Managing Kaspersky Thin Client in the thin client interface

This section describes the main Kaspersky Thin Client operating scenario and contains instructions for using Kaspersky Thin Client.

The main Kaspersky Thin Client operating scenario consists of the following steps:

1. Preparing Kaspersky Thin Client for startup

   Connect the peripherals to the thin client before starting it for the first time.

2. Starting Kaspersky Thin Client

   Turn on the thin client to get started.

3. Connection session

   Connect to a remote environment and start working.

4. Locking the desktop and resuming operations

   If you need to temporarily leave your workstation, lock your remote desktop. Resume operations when you return to your workstation. For detailed information about locking the remote desktop and resuming operations, see the manual of the operating system you are connecting to remotely.

5. Closing a connection session

   Close the connection to the remote environment before shutting down.

6. Stopping Kaspersky Thin Client

   Turn off the thin client at the end of the workday.

Connecting to a remote environment

Expand all | Collapse all

You can use Kaspersky Thin Client to do the following:

• Connect to a remote desktop via RDP

  To connect to a remote desktop via RDP:

  1. Turn on Kaspersky Thin Client.
  2. In the main window of Kaspersky Thin Client, click the RDP button.
  3. In the window that opens, specify the connection settings:
     1. In the Server field, specify the IP address or name of the Microsoft Remote Desktop Connection Broker server.

        Kaspersky Thin Client saves the last entered server address with which a connection was successfully established, so you do not need to enter it again when reconnecting.

     2. In the User name field, enter the local or domain user name. You can specify the domain user name in Domain\User name format or in User name format.

        Kaspersky Thin Client saves the last entered user name that successfully connected to the server, so you do not need to enter it again when reconnecting.

     3. In the Password field, enter the user password.

        The user password is not saved; the next time you connect, you will need to enter the password again.

  4. To configure settings for connecting to a remote desktop, click Settings in the left part of the window.
  5. Press Enter or click Connect.

     If you are connecting to a remote desktop for the first time and Kaspersky Thin Client is not included in an

     administration group

     

     A set of devices combined according to the performed functions. Devices are grouped for easy management as a whole. A group may include other groups. Group policies can be created for each thin client added to a group.

     , check the settings of the added certificate in the opened Add certificate window and click the Add certificate button.

     If Kaspersky Thin Client was previously added to an administration group that is managed through the Kaspersky Security Center Web Console and the Kaspersky Security Center administrator added a server authentication certificate for this administration group, the connection is established automatically.

     The server authentication certificate will be added to the system certificate store of Kaspersky Thin Client and will be used for subsequent connections.

  6. If you specified the Remote Desktop Connection Broker collection ID when configuring a remote desktop connection and multiple desktops are available to you, in the remote desktop selection window that opens, click the button with the name of the desktop to which you want to connect.

     The remote desktop window opens and the connection session begins.

• Connect to a virtual application via RDP

  To connect to a

  virtual application

  

  Application that is deployed on a remote server and requires you to use remote access technologies to connect to it.

  via RDP:

  1. Turn on Kaspersky Thin Client.
  2. In the main window of Kaspersky Thin Client, click the RDP button.
  3. In the window that opens, specify the connection settings:
     1. In the Server field, specify the IP address or name of the Microsoft Remote Desktop Connection Broker server.

        Kaspersky Thin Client saves the last entered server address with which a connection was successfully established, so you do not need to enter it again when reconnecting.

     2. In the User name field, enter the local or domain user name. You can specify the domain user name in Domain\User name format or in User name format.

        Kaspersky Thin Client saves the last entered user name that successfully connected to the server, so you do not need to enter it again when reconnecting.

     3. In the Password field, enter the user password.

        The user password is not saved; the next time you connect, you will need to enter the password again.

  4. Click Settings in the left part of the window.
  5. In the Remote Desktop Connection Broker collection ID field, specify the collection ID in the format tsv://MS Terminal Services Plugin.1.collection_id (collection_id refers to the specific identifier of the collection).
  6. In the Application alias field, specify the alias of the virtual application that you want to open.

     Kaspersky Thin Client saves the alias that you entered last, so you do not need to enter it again when reconnecting.

