Rockwell Automation Publication TM-UM001D-EN-P - December 20209
Notes:
10Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Preface
About This Publication
Download Firmware, AOP,
EDS, and Other Files
Summary of Changes
This publication provides comprehensive information for users of
ThinManager® thin client management software.
Download firmware, associated files (such as AOP, EDS, and DTM), and access
product release notes from the Product Compatibility and Download Center at
rok.auto/pcdc
ThinManager resources are also available at thinmanager.com
.
.
This publication contains the following new or updated information. This list
includes substantive updates only and is not intended to reflect all changes.
Topic Page
New Hotkey Options—Force failover to next display server and Set keyboard focus to a screen227
Portrait Mode Rotation in MultiMonitor355
New Features in Menu Bar: Clear, Disable Tab Reordering and Tear-Off, Remote View items25
Screen Selector for MultiMonitor358
Display Client Options111
Set Don’t Fragment Flag383
Reset Scale and Snap settings in Overlay Layout (Camera)144
iPhone Beacon340
Additional Resources
These documents contain additional information concerning related products
from Rockwell Automation.
ResourceDescription
EtherNet/IP Network Devices User Manual, ENET-UM006
Ethernet Reference Manual, ENET-RM002
System Security Design Guidelines Reference Manual, SECURE-RM001
.Provides declarations of conformity, certificates, and other certification details.
Describes how to configure and use EtherNet/IP devices to communicate on the EtherNet/IP
network.
Describes basic Ethernet concepts, infrastructure components, and infrastructure features.
Provides guidance on how to conduct security assessments, implement Rockwell Automation
products in a secure system, harden the control system, manage user access, and dispose of
equipment.
Provides a quick reference tool for Allen-Bradley industrial automation controls and assemblies.
Designed to harmonize with NEMA Standards Publication No. ICS 1.1-1987 and provides general
guidelines for the application, installation, and maintenance of solid-state control in the form of
individual devices or packaged assemblies incorporating solid-state components.
Provides general guidelines for installing a Rockwell Automation industrial system.
You can view or download publications at rok.auto/literature
.
Rockwell Automation Publication TM-UM001D-EN-P - December 202011
Notes:
12Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 1
Quick Setup Overview
This chapter guides you through the actions needed to build and activate a
ThinManager system.
Microsoft
ThinManager
Complete the following activities to install and configure Remote
Desktop Services.
• Build a Remote Desktop Server with the Microsoft Windows Server
2008/2008R2, 2012, or 2016 operating system. Enable the Remote
Desktop Services (Terminal Services) role.
• Create a Microsoft Remote Desktop Licensing Server and add Remote
Desktop Services Client Access Licenses (RDSCALs) for each thin client.
These were called Terminal Server Client Access Licenses (TSCALs) in
Server 2003. The servers also require a normal CAL.
• It is common to have each ThinManager-managed terminal
automatically log in to the Remote Desktop Server when it boots up.
Therefore, create a unique Windows user for each
ThinManager-managed terminal. For domain deployments, this will be
done within Active Directory. For work group deployments, this will be
done on each Remote Desktop Server. Make sure that each user has
permission to start Remote Desktop Server sessions on each Remote
Desktop Server.
• Apply appropriate security to each user profile using the standard
Microsoft techniques.
This section describes how to install, activate, and configure ThinManager.
Installation & Activation
Perform the following actions to install and activate ThinManager.
Install ThinManager software onto a computer to create
ThinManager Server.
• If using ThinManager Master Licensing, create a Master ThinManager
License and add enough Product Licenses for each
ThinManager-managed terminal.
• If using FactoryTalk Activation:
- Install the FactoryTalk Activation Manager on each computer where
ThinManager is installed.
- Download the FactoryTalk Activations for ThinManager.
- Change the License Mode in ThinManager to FactoryTalk Activation
and assign the newly downloaded activations.
Rockwell Automation Publication TM-UM001D-EN-P - December 202013
Chapter 1 Quick Setup Overview
ThinManager Database Encryption
ThinManager 11.2 introduced a major encryption change, with the Advanced
Encryption Standard, AES, used to encrypt the ThinManager database instead
of the previous encryption key. This led to a few important changes.
