Registry and Install Settings
Note
Not all settings may be set during installation. Settings listed below that do not have a value in the Parameter Name column must be set via the registry keys affected settings with group policy, HCIDeploy, or some other post installation method.
Note
Encryption Methods: Please note that If you are looking to enable AES encryption, choose one of the RIJNDAEL options. ExactAccess was developed before the Advanced Encryption Standard was finalized. It was unclear which of several methods would become the new AES recommendation, so we chose to support all of the methods that were present in the final rounds of selection. These include: RIJNDAEL (the selected standard), TWOFISH, and SERPENT.
Required Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_RUN_CONFIG | ALL | N/A | 1 | Enable/Disable running the configuration tool during silent installation. Set the value to 0 to disable configuration tool execution. When running a silent command line installation, this setting disables displaying the client configuration tool. WarningSilent installation will not complete unless this parameter is added and set to 0 |
XA_MODE | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\ HealthCast\ExactAccess ApplicationMode:reg_dword 1=KM 2=RSM 4=SUM 5=VMVDI 6=CITRIXVDI | 4 | Client Mode (SUM, KM, VMVDI, CITRIXVDI, RSM) Be sure to specify the correct VDI type when installing under the respective VM technologies. Use VMVDI for VMware servers use CitrixVDI for Citrix VM servers. Both types of entry function to sepecify the mode XA_MODE=KM XA_MODE=1 |
Server Connection Properties
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
XA_SRV | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Servers\INDY 0000: reg_sz | Valid Server NETBIOS or FQDN Name or IP address | Primary XA (SSO) server name |
XA_AUDIT_SRV | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY 0000: reg_sz | Valid Server NETBIOS or FQDN Name or IP address | auditSERVER name |
XA_PRX_SRV | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\Indy 0000: reg_sz | Valid Server NETBIOS or FQDN Name or IP address | Prox Card Server Name |
X_D_SRV | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy 0000: reg_sz | Valid Server NETBIOS or FQDN Name or IP address | HCIDeploy server name |
X_RA_SRV | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory\INDY 0000: reg_sz | Valid Server NETBIOS or FQDN Name or IP address | Remote Authentication Server name |
X_PREF_IPV4 | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient PreferIPv4: reg_dword HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess PreferIPv4: reg_dword HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient PreferIPv4: reg_dword HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory PreferIPv4: reg_dword HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient PreferIPv4: reg_dword | 1 | Indicates that any TCP/IP communication prefers to use IPv4 when IPv6 is installed and available This setting will be ignored if the *_SRV setting(s) listed above contain a direct IPv6 address. |
SSO Client Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_SP | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Servers\INDY Port: reg_dword | 15001 | Communications port for XA (SSO) server |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Servers\INDY EnabledServerIDs: reg_sz | 0000 | Enabled Servers List. Comma delimited list of server identifiers 0000,0001,0002, etc. | |
XA_EC | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\SocketTransport\Indy Encryption: reg_sz | RIJNDAEL | Encryption Class: RIJNDAEL, RIJNDAEL128, RIJNDAEL256, BLOWFISH, BLOWFISH256, TWOFISH, SERPENT |
XA_CC | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\SocketTransport\Indy Compression: reg_sz | VCLZIP | Compression Class: NONE, VCLZIP |
Proxcard Client Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
XA_PRX_SRV_PRT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\Indy Port: reg_dword | 30000 | Communications port for Proxcard Server |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\Indy EnabledServerIDs: reg_sz | 0000 | Enabled Servers List. Comma delimited list of server identifiers 0000,0001,0002, etc. | |
SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\SocketTransport\Indy Encryption: reg_sz | RIJNDAEL | Encryption Class: RIJNDAEL, RIJNDAEL128, RIJNDAEL256, BLOWFISH, BLOWFISH256, TWOFISH, SERPENT | |
SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\SocketTransport\Indy Compression: reg_sz | VCLZIP | Compression Class: NONE, VCLZIP | |
X_PROX_RT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ReaderType: reg_sz | USB | ProxCard ReaderType USB - RFIdeas USB device support RFVC - RFIdeas Linux -> Citrix session support RFSerial - RFIdeas Reader Serial device support SCARD - OMNIKEY Reader support |
X_PSE | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\PIN PinPromptInMinutes: red_dword | 4294967295 | Specify enabling PIN Support. Users will be prompted to validate with pin: Set this to enabled (4294967295) or disabled (0) |
X_PIN_LEN | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\PIN MinPinLength: reg_dword | 4 | Specify the minimum PIN length a user must use when enrolling a PIN: 4, 5, or 6 |
X_ALLOW_PIN | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient\PIN AllowPinEnrollment: reg_dword | 1 | Set this to enable (1) or disable (0) PIN Self enrollment. |
X_PSCL | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ParityStripCountLeading: reg_dword | 0 | Parity Strip Count Leading bits |
X_PSCT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ParityStripCountTrailing: reg_dword | 0 | Parity Strip Count Trailing bits |
X_BBS | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BlankBadgeScan: reg_dword | 1 | Blank Badge Scanning allowed - if this setting is disabled, enrollment of unassigned cards is disabled. |
X_HPI | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient HardwarePollInterval: reg_dword | 500 | Hardware polling interval in milliseconds |
X_TOUT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient SupportTapoutUpdateTime: reg_dword | 1 | Rolling password save enabled |
X_PSWT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ServiceStartupConnectionWaitTimeout: reg_dword | 30 | Service Startup Connection Wait Timeout in seconds |
X_VBC | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ValidBitCount: reg_sz | Valid Bit Count comma delimited list | |
