Remote HMI V7

The Remote Desktop Protocol (RDP) is a protocol for remote access. It can be used to display and control screen content of a remote workstation. RDP is an integral part of all Windows operating systems.

A special session is started on the server for the RDP access, and only the connected client can access this session.

The size of the displayed screen content is determined by the Thin Client's display size. If the screen content is only displayed on one half of the Thin Client it will be scaled accordingly.

A Windows server is required for several RDP connections to access one server. A client access licence is required for each client to access and connect to the Windows server. Licencing depends on the operating system of the server.

Either the computer name or the server IP address can be used for addressing.

If you want the option of redundant connections we recommend you use the DNS naming system.

Virtual Network Computing (VNC) is a platform-independent server system. VNC operates according to the Client-Server model.

The VNC service displays the screen content of a remote PC (server) on a local computer (client). The client sends the keyboard and mouse actions to the remote server. This way, the client can use the resources, applications and programs of the server.

The server's display size determines the size of the displayed screen content. If the server display screen ratio is different to that of the Thin Client, the screen content will be compressed or displayed with black edges.

VNC allows multiple access to the server. The display of the clients is then synchronised.

The VNC service must be installed on the remotely controlled PC (host). The Thin Client accesses the VNC server via a VNC viewer application. The installation and configuration of the VNC system on the server and the client requires administrator access authority. The VNC communication between server and client does not require this level of access authority.

VNC services are available from various providers. Depending on the VNC server, these systems have different functionalities.

For detailed information and a description of the VNC service, please refer to the documentation of the provider.

In order to be able to establish a VNC connection, the VNC server system must be activated on the host. The VNC service acquires the IP address needed for this connection from the settings of the PC's network connection. Depending on the configuration, the IP address is specified manually or allocated by a DHCP server. In the firmware's address book, this IP address is defined as the server IP of the VNC connection.

The way this connection is established depends on the settings of the VNC server and can either be

• a direct connection that is not password-protected
• a connection with VNC password
• a connection with Windows password

KVM over IP provides remote access to keyboard-video-mouse systems (KVM). With these systems, a workstation is connected with keyboard, mouse and screen via an external KVM-over-IP box. The KVM-over-IP box is integrated into the network via an Ethernet interface. Data transmission is via the VNC protocol. A VNC service has been installed to establish the connection. The workstation that is part of the KVM system does not require a network connection or a software installation.

Use the camera option to select a camera by entering the IP address. This option is only available with the PRO licence. After you have entered a web address, a browser window will pop up across the entire screen. Only one active connection can be established at a time.

The Thin Client has been designed as a closed system based on Windows® 10 IoT Enterprise LTSC 2021.

As a standard, the Thin Client comes equipped with the Windows 10 IoT Enterprise operating system and activated Windows 10 LTSC.

If Windows 10 LTSC is not activated (after a reset, for example), it can be activated under menu item Maintain (see Activating Windows).

We recommend you activate the firewall and virus protection and permit all necessary security updates.

Any further measures to protect the process network are the responsibility of the operator of the facility.

Overview of security functions

The access authority system of the Remote firmware is based on three user roles. These are tiered in a hierarchy.

The Admin and Engineer user roles can be password-protected in the Access Control menu.

When the firmware is started up for the first time, the user roles are de-activated and the firmware starts with the Admin user role. Password protection is not active.

The register bar contains the following functions:

The system information contains the following data:

• Date & Time Date and time
• System Thin Client data
• Free RAM available memory
• User current user role
• Network 1 Status, IP address and speed for network adapter 1
• Network 2 Status, IP address and speed for network adapter 2

The basic settings contain buttons for operating the touchscreen. If no touchscreen is connected, the functions are greyed out.

This display indicates the status of the Ethernet connection.

Applications can only be used with a firmware Pro licence.

Once applications (apps) have been set up, they are shown as buttons. More than one app can be started. The status of the app is shown.

Remote connections can be selected from the address book.