The database requires a password to be used as part of the encryption key and
prompts for a password as soon as it is installed or updated.
Installation
When ThinManager 11.2 and later is first run, a dialog box appears, which
prompts for a new database password.
Figure 1 - Database Password Dialog Box
1. Type a password into the Password field and click OK.
This password is used for the encryption key when the database is
configured. There are no requirements for length or complexity. You can
leave the Password field blank.
IMPORTANT
The Database Password is unrecoverable if lost.
Manual Backup
To manually back up the database, follow these instructions.
1. Choose Manage>Backup.
You are prompted to create a password for the backup.
Figure 2 - Database Password Dialog Box
14Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 1 Quick Setup Overview
2. Type the password into the Password field.
3. Type the password into the Verify field.
4. Click OK.
The manual backup password is for the copy of the database as a backup only,
not the running database. The password allows a user to backup the
configuration with a short password to send to support without the need to
send the main database password.
There are no requirements for length or complexity of the backup password.
The password can be blank.
IMPORTANT
This password is unrecoverable if lost.
Manual Restore
To manually restore an encrypted backup, follow these steps.
1. Choose Manage>Restore.
The Database Password dialog box appears and prompts for the backup
database password, not the original database password.
Figure 3 - Database Password
2. Type the Password and click OK.
Automatic Backup
ThinManager can be configured to backup the configuration automatically.
These automatic backups use the original password that was originally set
when ThinManager was set up.
The backups are now be saved in
C:\ProgramData\Rockwell Software\ThinManager
instead of C:\Program Files (x86)\Rockwell Software\ThinManager.
Configuration
Perform the following actions to configure ThinManager.
• Define the Remote Desktop Servers at Display Servers>
Remote Desktop Servers>Remote Desktop Server Wizard.
Rockwell Automation Publication TM-UM001D-EN-P - December 202015
Chapter 1 Quick Setup Overview
• Define the Display Clients at Display Clients>
Remote Desktop Services>Display Client Wizard to deploy
the applications.
• Define the Terminals using the Terminal>
Terminal Configuration Wizard.
• Associate the hardware to the Terminal configuration.
Network
Thin clients and Remote Desktop Servers need a reliable network.
Verify that traffic is allowed on the following network ports in all software and
hardware firewalls.
• UDP/67 – IP Address Assignment – Used by the PXE Server (if using
PXE boot).
• UDP/69 – TFTP – Used by the PXE Server (if using PXE boot).
• TCP/1494 - Citrix - Used by the ICA protocol (if using ICA instead
of RDP).
• UDP/1758 – Used if the default Multicast is used. If the network MTU size
is not the default, then the packet size need to be changed on the
Multicast Configuration page of the ThinManager Server
Configuration Wizard.
• TCP/2031 - Configuration - Used to pass the configuration from the
ThinManager server to the ThinManager thin clients.
• TCP/2376: Containers: This port is needed to allow an encrypted channel
for the terminal to connect to a Container Host to display the
Container content.
• TCP/3268 – Used for LDAP queries targeted at the global catalog.
• TCP/3389 - RDP - Used by the RDP protocol (if using RDP in v2.4.1
or later).
• UDP/4011 – UEFI Boot – Used when the DHCP server is on the
ThinManager server or when using the UEFI BIOS to boot.
• UDP/4900 - TFTP - Used for the TFTP download of the firmware.
• TCP/5900 - Shadowing - Used to shadow Terminals. This can be changed
on the Shadow Configuration page of the ThinManager Server
Configuration Wizard.
• ICMP Echo Packets (Ping) – Used by WinTMC and Enforce Primary.
• DHCP - Configure as needed.
VLANs and Subnets
You should have only one PXE server per network. It is a good idea to have a
separate VLAN for each ThinManager Server pair that will be replying to
PXE requests.
Network Level Authentication (NLA)
ThinManager supports Network Level Authentication (NLA) with firmware
package 7.1.113 and later.
• If a terminal has a valid Windows account entered in its configuration
for an automatic login, then the client will pass that info through NLA to
16Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 1 Quick Setup Overview
authenticate. The client will log in and start a session without the
operator noticing.