X_PIBCM | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient InvalidBitCountMessage: reg_sz | Message to display to user when their card has an invalid bit count | |
X_PIFM | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient InvalidFacilityMessage: reg_sz | Message to display to user when their card has an invalid facility code | |
X_PIPM | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient InvalidParityMessage: reg_sz | Message to display to user when their card has an invalid parity calculation | |
X_PIRM | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient InvalidRangeMessage: reg_sz | Message to display to user when their card has an ID that is not in a valid range | |
X_PSEDM | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient SelfEnrollmentDisabledMessage: reg_sz | Message to display to user when prox card self enrollment has been disabled | |
X_PSDM | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ServerDownMessage: reg_sz | Message to display to the user when the server cannot be contacted | |
X_PIN_AT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient PIN_Auth_Title: reg_sz | AUTHENTICATION | Title of message to prompt user for PIN Authentication |
X_PIN_ET | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient PIN_Enroll_Title: reg_sz | ENROLLMENT | Title of message to prompt user for PIN Enrollment |
X_CPT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient PIN_Change_Message: reg_sz | Change my PIN | Message to prompt user for manually changing their PIN |
X_BMML | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BadgeMsg_ManualLogin: reg_sz | Enter username and password | Message to prompt user for manual login when prox reader is not attached |
X_BMUA | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BadgeMsg_UnAuthenticated: reg_sz | Enter your password | Message to prompt user their badge is not authenticated and a password is required |
X_BMUR | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BadgeMsg_Unregistered: reg_sz | Enter username and password to register badge. | Message to prompt the user for badge enrollment (the card is not registered) |
X_PX_RB | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient CardRequiredForLogin: reg_dword | 0 | Require Proxcard for Login enabled(1) or disabled(0) |
HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient HWGConfig: reg_sz | The full path and filename to an HWG+ formatted configuration file that will be used to configure the proximity card reader device. WarningSetting this file path overrides all other prox card device configuration settings as specified in the registry, as well as those that are built into the product. This includes Parity Strip count, Reader Beep, MessageValidForMS, and potentially ValidBitCount settings. Use caution when using this method to configure devices, and ensure proper operation before distribution. | |||
X_PSWT | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ServcieStartupConnectionWaitTimeout: reg_dword | 30 | This setting indicates how long to wait during a startup phase to ignore server/network availability errors before reporting a problem to the HealthCast client. | |
HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ReaderBeepEnabled: reg_dword | Indicates if using a RFIdeas reader model that includes an internal speaker, that tapping a badge the reader will beep indicating the badge was read. | |||
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient ConnectionTimeout: reg_dword | 5 | The time in seconds that the client will attempt to connect to all of the configured servers before returning an error to the client for a connection failure. | |
SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BeepSoundFile: reg_sz | <install folder path>\beep2.wav | The default WAV file that will play when a card is tapped. NoteX_BEEP/BeepSoundPlayOnBadgetTap must be set to 1 to play sound or this setting will have no effect. | |
X_BEEP | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ProxCardClient BeepSoundPlayOnBadgeTap: reg_dword | 0 | Beep sound is enabled to play when set to 1, disabled when set to 0 |
Audit Client Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY SocketPort: reg_dword | 25000 | Communications port for auditSERVER | |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY EnabledServerIDs: reg_sz | 0000 | Enabled Servers List. Comma delimited list of server identifiers 0000,0001,0002, etc. | |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY EncryptionClass: reg_sz | NONE | Encryption Class: RIJNDAEL, RIJNDAEL128, RIJNDAEL256, BLOWFISH, BLOWFISH256, TWOFISH, SERPENT | |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY CompressionClass: reg_sz | VCLZIP | Compression Class: NONE, VCLZIP |
Remote Authentication Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_RA_PORT | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ AuditServerClient\Connection\INDY SocketPort: reg_dword | 20000 | Communications port for Remote Authentication |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory\INDY EnabledServerIDs: reg_sz | Enabled Servers List. Comma delimited list of server identifiers 0000,0001,0002, etc. | ||
X_RAEC | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory Encryption: reg_sz | NONE | Encryption Class: (Only if communicating with a server Advanced Communications port: 20001) RIJNDAEL, RIJNDAEL128, RIJNDAEL256, BLOWFISH, BLOWFISH256, TWOFISH, SERPENT If communicating with the Compatibility communication port: 20000, this setting MUST match the configuration on the server: RIJNDAEL, BLOWFISH |
X_RACC | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory Compression: reg_sz | VCLZIP | Compression Class: NONE, VCLZIP If communicating with the Compatibility communication port: 20000, this setting MUST match the configuration on the server: NONE, VCLZIP |
X_RARL | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory RemoteLogon: reg_dword | 1 | Remote Authentication Enabled (1) or Disabled (0) |
X_RAID | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCCitrixSessionDirectory ID: reg_sz | EA12G54 | Remote Authentication Shared Key for legacy communications If communicating with the Compatibility communication port: 20000, this setting MUST match the configuration on the server |
HCIDeploy Client Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_D_PORT | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy Port: reg_dword | 26000 | Communications port for HCIDeploy |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy EnabledServerIDs: reg_sz | Enabled Servers List. Comma delimited list of server identifiers 0000,0001,0002, etc. | ||