Status of the remote connection

Navigation elements

Operating elements

Operating elements vary depending on the menu.

Login is only required when the user roles have been activated. Operators have access to the system without login.

By clicking on the eye symbol, the password can be entered invisibly. To make the password visible, the user must delete and then re-enter the password.

In the factory state, the user roles are deactivated and the Admin role is the standard user. When the user roles have been activated, a password is required for the Engineer and Admin roles. A user name is not required.

Changing users

1. Open the User Login.
2. Enter the password.
3. Confirm with [Login].
   • The RemoteHMI menu will open.

Automatic logon at the server

The automatic logon at the server can be configured in the settings of the remote connection. For this you need the user ID and the password for the server.

Only users with authority for remote access to the server can log on to the server. Check the user authority at the server or the KVM box.

Display position of the remote connection

The following display options are available:

Behaviour of firmware when connection is lost

You can configure how the remote connection behaves during a system startup or when it is lost, as follows:

Auto connect on system startup	On	Automatically establishes a connection during system startup, is represented by the  symbol in the address book entry
	Off	During a system startup the dial-up must be started manually
Auto reconnect on connection loss	On	Automatically reconnects after the connection has been lost. Is represented by the   symbol in the address book entry
	Off	After the connection has been lost, the dial-up must be started automatically

For Pro licence users

Activate the parallel use of several remote connections in the Settings menu under Connections . See also:

• Allowing multiple simultaneous connections

You will need the IP address or the name of the server for the configuration. These are stored in the system properties of the server.

For RDP connections, remote access must be explicitly permitted in the server's system properties. The remote access must be configured for the user.

1. Open the Address Book register.
2. Click on + Add.
   A new address book entry is created.
3. Click on Edit.
4. In the Connection Settings select "RDP" from the Type drop-down field.
5. Enter the name of the connection in the Name field.
6. Enter the IP address or name of the server in the Server Address field.
   • NOTE:
     To ensure automatic access to the connected server you have to enter the correct logon data. Please note that a domain name may have to be used together with the user name.
7. Enter the login data of the server in the User Name and Password fields.
8. If you want to be able to call up the remote connection via the keyboard, use Hotkey to specify a hotkey.
9. Go to Show on to select the display option.
10. Specify the minimum user role required for the manual set-up of the connection.
    • NOTE:
      If a user does not have the required authority to set up the connection, this connection is greyed out in the address book.
11. Click on Apply to set up the connection.
    • The connection is shown in the address book.

A VNC client is pre-installed on the Thin Client. The VNC service must also be installed on the server.

To set up the connection you require the IP address of the VNC server and, depending on the configuration, the VNC password.

To establish a connection you require a VNC server service which runs on the KVM box.

To set up the connection you require the IP address of the VNC server and, depending on the configuration, the VNC password.

1. Open the Address Book.
2. Click on +Add.
   A new address book entry is created.
3. Open the address book entry.
4. In the Connection Settings select "KVM" from the Type drop-down field.
5. Enter the name of the connection in the Name field.
6. Enter the IP address of the KVM box in the Server Address field.

   Device type	Default IP address	Username	Password
   Digital Ipeps	192.168.1.42	admin	no password " "
   Digital Ipeps+	192.168.1.42	admin	no password " "
   Infinity Dual 2112T	192.168.1.42	admin	no password " "
   5x6 Digital	192.168.1.22	admin	top secret

7. Enter the login data of the KVM box in the User Name and Password fields.
8. If you want to be able to call up the remote connection via the keyboard, use Hotkey to specify a hotkey.
9. Go to Show on to select the display option.
10. Specify the minimum user role required for the manual set-up of the connection.
    • NOTE:
      If a user does not have the required authority to set up the connection, this connection is greyed out in the address book.
11. Click on Apply to set up the connection.
    • The connection is shown in the address book.