• If a terminal does not have a valid Windows account entered in its
configuration, then an NLA login screen will be displayed, requiring a
valid user account and password. This gets passed to the Remote
Desktop Server for the login. A Windows Security/Login window is
never displayed.
Note: NLA must be turned off on the Remote Desktop Servers if you want to use
a Smart Card for authentication.
Hardware
Results
Perform the following actions regarding hardware.
• Establish the IP addressing scheme for the ThinManager-managed
terminals. ThinManager-ready thin clients can use Static IP or DHCP.
ThinManager-compatible thin clients use PXE boot and, therefore,
require DHCP.
• If using Static addressing, open the IP Address menu on the thin client
and enter the IP address of the thin client and the
ThinManager Server.
• If using DHCP, configure Option 066 for the IP address of the
ThinManager Server, and Option 067 as acpboot.bin.
• If using PXE Boot, enable PXE boot by selecting Manage>PXE Server
to launch the PXE Server wizard.
• Attach the terminals to ThinManager by either:
- Turning on the terminal and selecting Create New Terminal when the
offline terminals are listed.
- Pre-creating the terminals in ThinManager and selecting the proper
terminal name when the terminal is turned on and offline terminals
are listed.
Step 1: The clients connect to the ThinManager Server and download the
firmware and configuration.
Step 2: The configuration sends the clients to the Remote Desktop Server
to log in and start a session, and delivers any additional content assigned
to the terminal’s configuration.
Rockwell Automation Publication TM-UM001D-EN-P - December 202017
Chapter 1 Quick Setup Overview
Notes:
18Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2
Sources
Content
Users
Devices
Introduction
ThinManager is a content delivery system that delivers content from a source
to a device, where a user can view and interact with the content.
ThinManager is the management system. Relevance is an extension that
allows you to grant or deny access based on location or user permissions.
This manual covers the variations of content deployment using ThinManager
®
with Relevance
Figure 4 - Thin Manager Content Delivery by Device, User, or Location
.
®
ThinManager is the tool that allows you to define sources, deploy content,
configure devices, and allow user access. Each device connects to it to receive
its configuration and instructions.
Figure 5 - Typical Simple Deployment
ThinManager is a software program that is installed on a computer in your
system. The simplest use of ThinManager is to deploy a Windows application
from a Windows Remote Desktop Server to a ThinManager-ready device.
However, ThinManager provides many more options for deploying
applications.
Rockwell Automation Publication TM-UM001D-EN-P - December 202019
Chapter 2 Introduction
Servers
Terminals
Users
PLCs
I/O
Figure 6 - Sources, Content, Devices, and User Options
These options allow a robust content delivery system.
Figure 7 - ThinManager Content Deployment
ThinManager centralizes content servers in a computer room and deploys the
content to the plant floor, office, or control room as needed.
Figure 8 - Standard Industrial Architecture
An industrial network pulls the I/O to the PLCs. The Remote Desktop Server
hosts the sessions that run the HMI and talk to the PLCs to gather and display
the data.
20Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2 Introduction
Source
Content
Device
Access
User
Source
Content
Devices
Locations
Users
Relevance User Access
ThinManager has an additional security system that controls deployment of
applications to users. This was formerly called TermSecure and is now
integrated into ThinManager with Relevance
Figure 9 - Access
as Access.
Relevance Location Services
The Relevance component builds on the ThinManager system by adding
location to the application delivery. This allows content to be sent to the right
person, at the right place, at the right time.
Figure 10 - Stylized Content Deployment
Figure 11 - Content Deployment in ThinManager Tree
ThinManager uses wizards to configure the ThinManager components.
You create Locations in Relevance and send content to the locations. These can
be assigned locations with a tethered terminal, or they can be unassigned
locations that have no terminal at the location and are accessed solely by
mobile devices.
Locations can be resolved manually or by using QR codes, Bluetooth beacons,
Wi-Fi networks, or GPS.
Rockwell Automation Publication TM-UM001D-EN-P - December 202021
Chapter 2 Introduction
ThinManager Interface
This section leads you through the important features on the ThinManager
interface. Press F1 to find specific information while in the
ThinManager program.