X_D_EC | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy EncryptionClass: reg_sz | RIJNDAEL | Encryption Class: RIJNDAEL, RIJNDAEL128, RIJNDAEL256, BLOWFISH, BLOWFISH256, TWOFISH, SERPENT |
X_D_CC | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy CompressionClass: reg_sz | VCLZIP | Compression Class: NONE, VCLZIP |
X_D_PORT_CRM | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy ClientPort: reg_dword | 26100 | Communications port for HCIDeploy remote management |
X_D_GRPS | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient DefaultGroups: reg_sz | Default Locations the workstation should be registered in. (When the service starts, it will register these location names, then remove the setting) | |
X_D_RM | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy EnableRemoteManagement: reg_dword | 1 | Enable(1) or Disabled(0) management port. If this setting is disabled, the HCIDeploy Console will not be able to display the deployed package state on the workstation |
X_D_HID | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy ConfiguredHashID: reg_sz | {A439AF92-98CD-4C20-83AC-5FD12308F51A} | Indicates the communications hash ID the remote management listening port requires for encryption handshake: MD5 (128 bit) GUID: {A439AF92-98CD-4C20-83AC-5FD12308F51A} WHIRLPOOL (512 bit) GUID: {C86DDD9B-09B2-4360-878B-F5D3B6997CDE} |
X_D_SCH | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Schedule Schedule: reg_sz | Schedule information string indicates how often the client will check in with the server to determine if a package update or uninstall is needed on the workstation | |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ HCIDeployClient\Indy ConnectionTimeout: reg_dword | 5 | The time in seconds that the client will attempt to connect to all of the configured servers before returning an error to the client for a connection failure. |
Miscellaneous Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
XA_N_BREQ | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\Identity Automation\XANotification BindingRequest: reg_sz | tcp://127.0.0.1:6226 | The port specified 6226 can be adjusted if necessary. NoteThe Windows (or other) Firewall may also need to be adjusted to allow network communication on this port for proper communication on the local machine between the XA client and the Browser Plug-in. The port must match what is used in |
XA_N_BRESP | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\Identity Automation\XANotification BindingResponse: reg_sz | tcp://localhost:6226 | The port specified 6226 can be adjusted if necessary. NoteThe Windows (or other) firewall may also need to be adjusted to allow network communication on this port for proper communication on the local machine between the XA client and the Browser Plug-in. The port must match what is used in |
XA_ALE | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess AutoLogoffEnabled: reg_dword | 1 | Enables (1) or Disables (0) idle session logoff. Logoff only occurs after the session has locked. |
X_KM_AL_TIME | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LogoffTimeLimit: reg_dword | 600 | The number of seconds the session can be idle (locked) before the session will be logged off. |
X_KM_LTL | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LockTimeLimit: reg_dword | 300 | The number of seconds a session can be idle before the session is automatically locked |
X_PRA | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ PasswordReset URL: reg_sz | Password Reset URL to a web site than allows a user to reset their domain password (such as ADPWR) | |
X_ACT | SUM,KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ PasswordReset AutoCancelTime: reg_dword | 120 | The auto cancel time for inactivity of the password reset web display in seconds. |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess ShowXAStatusMessages: reg_dword | 1 | When Enabled (1) Allows XAUCM to display the status message during startup, show desktop, and shutdown. These status messages will not be shown when Disabled (0) | |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess SkipLoadingAppList: reg_dword | When Enabled (1) Indicates that XA should not load the application list during login to improve performance. When Disabled (0), XA will load the users application list from the server. TipThis setting is required to be Disabled (0) if the user will launch SnapApp enabled applications (either Windows or Web) on the system where the setting is set. Also, if the ExactAccess Desktop will be displaying applications on the workstation, this setting must be Disabled (0) so the users authorized applications will be loaded for presentation. Not all workstations require this setting to be disabled - for instance, in a Published Application scenario, this setting can be enabled on the RSM server if the user will launch WebSSO or Windows SnapAPP applications on their local workstation and use published connectors for applications on the RSM server. This setting can also be Enabled (1) when using the Kiosk Mode Passthrough configuration, as the desktop presentation will be handled by an RSM or VDI desktop (remote session), so the local workstation does not need to retrieve the application list. | ||
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess BeepBeforeLockEnabled: reg_dword | Enables (1) or Disables (0) a system beep during the "about to lock" countdown | ||
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LockBeepIntervalInSeconds: reg_dword | This value is how many seconds occur between each beep during the countdown before lock. | ||
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LockBeepStartTimeInSeconds: reg_dword | This value is how many seconds before lock does the beep notice start to occur. It also indicates when the visual status will indicate the system is about to lock. | ||
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LockBeepIndex: reg_dword | 32 | May be one of the following values 0 - play sound associated with Default Beep sound in the Sound Scheme 16 - play sound associated with Critical Stop sound in the Sound Scheme 32 - play sound associated with Question sound in the Sound Scheme 48 - play sound associated with Exclamation sound in the Sound Scheme 64 - play sound associated with Asterisk sound in the Sound Scheme 4294967295 - use PC Speaker beep instead of scheme sound TipNote that the user may not have a .WAV file associated with the Sound Scheme values listed. Verify with the Sound Scheme that each of the items identified is associated with a .WAV file. These values can be found under: HKEY_CURRENT_USER \AppEvents \Schemes \Apps \<Type> \.Current -- (Default) Where <Type> is one of the following values: .Default, SystemHand, SystemQuestion, SystemExclamation, SystemAsterisk | |