The image displays a connection settings page for the remote HMI software. The following options are available

• Name: This tab allows users to assign a specific name to the camera for easy identification within the software.
• Camera Address: This tab allows users to enter the IP address, URL or port of the camera. This is necessayr for establishing a connection.
• Username: This tab is for entering the username required to access camera, enhancing security.
• Camera Profile: Users can select or define a camera profile, which may include settings related to resolution, frame rate, or specific features of the camera.
• Position: This tab allows users to set the physical position or orientation of the camera, which can be important for monitoring specific areas.
• Hotkey: Users can configure a hotkey for quick access to the camera feed or specific functions, improving efficiency during use.
• Password: This tab is for entering the password associated with the camera, ensuring that only authorized users can access the stream.
• Scaling: This tab allows users to adjust the scaling settings for the camera feed, ensuring that the image displays correctly within the HMI interface.

This option can be used to open the web browser in kiosk mode. By entering an internet address, a browser window will pop up across the entire screen. The connection can be established by entering the connection name or the URL. Only one connection can be used at a time.

The touchscreen is calibrated via specific calibration points (top left, centre left, bottom left, top centre, centre centre, bottom centre, top right, centre right, bottom right). These are shown one after the other during calibration.

Calibrating a touchscreen

1. Tap on Calibrate Touchscreen to start the calibration process.
   The display becomes monochrome and the first calibration point pops up.

1. Tap on this calibration point and keep it pressed until its colour turns from blue to red and back to blue again (visual feedback).
   The next calibration point pops up.
2. Repeat step one for every calibration point. Make sure you hit the points exactly.
   After the last calibration point has been dealt with, the following message will pop up:
   Please touch the button above to confirm correct calibration.

1. Confirm the calibration by tapping on Confirm.
   • Once the touchscreen has been calibrated, the display returns to the RemoteHMI menu.

If the calibration has not been performed correctly it cannot be confirmed. The calibration process will re-start automatically after 10 seconds.

If two touchscreens are connected, the button is split. You can calibrate each touchscreen separately.

1. The left hand side of the Calibrate Touchscreen 1 button starts the calibration of the first touchscreen.
2. The right hand side of the Calibrate Touchscreen 2 button starts the calibration of the second touchscreen.

To increase the service life of the backlight we recommend you activate the Backlight Auto Dimming function (see Display settings).

• Tap on +to increase display brightness.
• Tap on -to reduce display brightness.

Tapping on the touchscreen simulates a click with the left mouse key. If you want to open the context menu of applications you have to simulate a right mouse key click.

Calling up the context menu of an application

1. Tap on Touchscreen Rightclick to activate the functions of the right mouse key.
2. Place your finger or pen on the position where you want to click with the right mouse key. A circle appears around the point of touch.
3. Keep your finger or pen on the screen until the circle is complete.
4. Remove your finger or pen once the circle is closed.
   • The context menu pops up.

If no context menu pops up, no context menu is available for the position you clicked on.

If you remove your finger or pen before the circle has closed the right mouse key click is aborted.

• Tap on Clean Display to deactivate the touch functions for 30 seconds.
• Clean the touchscreen.

You will need the IP address or the name of the server for the configuration. These are stored in the system properties of the server.

For RDP connections, remote access must be explicitly permitted in the server's system properties. The remote access must be configured for the user.

1. Open the Address Book register.
2. Click on + Add.
   A new address book entry is created.
3. Click on Edit.
4. In the Connection Settings select "RDP" from the Type drop-down field.
5. Enter the name of the connection in the Name field.
6. Enter the IP address of the server in the Server Address field.
   • NOTE:
     To ensure automatic access to the connected server you have to enter the correct logon data. Please note that a domain name may have to be used together with the user name.
7. Enter the login data of the server in the User Name and Password fields.
8. If you want to be able to call up the remote connection via the keyboard, use Hotkey to specify a hotkey.
9. Go to Show on to select the display option.
10. Specify the minimum user role required for the manual set-up of the connection.
    • NOTE:
      If a user does not have the required authority to set up the connection, this connection is greyed out in the address book.
11. Click on Apply to set up the connection.
    • The connection is shown in the address book.

