oracle Linux)
15.15.3. How to Set Up an Attached Non-PostScript Printer
15.16. How to Set Up Serial Attached Devices
15.17. How to Enable Applications to Access USB Devices
16. Sun Ray Client Troubleshooting Icons
16.1. On-Screen Display (OSD) Icons
16.2. Server Policy Icons
16.3. Troubleshooting Icon Quick Reference
16.4. DHCP State Codes
16.5. Power LEDs
16.6. (1) Sun Ray Client Startup Icon
16.7. (2) Firmware Download in Progress Icon
16.8. (3) Updating Firmware Icon
16.9. (4) Firmware Download Diagnostics Icon
16.10. (15) Session Refused Icon
16.11. (16) Bus Busy Icon
16.12. (20) 802.1x Authentication Icon
16.13. (21) Network Connection Verified Icon
16.14. (22) Waiting to Connect to Authentication Manager Icon
16.15. (23) No Ethernet Signal Icon
16.16. (25) Redirection Icon
16.17. (26) Wait for Session Icon
16.18. (27) DHCP Broadcast Failure Icon
16.19. (28) Establishing VPN Connection Icon
16.20. (29) VPN Connection Established Icon
16.21. (30) VPN Connection Error
16.22. (31-34) Ethernet Address Icon
16.23. (41-44) Ethernet Address Icon
16.24. (46) No Access to Server Icon
16.25. (47) No Access for Oracle Virtual Desktop Clients Icon
16.26. (48) No Access: Registration Required Icon
16.27. (49) No Access: Key Rejected Icon
16.28. (50) No Access: Security Policy Violation Icon
16.29. (51-54) Ethernet Address Icon
16.30. (60) Insert Card Icon
16.31. (61) Waiting for Primary Sun Ray Client Icon
16.32. (62) Token Reader Icon
16.33. (63) Card Error Icon
16.34. (64) Waiting For Access Icon
17. Oracle Virtual Desktop Clients
17.1. Oracle Virtual Desktop Clients Overview
17.2. How to Enable Access for Oracle Virtual Desktop Clients
17.3. How to Enable the Clipboard Service for Oracle Virtual Desktop Clients
17.4. Client ID Differences Between Oracle Virtual Desktop Clients and Sun Ray Clients
17.5. How to Display Client ID Information
17.6. How to Change the Keyboard Country Code
17.7. Oracle Virtual Desktop Client Troubleshooting
17.7.1. Connection Problems When Using a VPN or WAN
17.7.2. Screen Rendering Problems
17.7.3. How to Set the Logging Level
17.7.4. How to Change the Log File Location
17.7.5. How to Diagnose Connection Problems
18. Windows Connector
18.1. Windows Connector Overview
18.2. Requirements
18.3. Using the Windows Connector
18.3.1. How to Start a Windows Session
18.3.2. How to Start a Windows Session Within Java Desktop System (JDS)
18.3.3. How to Lock a Windows Session
18.3.4. How to Set Up Access to the uttsc Command
18.3.5. How to Set Up a Desktop Shortcut to Start a Windows Session
18.3.6. How to Separate Settings for Session Locale and Keyboard Layout
18.4. Audio Input
18.4.1. Enabling Audio Input on Windows 7 Enterprise
18.5. Video Acceleration
18.5.1. Video Acceleration Requirements
18.5.2. Videos Accelerated
18.5.3. Audio Accelerated
18.5.4. Additional Notes
18.5.5. Video Acceleration Troubleshooting
18.6. USB Device Redirection
18.6.1. Device Access
18.6.2. Supported Configurations
18.6.3. Tested USB Devices
18.6.4. Additional Notes
18.6.5. How to Add USB Drivers to a Virtual Machine
18.6.6. USB Redirection Troubleshooting
18.7. Hotdesking
18.7.1. Hotdesking Behavior
18.7.2. Location Awareness
18.8. Session Directory
18.9. Network Security
18.9.1. Built-in RDP Network Security
18.9.2. Enhanced Network Security
18.10. Auto-reconnect
18.11. Compression
18.11.1. How to Disable Compression
18.12. Licensing
18.12.1. Per-user Mode Versus Per-device Mode
18.13. Smart Cards
18.13.1. How to Enable Smart Card Redirection on a Per-Connection Basis
18.13.2. How to Set Up Smart Card Login for Windows
18.14. Multi-Monitor Support
18.15. Desktop Resizing
18.15.1. How to Enable Automatic Windows Desktop Resizing During Hotdesking
18.16. Printing
18.16.1. How to Set Up Print Queues (Oracle Solaris)
18.16.2. How to Set Up Print Queues (Oracle Linux)
18.16.3. How to Make Sun Ray Printers Available to a Windows Session
18.16.4. How to Maintain the Printer Cache File
18.16.5. How to Set Up Follow-Me Printing
18.16.6. Printers Troubleshooting
18.17. uttsc Error Messages
18.17.1. General Troubleshooting
19. VMware View Connector
19.1. VMware View Connector Overview
19.2. Requirements
19.3. Configuring the VMware View Connector Session Type
19.4. Disabling Connection Tunneling
19.5. Configuring VMware View Manager to Accept Non-SSL Connections
19.6. Enabling SSL
19.7. VMware View Connector Troubleshooting
19.7.1. Error Messages
20. Alternate Network Configurations
20.1. Alternate Network Configurations Overview
20.2. Updating the Default /etc/hosts File Before Configuring Sun Ray Network (Oracle Linux)
20.3. Using a Shared Network Configuration Without External DHCP Services
20.3.1. Shared Network Configuration Worksheet
20.3.2. How to Configure a Sun Ray Server on a Shared Network to Provide DHCP Services
20.3.3. How to List the Current Network Configuration
20.3.4. How to Delete a LAN Subnet
20.3.5. Example Shared Network Setups
20.4. Using a Private Network Configuration
20.4.1. Private Network Configuration Worksheet
20.4.2. How to Configure a Sun Ray Server in a Private Network
20.4.3. How to List the Current Network Configuration
20.4.4. How to Print a Private Network Configuration
20.4.5. How to Delete an Interface
20.4.6. Example Private Network Setup
20.5. Sun Ray Client Initialization Requirements Using DHCP
20.5.1. DHCP Basics
20.5.2. DHCP Parameter Discovery
20.5.3. DHCP Relay Agent
20.5.4. Simplifying DHCP Configuration of Remote Sun Ray Clients
20.5.5. Standard DHCP Parameters
20.5.6. Vendor-specific DHCP Options
20.5.7. Encapsulated Options
20.6. Failover Groups
20.6.1. Network Topologies
20.6.2. Setting Up IP Addressing
20.6.3. Sun Ray Server Failover Group Worksheet
21. Performance Tuning
21.1. Configuring Network Performance for Sun Ray 3 Series Clients
21.2. How to Improve Sun Ray Client Performance by Decreasing Buffering on the Network Switch (Oracle Solaris)
21.3. Improving Sun Ray Client Start-Up Time by Disabling Spanning Tree Protocol on the Network Switch
21.4. Applications
21.5. Tuning the Java Desktop System
21.6. Excessive Disk Swapping
21.7. Screensaver Resource Consumption
21.7.1. How to Disable Screensavers (Oracle Solaris)
A. Third Party Licenses
B. Glossary