X_LDM | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess KMLockDisplayMode: reg_dword | 5 | Change how the user name is displayed in the Active User List, Privacy Shield, and the XA Desktop 0 - Full Name* 1 - Last Name only 2 - First Name Only 3 - Directory Service Name ** 4 - Initials Only 5 - First Name, Last Initial 6 - First Initial, Last Name 7 - "In use" only ** 8 - No user name display ** Warning* Full Name is the First + Last, or Display Name field, depending on how the SERVER is configured. Warning** In Passthrough configuration, only values 3,7,8 are valid. ** Optionally, in Kiosk Mode, The user name can be removed from the privacy shield with the PSLoginNameVisible setting (allowing the name to remain showing on the XA Desktop) |
ALL | HKLM\Software\HealthCast\ExactAccess\ Override LogoffOnDesktopClose: reg_dword | Enables (1) or Disables (0) initiating logoff if the user closes the Application Desktop (not valid for Toolbar Desktop) | ||
ALL | HKLM\Software\HealthCast\ExactAccess\ Override ShowDesktopOnLogoffCancel: reg_dword | Enables (1) or Disables (0) initiating re-launching the XA Application Desktop (not valid for Toolbar Desktop) if the user cancels logoff | ||
ALL | HKLM\Software\HealthCast\ExactAccess\ Display DesktopStyle: reg_sz | hcgreen.vsf | The visual style file applied to change the look and feel of the XA Toolbar Desktop (not valid for Application Desktop). | |
XA_DSK_CLASS | ALL | HKLM\Software\HealthCast\ExactAccess\ XAServerManager Desktop: reg_sz | AppDesktop.clsAppDesktop | AppDesktop.clsAppDesktop: also referred to as Application Desktop, launches an application window similar to a web page that lists the user's SSO enabled applications as well as "lock" and "logoff" buttons. NoDesk.clsNoDesk: also referred to a No Desktop, does not launch an XA Desktop when XA is started. xatbdesk.clsxatbdesk: also referred to as Toolbar Desktop allows for the XA Menu to appear as a popup/context menu from the XA Taskbar icon. Additionally, a secondary application can be launched that looks and acts like the standard Windows task/start bar in that it will display favorite applications and has a start button to display a popup menu of applications with a work space similar to Windows 10. HCCitrixDesk.clsDesktop is a specialized desktop presentation used when the same Citrix server publishes a full Windows desktop and the user should see an XA menu of SSO enabled applications. The same Citrix server may also be used to publish XA directly but have the nodesktop option so an XA desktop does not appear. RequiredWhen using the XATBDesk.clsXATBDesk class, it is necessary that the DESKTOP_SERVER.XML be registered with the XA server before it will function. See Registering application XML files in the ExactAccess Administrator |
All | HKLM\Software\HealthCast\ExactAccess\ XAServerManager ClientDSProgID: reg_sz | NoteThis setting must be manually updated after an installation on RSM to use the virtual channel class to retrieve the current XA user from the end point device. Using the Client Configuration tool may reset this value when saving settings. WarningThis setting may not be set during the install or with a transform. | Class that determines where the user identification is retrieved from. NTClientDSUser.clsNTClientDSUser (SUM,RSM,VDI) hciVCCred.clshciVCCred (RSM ONLY) NTKMDSUser.clsNTKMDSUser (KIOSK ONLY) XAPWENCShell.clsXAPWENCShell (KIOSK ONLY, BIOMETRICS PRIMARY) | |
X_ALA_CHK | ALL | HKLM\Software\HealthCast\ExactAccess\ AutoLaunch CheckAccess: reg_dword | 0 | This setting determines whether an access check should be performed before the application is auto-launched. If the value is set to zero (0), the application will be launched and is not required to be registered in XA. The user logging in does not have to be granted access to launch the application. If the value is set to one (1), the application must be registered in XA and the user must belong to a role that has been granted access to the application. |
X_ALA_PATH | ALL | HKLM\Software\HealthCast\ExactAccess\ AutoLaunch Launch: reg_sz | ||
ALL | HKLM\SOFTWARE\HealthCast\ ExactAccess\ OverrideForceDisplayOnScreenKeyboard: reg_dword | 1 | Set value to 1 to force display of keyboard when double-tapped. If key does not exist or is set to 0, the keyboard will not display when the screen is double-tapped. |
Kiosk Mode Only Miscellaneous Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
XA_KM_DOMAIN | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LastDomainPrompt: reg_sz | The Default Domain a user will authenticate with when they provide a user name for authentication to Kiosk Mode. This will also select the configured domain by default when the domain drop down is configured for visibility or the domainlist registry keys have been configured. | |
X_KM_DOMVIS | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess isDomainDropdownVisible: reg_dword | 0 | Enable (1) or Disable (0) the domain drop down display on the Kiosk Mode password authentication dialog. If this setting is disabled, in place of the drop down, the LastDomainPrompt name will be shown to the user. If multiple domains are configured in the setting below, the domain drop down will become visible even when this setting is disabled |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\domainlist 0001: reg_sz 0002: reg_sz etc. | A numbered list of custom domains that users can authenticate with when using the Kiosk Mode password authentication. If these keys are configured, it will override the X_KM_DOMVIS setting and force the drop down to be visible so that users may select the correct domain to authenticate against. | ||
X_KM_DRVMAP | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess isXADriveMappingEnabled: reg_dword | 0 | Enables (1) or Disables (0) kiosk mode drive mapping lookup and processing. |
X_KM_PRTMAP | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess isXAPrinterMappingEnabled: reg_dword | 0 | Enables (1) or Disables (0) kiosk mode printer mapping when using RUN AS connectors that require the default generic printers to be mapped into the users Windows profile for RUN AS to function and allow printing. |