  7. Click the back arrow in the upper-right corner of the window to return to the connection window.
  8. In the connection window, press Enter or click Connect.

     If you are connecting to the selected virtual application for the first time and Kaspersky Thin Client is not included in an administration group, check the settings of the added certificate in the opened Add certificate window and click the Add certificate button.

     The certificate will be added to the system certificate store of Kaspersky Thin Client and will be used for subsequent connections.

     If the Kaspersky Security Center administrator has already added Kaspersky Thin Client to an administration group and added a server authentication certificate for this group, the connection will be established automatically.

     The window of the running virtual application opens and the connection session begins.

  To switch to another window of a running virtual application,

  Hover the mouse over the application icon in the connection panel in the upper part of the screen and select the relevant window from the drop-down list.

• Connect to a remote desktop managed by Basis.WorkPlace

  To connect to a remote desktop managed by Basis.WorkPlace:

  1. Turn on Kaspersky Thin Client.
  2. In the main window of Kaspersky Thin Client, click the Basis.WorkPlace button.
  3. In the connection window that opens, specify the Basis.WorkPlace connection settings:
     1. In the Server field, specify the IP address or name of the Basis.WorkPlace connection manager server.

        Kaspersky Thin Client saves the address of the Basis.WorkPlace connection manager with which a connection was successfully established, so you do not need to enter it again when reconnecting.

     2. In the Domain field, enter the domain name.
     3. In the User name field, enter the user name.

        Kaspersky Thin Client saves the user name that last successfully connected to Basis.WorkPlace, so you do not need to enter it again when reconnecting.

     4. In the Password field, enter the user password.

        The user password is not saved; the next time you connect, you will need to enter the password again.

        If the number of allowed incorrect password entry attempts is exceeded, the user account will be blocked. The corresponding message will be displayed in the remote desktop connection window. The number of allowed password entry attempts is defined by the active security policy set by the Basis.WorkPlace administrator.

  4. Click the Connect button.

     If you are connecting to a remote desktop managed by Basis.WorkPlace for the first time and Kaspersky Thin Client is not included in an administration group, check the settings of the added certificate in the opened Add certificate window and click the Add certificate button.

     If Kaspersky Thin Client was previously added to an administration group that is managed through the Kaspersky Security Center Web Console and the Kaspersky Security Center administrator added a certificate for authenticating the Basis.WorkPlace broker for this administration group, the connection to a remote desktop managed by Basis.WorkPlace is established automatically.

     The certificate for authenticating the Basis.WorkPlace broker will be added to the system certificate store of Kaspersky Thin Client and will be used for subsequent connections.

     A window for selecting a remote desktop opens showing all desktops that are available for connection.

  5. If you need to refresh the list of desktops, click the Reload button.
  6. Click the button with the name of the desktop to which you want to connect.

  After a few seconds, the monitor will show the remote desktop to which you are connected.

  In the window for connecting to desktops managed by Basis.WorkPlace, you can also configure the connection settings by clicking Settings.

  The Basis.WorkPlace administrator can restrict access to desktops managed by Basis.WorkPlace. For example, the administrator can lock your user account or block access to remote desktops managed by Basis.WorkPlace that were previously available to your user account. If you encounter any problems connecting to a remote desktop, we recommend contacting your Basis.WorkPlace administrator.

• Connect to a remote environment in the Web Access application

  In the Web Access application, you can connect to a remote environment deployed in Citrix Workspace and VMware Horizon infrastructures. Web Access supports HTML5 and provides a secure HTTPS connection when connecting.

  To connect to a remote environment in the Web Access application:

  1. Turn on Kaspersky Thin Client.
  2. In the Kaspersky Thin Client main window, click Web Access.
  3. In the connection window that opens, provide the required remote environment server address in the Server field.
  4. Click the Connect button.

     If you are connecting to this remote environment for the first time and Kaspersky Thin Client is not included in an administration group, check the settings of the added certificate in the opened Add certificate window and click the Add certificate button.

     If Kaspersky Thin Client was previously added to an administration group that is managed through the Kaspersky Security Center Web Console and the Kaspersky Security Center administrator added a certificate for authenticating the server web address for this administration group, the connection to the remote environment is established automatically.