A VNC client is pre-installed on the Thin Client. The VNC service must also be installed on the server. Administrator authority is required on the host PC and the server for the installation.

To set up the connection you require the IP address of the VNC server and, depending on the configuration, the VNC password.

If the port number of the VNC server is different from the standard port, the IP address needs to be extended to include the port number, for example: 192.168.1.23:5901

1. Open the Address Book register.
2. Click on +Add.
   A new address book entry is created.
3. Click on Edit.
4. In the Connection Settings select "VNC" from the Type drop-down field.
5. Enter the name of the connection in the Name field.
6. Enter the IP address of the server in the Server Address field.
   • NOTE:
     To ensure automatic access to the connected server you have to enter the correct logon data.
7. Enter the logon data of the server.
8. If you want to be able to call up the remote connection via the keyboard, use Hotkey to specify a hotkey.
9. Go to Show on to select the display option.
10. Specify the minimum user role required for the manual set-up of the connection.
    • NOTE:
      If a user does not have the required authority to set up the connection, this connection is greyed out in the address book.
11. Click on Apply to set up the connection.
    • The connection is shown in the address book.

The process varies according to which VNC service is used. For more information, please refer to the documentation provided by the VNC service manufacturer.

1. Make sure that the Thin Client can contact the host. If both are part of the same network, this will be the case.
2. Make sure the VNC service is installed and activated on the host (see Activating VNC server system on the host).
3. If the network connection is protected via a firewall you need to configure this firewall. Permit network communication via the port where the VNC service is ready to receive (5900 as a standard).
4. If the network connection is protected via a router, you need to configure this router. For the transfer of network communication, specify every configured port where the VNC service is ready to receive (5900 as a standard).
5. Check whether the VNC service is working properly and whether it accepts incoming connections.
   • The host is ready.

The process varies according to which VNC service is used. For more information, please refer to the documentation provided by the VNC service manufacturer.

1. Make sure that the Thin Client can contact the host. If both are part of the same network, this will be the case.
2. If the VNC connection of the Thin Client is protected via a proxy server you have to specify the proxy server in the VNC viewer.
   • The Thin Client is ready.

Enables you to perform system maintenance in the Administrator account and install applications on the Thin Client, for example.

1. Open the Maintenance menu.
2. In the Main window, click on Maintain System.
   A safety check will pop up.
3. Confirm with Yes.
   The system changes to the login window, allowing you to log in to the Administrator account of the regular Windows user interface.
4. Make the required system changes.
   • Usually, a system restart is required to apply the changes.

1. Open the Maintenance menu.
2. In the Main window, click on Restart System.
   A safety check will pop up.
3. Confirm with Yes.
   • The system restarts.

Certain changes to the firmware require a Thin Client restart.

1. Open the Maintenance menu.
2. In the Main window, click on Shutdown System.
   A safety check will pop up.
3. Confirm with Yes.
   • The system shuts down.

"Advanced Startup" is a special menu containing additional options for error fixing and maintenance of the operating system. It features various tools and modes for troubleshooting, carrying out diagnostics or configuring the system. Below is a list of the main functions and options available with "Advanced Startup":

1. Access to advanced repair and restore options

• Restore system: restores system to a previous status without deleting personal data.
• Restore system image: restores system from a previous image (backup).

2. Troubleshooting

• Settings reset: use to reset Windows to factory settings, with optional retaining of personal data
• Input request: opens a command line for advanced diagnostics and repairs
• Start repair: fixes common problems that prevent the start of Windows
• Change start settings: lets you boot in secure mode or deactivate advanced driver options.

3. Boot options

• Show boot manager: choose between different installed operating systems
• Start from a different device: lets you boot from a CD/DVD, a USB stick or from the network.

4. Adjust driver and settings

• Deactivate driver signature check: useful for installing non-signature drivers
• Deactivate forced new starts in case of errors: lets you display bluescreen errors (BSOD).