X_LUPE | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess LastUserPromptEnabled: reg_sz | 0 | Enables (1) or Disables (0) displaying the last user name on the password authentication dialog in kiosk mode when a user locks or logs off. This is similar to the Windows policy for standard mode to show previous users login names so a returning user does not need to provide it. |
X_KM_SL | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess KMSupportsLock: reg_dword | 1 | Enables (1) or Disables (0) Kiosk Mode Locking operations. If lock is disabled, idle sessions will always be logged off. |
X_PLOLE | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess PerformLogoffOnLockEnabled: reg_dword | 0 | Enable (1) or Disable (0) kiosk mode to log off the current users session when the session is locked. | |
KM | HKLM\Software\HealthCast\ExactAccess AutoSecureOnWindowsUnlock: reg_dword | 0 | Indicates whether to support securing the XA desktop in Locking Kiosk Mode (on Windows Unlock) if the Windows workstation is locked before timeout for session lock is triggered. E.g. if Windows is unlocked and the lock timeout of XA is expired, the system will automatically switch to the privacy shield desktop. (This configuration needs to be disabled if using Secure Patient Desktop in conjunction with XA) WarningIt is recommended that the Workstation Lock feature be disabled on workstations installed with Kiosk Mode so that the Windows-L key can be intercepted to cause a Kiosk Mode Lock instead. If this system policy has been configured, or Secure Patient Desktop is installed, this setting should remain Disabled (0) | |
KM | HKLM\Software\HealthCast\ExactAccess\ Override DisplayFont: reg_sz | Tahoma | Changes the font used to display the text on the HealthCast screen saver. | |
KM | HKLM\Software\HealthCast\ExactAccess\ Override ScreenSaverBackgroundColor: reg_dword | 0 | Changes the color of the background for the HealthCast screen saver. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) | |
KM | HKLM\Software\HealthCast\ExactAccess\ Override ScreenSaverFontColor: reg_sdword | 16777215 (FFFFFF) - white | Changes the color of the text for the HealthCast screen saver. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) | |
KM | HKLM\Software\HealthCast\ExactAccess\ Override PrivacyShieldBackgroundColor: reg_dword | Changes the color of the text for the KM Privacy Shield. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) | ||
X_DSSE | KM | HKLM\Software\HealthCast\ExactAccess\ Display DisplayOnScreenSaverEnabled: reg_dword | 0 | Enables (1) or Disables (0) showing the informational bitmap on the screen saver. |
X_SX | KM | HKLM\Software\HealthCast\ExactAccess\ Display StartX: reg_dword | 0 | The X (horizontal) coordinate in pixels of where to start displaying the informational bitmap |
X_SY | KM | HKLM\Software\HealthCast\ExactAccess\ Display StartY: reg_dword | 0 | The Y (vertical) coordinate in pixels of where to start displaying the informational bitmap |
X_NSX | KM | HKLM\Software\HealthCast\ExactAccess\ Display NetStartX: reg_dword | 65 | The X (horizontal) coordinate in pixels of where to start displaying the network connectivity application. |
X_NSY | KM | HKLM\Software\HealthCast\ExactAccess\ Display NetStartY: reg_dword | 961 | The Y (vertical) coordinate in pixels of where to start displaying the network connectivity application. |
X_SII | KM | HKLM\Software\HealthCast\ExactAccess\ Display SysInfoImage: reg_sz | The background image to load which contains desired information. May be generated by Microsoft (SysInternals) BGInfo. Must contain the full path to the BMP image to display | |
X_UT | KM | HKLM\Software\HealthCast\ExactAccess\ Display UseTransparency: reg_sz | 0 | Indicates that the image should be drawn transparent so that the configured background color of the privacy shield or screen saver is used instead of the background of the informational image configured. |
KM | HKLM\Software\HealthCast\ExactAccess\ Display ChangePINFontColor: reg_dword | 0 Black | Changes the color of the text for the "change pin" prompt. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) | |
KM | HKLM\Software\HealthCast\ExactAccess\ Display ChangePINFontFace: reg_sz | Calibri | Specifies the font face name of the "change pin" prompt | |
KM | HKLM\Software\HealthCast\ExactAccess\ Display ChangePINFontSize: reg_dword | 10 | The size of the displayed font in font points. | |
X_EFC | KM | HKLM\Software\HealthCast\ExactAccess\ Display ErrorFontColor: reg_dword | 0 | Changes the color of the text for the "error condition" prompt when a user enters an invalid PIN. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_EFF | KM | HKLM\Software\HealthCast\ExactAccess\ Display ErrorFontFace: reg_sz | Calibri | Specifies the font face name of the "error condition" prompt |
X_EFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display ErrorFontSize: reg_dword | 8 | The size of the displayed font in font points. |
X_LDFC | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginDirectionsFontColor: reg_dword | 0 Black | Changes the color of the text for the current "Login Directions". This text may prompt the user to tap a badge, enter their password, enter their user name, or enroll a card. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_LDFF | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginDirectionsFontFace: reg_sz | Calibri | Specifies the font face name of the "Login Directions" prompt |
X_LDFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginDirectionsFontSize: reg_dword | 12 | The size of the displayed font in font points. |
X_LFPFC | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginFieldPromptFontColor: reg_dword | 0 Black | Changes the color of the text for the login field prompts such as "username", "password" and "domain". Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_LFPFF | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginFieldPromptFontFace: reg_sz | Calibri | Specifies the font face name of the "login fields" prompt |
X_LFPFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginFieldPromptFontSize: reg_sz | 10 | The size of the displayed font in font points. |
X_LFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display LoginFormStyle: reg_sz | light.vsf | Login Form Style file path - determines colors, fonts, and borders of input boxes and buttons on the login prompt |