     The certificate for authenticating the server web address will be added to the Kaspersky Thin Client system certificate store and used for future connections.

     If there is only one remote desktop that you can connect to, your monitor will display the remote desktop to which you are connected. If there are several remote desktops that you can connect to, a selection window will open, displaying all the remote desktops available for connection.

     Data required for using the remote environment, including cookies, will be stored on the thin client until the remote connection is terminated. After that, the data will be deleted.

  5. If you need to refresh the list of remote desktops, click the Reload button.
  6. Click the button with the name of the remote desktop to which you want to connect.

  After a few seconds, the monitor will show the remote desktop to which you are connected.

Multiple simultaneously running connection sessions are not supported.

Kaspersky Thin Client uses

Using the connection panel

The connection panel is displayed in the upper part of the screen after you successfully connect to a remote environment, and is used for managing the active connection session.

To manage a remote connection session with the help of the connection panel, do as follows:

1. To close the remote connection session, click Disconnect from server.
2. To change the thin client interface language, click the abbreviated name of the current language and select the relevant language form the drop-down list.
3. To view Technical Support information, click .

The connection panel collapses automatically when out of keyboard or mouse focus.

To switch to another window of a running virtual application,

Click the application icon in the connection panel and select the relevant window from the drop-down list.

To collapse or restore the connection panel, do as follows:

1. To restore the connection panel, click the collapsed panel or press Ctrl+Alt+Home.
2. To collapse the connection panel with keyboard focus on it, press Esc.
3. To collapse the connection panel without moving focus away from the remote session window, press Ctrl+Alt+Home.

You also can move a collapsed connection panel horizontally to the right or left.

To change the position of the connection panel,

Click the connection panel area that has no buttons and drag it with the mouse.

The position of the panel on the screen is saved for future connections, even after the thin client is restarted or shut down.

You also can control the connection panel and remote session with hotkeys.

Viewing information about Kaspersky Thin Client

You can view information about Kaspersky Thin Client under Tools → System info.

The System info section (see the figure below) shows the following data:

• Kaspersky Thin Client version number
• KasperskyOS version number
• Link to the Kaspersky Thin Client Online Help

  

  Tools. System info section

Viewing network status information

You can view Kaspersky Thin Client network connection settings and network status under Tools → Network. Information about Kaspersky Thin Client network connection settings is updated automatically at least once every second.

The Network section displays the following information about the settings for connecting Kaspersky Thin Client to the network (see the figure below):

• MAC address: MAC address of the device where Kaspersky Thin Client is installed.
• IP address: IP address of the device where Kaspersky Thin Client is installed.
• Subnet mask: subnet mask that contains the IP address of the device.
• Default gateway: address of the network gateway.
• DNS servers: addresses of DNS servers. To view all addresses (if there are more than three), hover the mouse over the setting value.
• Connection: status of the network connection of Kaspersky Thin Client and the connection speed.
• Sent: number and total size of network packets sent from Kaspersky Thin Client.
• Received: number and total size of network packets received by Kaspersky Thin Client.

  

  Tools. Network section

Viewing Kaspersky Thin Client notifications

The Kaspersky Thin Client interface displays the following types of notifications:

• Prompts to select an action by clicking a button, for example, run or defer an update. After some time, Kaspersky Thin Client will repeat any prompts that you closed without selecting an action. A prompt is considered to be resolved after you select an action.
• A prompt to go to another section of Kaspersky Thin Client to configure further settings. For example, the system prompts the user to set up monitor layout when you connect a second monitor. You can choose between going to the other system section by clicking the appropriate button or dismissing the prompt.
• Informational notifications. These notifications do not require you to take any action. Your only option is to close the notification after reviewing its contents.

If the cursor or keyboard focus are outside the notification area, unresolved and unread prompts are hidden, and the counter in the control panel displays their number.

During a connection session, update notifications are not automatically hidden. You can manually close these notifications or select the relevant action to close a notification.

To view a list of all Kaspersky Thin Client notifications,

In the Kaspersky Thin Client control panel, click .

A list of notifications is displayed if new notifications are available (see fig. below).