Figure 12 - ThinManager Interface
The ThinManager Interface has several components.
NoteComponentDescription
Application ButtonLaunches the ThinManager Server Configuration wizard to configure global
1
2Quick Access ToobarClick the pull-down arrow to customize this toolbar. Add icons of commonly
3Menu BarSeparates the functions into categories.
4Ribbon BarContains icons for the functions. Hide when unused via the Minimize the Ribbon
5Detail Pane TabsAllows you to choose details to display. The tabs and detail selections change
6TreeDisplays the components of ThinManager with the Outlook Bar Tab control so the
7Detail PaneDisplays the information for the selected tab for the highlighted tree component.
8Tree SelectorThe selector buttons at the bottom of the tree control select which branch is
ThinManager settings.
used tasks from the menu bar, like Restart, Send Message, Modify, Backup, and
Shadow.
command on the Quick Access pull-down arrow menu.
depending on what is selected in the tree. Drag the tabs to change the order.
branches of the ThinManager tree are shown one at a time.
The Detail Pane can be torn away by dragging the tab away from ThinManager.
The Detail Pane can be re-docked by dragging the pane title bar back to the
tabs.
active and visible. These can be pulled upwards to stack the buttons, or pulled
down to minimize the buttons.
22Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2 Introduction
Tree Selector Buttons
Minimized Buttons at the Bottom
Buttons Stacked
Figure 13 - Tree Selector Buttons - Minimized Buttons at the Bottom/Buttons Stacked
Stacking the buttons provides quicker switching, but the minimized buttons
allows more room to show components in a larger system.
There is an arrow that allows customization tasks—like hiding branches or
reordering the branches of the tree.
Menus
The menus of ThinManager use the Microsoft Outlook ribbon but contain
similar functions as previous versions.
This is a brief description. Many of these functions will be explained in greater
detail in the sections of the manual that cover setup and configuration.
Figure 14 - Edit
FeatureDescription
Add ThinManager ServerAllows connection to, and managment of, other ThinManager Servers from your local
DisconnectBreaks the connection to the remote ThinManager Server.
RemoveDeletes the remote ThinManager Server from the local list. Does not affect the remote
RefreshRefreshes the data.
ModifyOpens the configuration wizard for a highlighted tree component.
interface. Appropriate permissions on the remote computer are required for access.
Intended for a remote connection, not the partner in a synchronized pair.
ThinManager Server.
Rockwell Automation Publication TM-UM001D-EN-P - December 202023
Chapter 2 Introduction
FeatureDescription
AddLaunches a new configuration wizard for a highlighted tree component.
Add GroupLaunches a group configuration wizard for a highlighted tree component.
CopyLaunches a dialog that allows you to create a copy of a highlighted item.
DeleteDeletes a highlighted item.
RenameRenames a highlighted item.
LockLocks a highlighted item.
UnlockUnlocks a locked item.
FindUse to search for names, descriptions, IP addresses, and other data in the tree.
Find NextRepeatedly search for a term.
Figure 15 - Manage
FeatureDescription
PackagesOpens the Package Manager window.
RestoreOpens a file browser to let you restore a previously saved ThinManager configuration.
Backup
Restore Biometric
Database
Backup Biometric
Database
Synchronize
PXE ServerLaunches the PXE Server configuration wizard.
ThinManager Server ListOpens the ThinManager Server configuration wizard for automatic synchronization.
DNS Configuration
Configure Default Terminal
Web ManagementAllows web access management when it is implemented in the future.
Manage Accounts
Synchronize Passwords
Settings (Active Directory)
Manage Resolvers
Access Groups
Settings (Relevance)
Opens a file browser that lets you back up and save a ThinManager configuration for
emergency restoration. This backup can be automated using the Scheduler.
Opens a file browser to let you restore a previously saved Biometric database.
Opens a file browser to let you save your Biometric data.
Use to manually synchronize a pair of ThinManager Servers if you are not using the
recommended automatic synchronization.
Opens the DNS configuration wizard to allow ThinManager to resolve names using
your DNS.