X_LOTIV | KM | HKLM\Software\HealthCast\ExactAccess\ Display LogoffDisplayTimeImagesVisible: reg_dword | 1 | Enable (1) or Disable (0) the Logoff Display Time Images - determines if the images are displayed for auto-logoff |
X_LOTV | KM | HKLM\Software\HealthCast\ExactAccess\ Display LogoffDisplayTimeVisible: reg_dword | 1 | Enable (1) or Disable (0) displaying the current time remaining for the locked user session before it is automatically logged off. |
X_LOPOST | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSAutoLogoffPostfix: reg_sz | Logoff Time Postfix text | |
X_ALOPX | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSAutoLogoffPosX: reg_dword | 701 | Auto Logoff display Position Absolute X (horizontal) position |
X_ALOPY | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSAutoLogoffPosY: reg_dword | 768 | Auto Logoff display Position Absolute Y (vertical) position |
X_LOPRE | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSAutoLogoffPrefix: reg_sz | Logoff Time Prefix text | |
X_ALV | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSAutoLogoffVisible: reg_dword | Enable (1) or Disable (0) displaying the user session information on the privacy shield. | |
X_LIFC | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLoginNameFontColor: reg_dword | 16777215 (FFFFFF) - white | Changes the color of the text for the Login name displayed on the privacy shield. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_LIFF | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLoginNameFontFace: reg_sz | Calibri | Specifies the font face name of the "Login name" display. |
X_LIFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLoginNameFontSize: reg_dword | 24 | The size of the displayed font in font points. |
X_ALV | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLoginNameVisible: reg_dword | 1 | Enable (1) or Disable (0) displaying the current users name on the privacy shield when the system is locked. |
X_LOTFC | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLogoffTimeFontColor: reg_dword | 16777215 (FFFFFF) - white | Changes the color of the text for the count down timer (for autologoff) on the privacy shield. Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_LOTFF | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLogoffTimeFontFace: reg_sz | Calibri | Specifies the font face name of the "autologoff time" display |
X_LOTFS | KM | HKLM\Software\HealthCast\ExactAccess\ Display PSLogoffTimeFontSize: reg_dword | 28 | The size of the displayed font in font points. |
KM | HKLM\SOFTWARE\HealthCast\eXpressAccess AutoStartScreenSaverOnTapOut: reg_dword | 0 | Enables (1) or Disables (0) automatically starting the configured WIndows screen saver when a user taps out of ExactAccess | |
X_ALTLE | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Override AlternateLoginEnabled: reg_dword | 0 | Enables (1) or Disables (0) Alternate Login Button when using standard username and password dialog as primary authentication method, allowing a user to switch to biometrics as a secondary authentication method. |
X_EASE | KM | 0 | Kiosk Mode Shell replacement allows for hiding the Windows desktop. 0 = Windows Desktop is enabled, 1 = Windows Desktop is hidden. Windows desktop is always enabled for administrative accounts. WarningSee additional requirements for configuring this setting on Windows 10 systems in Shell Replacement | |
XAD_ENABLED | KM | 0 | Kiosk Mode Operations Mode. 0=Full SSO operation, 1 = passthrough only operation. Setting this value to 1 on the command line adjusts several properties to enable passthrough operation. | |
X_PRMPT_ENC | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess PromptEncryptionClass: reg_sz | BLOWFISH | Encryption Class to use for in-memory Password storage can be: BLOWFISH RIJNDAEL |
RDP Connection Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_RDC_TS | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings TerminalServer: reg_sz | <Terminal Server Name>:<connection broker port> | |
X_RDC_MPORTS | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapPorts: reg_sz | false | Map COM Ports |
X_RDC_MPOS | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapPOSDevices: reg_sz | false | Map POS Devices |
X_RDC_PRINT | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapPrinter: reg_sz | true | Map Printers |
X_RDC_MSC | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapSmartCards: reg_sz | false | Map Smart Card Devices |
X_RDC_PDW | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings PortraitDisplayWindowed: reg_sz | true | Portrait Display Windowed |
X_RDC_SFS | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings StartFullScreen: reg_sz | true | Start Full Screen |
X_RDC_MCB | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapClipboard: reg_sz | false | Map Clipboard |
X_RDC_MD | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MapDrives: reg_sz | false | Map Drives |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings ConnectionBarShowMinimizeButton: reg_sz | true | Show the minimize button on the terminal connection bar | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings DisplayConnectionBar: reg_sz | false | Show the terminal connection bar | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings LogoffXAOnShutdown: reg_sz | false | When the RDP session is disconnected and the setting is TRUE, XA will log the current user out. | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings ConnectionBarShowRestoreButton: reg_sz | true | Show the restore button on the terminal connection bar | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MaxScreenHeight: reg_sz | 2048 | Maximum display Height of the connection window | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings MaxScreenWidth: reg_sz | 4096 | Maximum display Width of the connection window | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings PinConnectionBar: reg_sz | false | Pin the connection bar so that it is always displayed on screen (does not self hide) | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings DisableFullscreen: reg_sz | false | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings ProgramPathFileName: reg_sz | The application executable name to start on the terminal server when the session is connected | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings UseMultiMonitors: reg_sz | true | Allows the RDP connection to span multiple monitors if there are more than one connected to the end point. | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\RDP Settings ProgramWorkDir: reg_sz | Path to an application (to start) folder on the terminal server when the session is connected |