Kaspersky Thin Client notifications panel

Managing certificates in the thin client interface

Kaspersky Thin Client does not check to see if the certificate is on the Certificate Revocation List.

About certificates for connecting to Kaspersky Security Center

If the Kaspersky Security Center administrator replaces the certificate for connecting to Kaspersky Security Center, some cases may require confirmation of the certificate replacement. For example, this may be required if the thin client was turned off for a long time, has not synchronized with Kaspersky Security Center, and the certificate previously used to connect to Kaspersky Security Center has expired.

To confirm replacement of the mobile certificate for connecting to Kaspersky Security Center:

1. Turn on Kaspersky Thin Client.
2. In the Certificate must be replaced window that opens, view and memorize the confirmation code and provide it to the Kaspersky Security Center administrator. The administrator contact details are provided in the Certificate must be replaced window. The Kaspersky Security Center administrator sends you a certificate replacement code in response.
3. Click Next.
4. In the Certificate replacement code window that opens, enter the code provided by the Kaspersky Security Center administrator and click the Confirm button.

As a result, the new certificate for connecting to Kaspersky Security Center will be saved in the Kaspersky Thin Client certificate store and will be subsequently used to connect to Kaspersky Security Center.

About certificates used to connect to a remote environment and to a log server

If a thin client is not connected to Kaspersky Security Center and the administrator has not assigned certificates for it in the Web Console, a user could also connect to nodes and use certificates that are not controlled by the administrator. You are advised to configure the connection of a group of thin clients to a log server and to a remote environment only using certificates that were assigned by the administrator in the Web Console. These measures will help prevent Kaspersky Thin Client from connecting to untrusted nodes.

You can use or reject a certificate in the Kaspersky Thin Client interface in the following cases:

• When connecting Kaspersky Thin Client to Kaspersky Security Center for the first time.
• When connecting to a remote environment for the first time.
• When connecting to a log server for the first time.

Accepted certificates are saved in the system store of Kaspersky Thin Client.

If a thin client is included in an

Closing a connection session

To close a remote connection session,

Restore the connection panel and click Disconnect from server in the panel.

The session closes, and a connection window is displayed.

Managing Kaspersky Thin Client using hotkeys

You can use dedicated hotkeys and key combinations when working with Kaspersky Thin Client and during the connection session. The table below lists all the available hotkeys and key combinations.

Hotkeys and key combinations for Kaspersky Thin Client

Updating Kaspersky Thin Client in the thin client interface

Expand all | Collapse all

Kaspersky Thin Client can be updated only if the thin client is connected to Kaspersky Security Center.

After the updates are downloaded to the device, the Kaspersky Thin Client interface displays a notification with the time when the update will be applied.

You can install an update in one of the following ways:

• Directly from the notification about the available update
  • If you want to install the update right now, click the Restart now button in the available update notification window.

    The updates will be installed, and Kaspersky Thin Client will restart.

  • If you want to install the updates later, click Later in the available update notification window. The update notification shows how long the update will be postponed for. The time of the postponed startup of the update is set by the administrator.

    The system restart and update will be postponed.

    If you ignore or close the Kaspersky Thin Client update notification several times, the update will be installed automatically.

• When restarting or turning off the thin client
  1. In the Kaspersky Thin Client control panel, click the shutdown button .
  2. Depending on whether you plan to quit or continue working with Kaspersky Thin Client after the update, do one of the following:
     • If you want to continue working, select Update and restart in the menu that opens.

       The updates will be installed, and Kaspersky Thin Client will restart.

     • If you want to quit working, select Update and shut down in the menu that opens.

       The updates will be installed, and Kaspersky Thin Client will shut down.

• In the System update section
  1. In the Kaspersky Thin Client control panel, click and select Tools in the menu that opens.
  2. Select the System update section.

     A window opens, displaying information about the current system version and downloaded updates (see the figure below).

     

     Tools. System update section

  3. Click Install and restart. If no updates are available, the button is not displayed.

  The updates will be installed, and Kaspersky Thin Client will restart.

If a Kaspersky Thin Client update has been downloaded but you have not yet restarted, the update will be installed automatically during the next restart or shutdown of the device.

Detailed information about centralized update of thin clients using the Web Console is provided in a separate article.