Allows configuration of the default Terminal if you are using auto-creation
of Terminals.
Allows password management of Active Directory accounts. SeeManage Accounts
Management on page 462 for details.
Allows synchronization of passwords between ThinManager and the Active Directory for
the chosen accounts. SeeSynchronize Password on page 467
Allows you to use Active Directory, set Password Settings, and select whether to use
Windows Security Groups or Active Directory Organizational Units for Relevance. See
Settings on page 468
Opens the Resolver Management window that lets you Add, Delete, and Edit resolvers
added through a mobile device. SeeMobile Device Interactions with Relevance
page 507for details.
Opens the Access Groups dialog box where you create access groups for Relevance User
Services. SeeRelevance Access Group Creation
Opens the Relevance Settings window that lets you define iBeacons and manage Bluetooth
filtering.
for details.
on page 404for details.
for details.
on
24Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2 Introduction
Figure 16 - Install
FeatureDescription
Firmware PackageUpdates a firmware package, which consists of a firmware version and the modules for that
FirmwareUpdates the firmware without an update of modules.
ModulesUpdates a module without an update of the firmware.
Boot LoaderUpdates the boot loader used in PXE boot.
Chain LoaderUpdates the chain loader used in PXE boot.
LicensesLaunches the Licensing window to add licenses to ThinManager.
License ModeSelects between the traditional ThinManager licensing or the Rockwell Automation FactoryTalk
TermCap DatabaseThe Terminal Capability Database has information on the abilities of every ThinManager-ready
ReportsAdds a report and SQL query if you need a newly released one before it is added in a service
version.
activation.
thin client. A new version is released with every newly supported thin client. Service packs
update the TermCap but this allows you to update the TermCap if a new unit you have is not
listed.
pack.
Figure 17 - Tools
FeatureDescription
RestartResends the configuration to a highlighted terminal.
RebootCycles power to a highlighted terminal and reloads the firmware and configuration.
Reboot Server
Power Off
Power On
Calibrate Touchscreen Initiates the calibrate touchscreen program on a highlighted terminal.
Send MessageSends a message to a highlighted terminal.
EnableRe-enables a disabled terminal, Remote Desktop Server, or location.
Disable
ClearClears the event log for the highlighted Terminal or Remote Desktop Server.
Cycles power to a highlighted Remote Desktop Server. Although it will give you a warning
prompt, do not use unless you are serious about restarting a Remote Desktop Server. All
sessions end abruptly when the server is rebooted.
Powers off a highlighted virtual machine or thin client with a Wake-On-LAN
function enabled.
This will power on a highlighted virtual machine or a thin client with a Wake-On-LAN function
enabled.
Disables a highlighted terminal, Remote Desktop Server, or location.
A terminal stops showing the session but shows a ThinManager splash screen. The session
continues to run on the Remote Desktop Server.
A disabled Remote Desktop Server kicks off all the ThinManager thin clients from the Remote
Desktop Server, and forces them to a backup server. The Remote Desktop Server is still
functional and allows RDP connections from other sources. This is useful to force failover to a
backup so you can update your Remote Desktop Servers on the fly.
A location will stop showing the session when disabled.
Rockwell Automation Publication TM-UM001D-EN-P - December 202025
Chapter 2 Introduction
Figure 18 - View
FeatureDescription
Status BarCheck to display the status bar at the bottom of the ThinManager interface.
Show Connected Only
Options
ApplicationUse to choose the color scheme for ThinManager.
TabsUse to choose the tab scheme for ThinManager.
Disable Tab Reordering
Disable Tab Tear-Off
Select Reports
PrintUse to print a highlighted Report tab.
Hides any unpowered or unconnected thin clients. Although it can be useful, it is best left
checked as it can be confusing when the unpowered terminal is hidden.
Launches the Options window with the settings for license notifications, and allows new
terminals and users to initiate a Terminal Configuration Wizard or Relevance User
Configuration Wizard.
Check to lock the Detail Pane tabs in their current position. Normally, the tabs can
be rearranged.
Check to lock the Detail Pane tabs in their current position. Normally, the tabs can be dragged
free from the ThinManager console.