VMware Horizon View Connection Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_VW_DT | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\View Settings DesktopPool: reg_sz | VMware Horizon View plug-in Desktop Pool | ||
X_VW_URL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\View Settings ServerURL: reg_sz | VMware Horizon View plug-in connection URL |
Citrix ICA Connection Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
XA_CS1, XA_CS2, XA_CS3 | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings CitrixServer: reg_sz CitrixBackupServer: reg_sz CitrixSecondarybackup: reg_sz | Citrix servers used for passthrough connection to citrix published desktop operations | |
X_ICA_DC_LOCK | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings DisconnectOnLock: reg_sz | true | Citrix Plug-In Disconnect On Lock |
X_ICA_DC_LOGOFF | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings DisconnectOnLogoff: reg_sz | true | Citrix Plug-In Disconnect On Logoff |
X_ICA_CON_TYPE | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings BrowserProtocol: reg_sz | HTTPonTCP | Citrix Plug-In Connection Type |
X_ICA_TD | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings TransportDriver: reg_sz | TCI/IP | Citrix Plug-In Transport Driver |
X_ICA_ENC_LVL | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings EncryptionLevel: reg_sz | EncRC5-128 | Citrix Plug-In Encryption Level |
X_ICA_SESS_REL | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings SessionReliability: reg_sz | true | Citrix Plug-In Session Reliability |
X_ICA_AUD_LVL | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings ClientAudio: reg_sz | true | Citrix Plug-In send audio to client |
X_ICA_AUD_BAND | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings ClientAudioBandwidth: reg_sz | 0 | Citrix Plug-In Audio Bandwidth |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings HelpDeskMessage: reg_sz | If an error occurs, this message will be displayed to the end user to call their support desk contact | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings LogoffOnLock: reg_sz | true | Logoff the Citrix client session when the end point XA client locks | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings LogoffXAOnShutdown | true | Logoff the Citrix client session when the end point XA client is shut down (typically only in non-locking kiosk mode) | |
X_CTX_DESK_NAME | KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\ICA Settings PublishedDesktopName | The name of the desktop to connect to in <Farm Name>:<Published Desktop Name format> |
Citrix StoreFront Connection Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_SF_RN | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify ResourceName: reg_sz | Published Name textbox on the sfConnect Configuration tool. The published resource name on Citrix StoreFront site. | |
X_SF_AT | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify AppTitle: reg_sz | Window Title a full or partial string to identify the published resource window. Typically the published name with a space then a hyphen is sufficient. This value can be set with the sfConnect Configuration tool. | |
X_SF_URL | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify URL: reg_sz | Storfront URL textbox on the sfConnect Configuration tool. This is the Receiver for Web Sites URL | |
X_SF_AUTH | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify AuthenticationType: reg_sz | 0 | Authentication Type radio buttons on the sfConnect Configuration tool. Can be one of the following values (0) XA User (1) Windows User |
X_SF_FD | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify IsDesktop: reg_sz | true | Application Type radio buttons on the sfConnect Configuration tool. True indicates the published resource is a VDI or shared desktop NoteThis should be set to true when configured in kiosk mode passthrough |
X_SF_FS | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify SetFullScreen: reg_sz | true | Set to full screen check box on the sfConnect Configuration tool. Set the VDI or shared desktop to maximized so it takes the full screen NoteThis should be set to true when configured in kiosk mode passthrough |
X_SF_Log | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify EnableLogging: reg_sz | Enable Debug Logging check box on the sfConnect Configuration tool. True = logging enabled False = logging disabled | |
X_SF_TL | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify TraceLevel: reg_sz | Trace Level drop down list on the sfConnect Configuration tool. Set Trace level 1 – 4 for logging. The higher the trace level the more detailed logging. | |
X_SF_Hide | ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify HideOnQuit: reg_sz | true | Hide Application On Quit: Registry only setting to hide a running application when transitioning a Tap over\Tap out. |
ALL | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Storefront Settings\Notify useTls12: reg_sz | true | Allow use of TLS 1.2 to connect to Store Front HTTPS site |
Standard Mode Only Miscellaneous Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_AULV | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings ActiveUserListVisible: reg_dword | 0 | Enables (1) or Disables (0) the Standard Mode Active User List display that shows the active ExactAccess Sessions/Users on the workstation |
X_LS | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings LimitSessions: reg_dword | 1 | Limit sessions to a single session with tap-over supported 0=session limit disabled (unlimited number allowed) 1 or more=session limit enabled with define number allowed |
X_DTO | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings SingleUserOnly: reg_dword | 0 | Enalbles (1) or Diables (0) Single User only operation. Tap-Over is disabled when this setting is enabled. The session locks rather than disconnecting when this setting is enabled. |
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.PasswordResetEnabled: reg_dword | Enables (1) or Disables (0) Password reset link on the login tile. Requires the password reset URL also be configured. | ||
X_QSA | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.STATUS_ALIGNMENT: reg_dword | 1 | Proximity card dialog alignment 0=Left 1=Center 2=Right 3=Absolute Position (use X_QSX, X_QSY to specify position) |
X_QSBC | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.STATUS_BACK_COLOR: reg_dword | 11430670 (AE6B0E) — blue | Credential Provider Dialog Background Color Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_QSFC | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.STATUS_FONT_COLOR: reg_dword | 16777215 (FFFFFF) — white | Credential Provider Dialog Font Color Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_QSX | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.STATUS_XPOS: reg_dword | 0 | Status Dialog Absolute X (horizontal) position |
X_QSY | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.STATUS_YPOS: reg_dword | 0 | Status Dialog Absolute Y (vertical) position |
X_QULF | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USER_LIST_FONT_NAME: reg_sz | Tahoma | Active User List Font Name |
X_QULA | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USERLIST_ALIGNMENT: reg_dword | 1 | Active User List Dialog Alignment 0=Top 1=Center 2=Bottom 3=Absolute Position (use X_QULX, X_QULY to specify position) |
X_QULFC | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USERLIST_FONT_COLOR: reg_sz | 16094997 (F59715) — blue | Active User List Item Font Color Color is specified in the following format: NBGR (none,blue,green,red values from left to right 00, BB, GG, RR) |
X_QULFS | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USERLIST_FONT_SIZE: reg_sz | 28 (1C) | Active User List Item Font Size |
X_QULX | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USERLIST_XPOS: reg_sz | 0 | Active User List Dialog Absolute X (horizontal) position |
X_QULY | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.USERLIST_YPOS: reg_sz | 0 | Active User List Dialog Absolute Y (vertical) position |
X_QASE | SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.MSG.SELFENROLLDISABLED: reg_dword | 0 | Disables (1) or Enables (0) Prox Card Self Enrollment for Standard Mode |
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\QAW\Settings QAW.TRANSPARENT_BACKGROUND: reg_dword | 1 | Enables (1) or Disables (0) transparency effects for the Status Dialog | |
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess BeepBeforeAutoLogoffEnabled: reg_dword | |||
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess AutoLogoffBeepIntervalInSeconds: reg_dword | |||
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess AutoLogoffBeepStartTimeInSeconds: reg_dword | |||
SUM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess AutoLogoffBeepIndex: reg_dword | 32 | May be one of the following values 0 - play sound associated with Default Beep sound in the Sound Scheme 16 - play sound associated with Critical Stop sound in the Sound Scheme 32 - play sound associated with Question sound in the Sound Scheme 48 - play sound associated with Exclamation sound in the Sound Scheme 64 - play sound associated with Asterisk sound in the Sound Scheme 4294967295 - use PC Speaker beep instead of scheme sound TipNote that the user may not have a .WAV file associated with the Sound Scheme values listed. Verify with the Sound Scheme that each of the items identified is associated with a .WAV file. These values can be found under: HKEY_CURRENT_USER \AppEvents \Schemes \Apps \<Type> \.Current -- (Default) Where <Type> is one of the following values: .Default, SystemHand, SystemQuestion, SystemExclamation, SystemAsterisk | |
SUM | HKEY_LOCAL_MACHINE\Software\HealthCast\ ExactAccess\cache isCacheEnabled: reg_dword | 0 | Enables (1) or Disables (0) local credential caching |
Message of the Day Settings
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
X_MOTD_CAP | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings Title: reg_sz | ExactAccess Message of the Day | Message of the Day title bar caption text |
X_MOTD_STYLE | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings StyleFIle: reg_sz | CyanNight.vsf | The style file to apply to the display form |
X_MOTD_TO | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings TimeoutInSeconds: reg_dword | 30 | Timeout in seconds for auto-closing the Message of the Day display |
X_MOTD_TXT | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings TextFilePath: reg_sz | The full, complete path to a text file containing the message to be displayed | |
X_MOTD_H | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings Height: reg_dword | 300 | Height of the Message of the Day dialog display |
X_MOTD_W | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings Width: reg_dword | 600 | Width of the Message of the Day dialog display |
X_MOTD_X | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings Left: reg_dword | 100 | Starting horizontal position of the Message of the Day dialog display |
X_MOTD_Y | ALL | HKLM\Software\HealthCast\ExactAccess \MotDSettings Top: reg_dword | 100 | Starting vertical position of the Message of the Day dialog display |
MFA Authentication Properties
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Settings |
---|---|---|---|---|
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray BioDevice: reg_sz | dpuau | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray ForceDefaultDomain: reg_sz | Enter the Netbios domain name | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray LogLevel: reg_dword | 0 | 0=off 1=errors 2=warnings 3=messages 4=verbose | |
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray ServiceLowBandwidthTimeout: reg_dword | 10 seconds | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray ServiceTimeout: reg_dword | 60000 milliseconds | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ Foray ServiceUrl: reg_sz | Enter the https address to the oneService/SyncService.asxm |
Manually Configuring Biometrics as Primary
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Setting Description |
---|---|---|---|---|
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\XAServerManager ClientDSProgID: reg_sz | XAPWENCShell.clsXAPWENCShell | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\XAServerManager KioskPlugin: reg_sz | IA.XA.Biometric |
Manually Configuring Biometrics as Secondary
Parameter Name | Applicable Modes | Registry Keys Affected | Value | Settings |
---|---|---|---|---|
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\XAServerManager ClientDSProgID: reg_sz | NTKMDSUser.clsNTKMDSUser | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\XAServerManager KioskPlugin: reg_sz | IA.XA.Biometric | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\XAServerManager ClientDSProgIDAlt: reg_sz | XAPWENCShell.clsXAPWENCShell | ||
KM | HKEY_LOCAL_MACHINE\SOFTWARE\HealthCast\ ExactAccess\Override AlternateLoginEnabled: reg_dword | 1 |