Opens the Select Reports window that lets you select the reports for the various components.
Select the Report tab for a highlighted component to see the actual report or use the Scheduler
to generate a report automatically.
Figure 19 - Remote View
FeatureDescription
InteractiveCheck to click into and control a shadow session. Clear this option for view-only mode.
Scaled to Window
Go Full Screen
Send Keys Sends the selected key sequence to a shadowed terminal.
Zoom In
Zoom Out
Connect Options
Shrinks the shadowed terminal to fit into the details pane. Clear this option to show it in the
correct resolution with scroll bars to give you a closer view.
Makes the shadowed terminal’s image full screen. Use CTL+ALT+Break to undo full screen. To
close ThinManager, use ALT+F4.
Use to click inside a shadow session and zoom in for detail. This option is dimmed until the
Interactive checkbox is cleared.
Use to click inside a shadow session and zoom out for an overview. This option is dimmed until
the Interactive checkbox is cleared.
Use to configure the RDP settings when you connect to a Remote Desktop Server console from
ThinManager.
26Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2 Introduction
Figure 20 - Help
FeatureDescription
AboutShows the version and build number of ThinManager.
HelpLaunches the ThinManager Help.
Customizing the Toolbar
Select More Commands from the Customize Quick Access Toolbar pull-down
menu to launch the Customize window and add icons of frequently
used functions.
Figure 21 - Customize Quick Access Toolbar Menu
Rockwell Automation Publication TM-UM001D-EN-P - December 202027
Chapter 2 Introduction
Figure 22 - Customize Window
FeatureDescription
Choose commands fromUse to select commands from each group.
Commands
Show Quick Access Toolbar
below the Ribbon
Lists the available command options. Select one and click Add to move it to the
right-hand list to add it to the Quick Access bar. Adjust the order using the up and
down arrows.
Check to move the Quick Access bar.
Figure 23 - Quick Access Toolbar
The icons for the selected functions appear in the Quick Launch menu. Click
one to launch that function or wizard.
Icons
ThinManager tree icons show the status of components.
ThinManager Server
The ThinManager Server branch has two ThinManager icons.
28Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Chapter 2 Introduction
Figure 24 - ThinManager Server Tree Icons
IconDescription
Green ThinManagerThinManager console is talking to the ThinServer.
Red ThinManager
ThinManager console is not talking to the ThinServer. Right-click on the icon and select
Reconnect from the menu.
Note: You should not add the second ThinManager Server of a synchronized pair in
the tree of your Primary ThinManager Server. The data is the same.
Adding a second ThinManager Server is intended to display a remote connection to a
different system.
Terminals
The Terminal branch of the ThinManager tree has several different icons.
Terminal Tree Icons
IconRepresents
Dual MonitorA Terminal Group
LockA Terminal with an open configuration wizard
Exclamation MarkA Terminal with a configuration change that needs a restart
GlobeA Terminal with an assigned Location, which is shown in parentheses
Green Monitor A Terminal that is booted and connected to the ThinManager Server
Yellow MonitorA Terminal that is going through the boot process
User
Red MonitorA Terminal that is either turned off or not able to communicate with the ThinManager Server
Red XA Terminal that was Disabled using the Tools>Disable command
Rockwell Automation Publication TM-UM001D-EN-P - December 202029
A Terminal that has a Relevance User logged in to the Terminal. The user name is shown in
parentheses.
Chapter 2 Introduction
Display Servers
The Display Server tree has several different icons.
Figure 25 - Display Server Tree Icons
IconRepresents
Blue ServerThe Remote Desktop Server branch
Server with FolderA Remote Desktop Server Group
Server with Virtual BoxesA Virtual Server defined through the VCenter Server tool
Blue CameraThe Camera branch
Camera with FolderA Camera Group
Gray CameraA Camera
Blue EyeThe VNC Server branch
Cyan Eye with FolderA VNC Server Group
Cyan EyeA VNC Server
Figure 26 - Remote Desktop Server Icon Colors
30Rockwell Automation Publication TM-UM001D-EN-P - December 2020
Loading...
+ 546 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.