5. UEFI/BIOS options

• UEFI firmware settings: allows access to BIOS / UEFI settings, for example to activate secure boot or change the boot sequence

You can reset the firmware settings to their factory state.

A reset means:

• Address book entries are deleted
• The application list is deleted
• Network configuration is reset to "automatic"

The following settings will not be reset:

• Keyboard layout
• Windows text and element size
• Computer Name

You can use the Export function to save the address book entries, the application list and network settings separately. Then use the Import function to restore the intact settings (see Import and Export).

1. Open the Maintenance menu.
2. In the Main window, click on Reset all Settings.
   A safety check will pop up.
3. Confirm with Yes.
   • The system is reset to its factory state.

Use this dialogue to pair or add peripheral devices such as USB or Bluetooth devices.

1. Open the Maintenance menu.
2. Connect the new device to the Thin Client
3. In the Device window, click on Add/Pair Device.
   The system will change to the Control Panel/Hardware and Sound/Devices and Printers window.
4. Add a new device with Add a device .
5. The system dialogue for adding a device will start.
6. Choose the device type.
7. Follow the instructions of the system dialogue.
8. The device is ready to be used once the device drivers have been installed and the device has been configured.
9. Test whether the device is working properly.

Opening the event log

1. Open the Maintenance menu.
2. In the Event log window, click on View Event Log.
   The system will change to the "Event Viewer" at the system level.

It may take a while for all of the recent events to be listed. Wait until the list is complete.

• You can find all events on the list.

The UWF filter must be deactivated before you can carry out this process.

Activating the licence online via internet access

1. Open the Maintenance menu.
2. Make sure the Thin Client has internet access.
3. In the Pro Edition License Activation menu, activate the Online function.
4. Enter the licence key in the Product key field.
5. Enter the name of the company in the Company Name field.
6. Enter the name of the licence holder in the Name field.
7. Enter the e-mail address of the licence holder in the Email Address field.
8. Click on Activate Pro License.
   The system will issue a message.
   If the activation has been successful, the Pro Edition License Activation section will be hidden.

Activating the licence offline

1. Open the Maintenance menu.
2. In the Pro Edition License Activation menu, activate the Offline function.
3. In the browser, go to the following website: remotehmi-licensing.stahl.de.
4. Go to page License Activation.
5. Fill in the form and request the activation code.
   • NOTE:
     You will receive an e-mail with the activation code to the e-mail address specified in the form. This may take up to five minutes. If you receive no such e-mail, please check your spam folder.
6. In the Maintenance menu, enter the product key in the Product key and the activation code in the Activation Code field.
7. Click on Apply Pro License.
   The system will issue a message.
   If the activation has been successful, the Pro Edition License Activation section will be hidden.

The UWF filter must be deactivated before you can carry out this process.

The Windows 10 IoT Enterprise LTSC operating system is pre-installed on delivery. If Windows 10 IoT Enterprise LTSC is deactivated after a system reset for example, you can re-activate it via telephone or internet access. A system dialogue will guide you through the re-activation via telephone.

Activating the operating system via telephone

Activation is carried out via Microsoft's telephone service.

1. Open the Maintenance menu.
2. In the Windows Activation window, click on Activate by phone.
   The Windows activation system dialogue will start.
3. Select your country or region in the Select your country or region window.
4. Click on Next to navigate to the Call and provide your installation ID window.
5. Dial the telephone number given and follow the instructions given in the telephone dialogue.
6. Click on Next to navigate to the Enter your confirmation ID window.
7. Enter your confirmation ID.
8. Click on Activate Windows to activate the operating system.
   
   The system will issue a message.
   If the activation has been successful, the Windows Activation section will be hidden.
   • The Information menu lists the activated operating system under System.

Activating the operating system via an internet connection

The Thin Client needs to have internet access.

1. Open the Maintenance menu.
2. In the Windows Activation window, click on Activate over Internet.
   This process may take up to one minute.
3. Wait until the system issues a message.
   If the activation has been successful, the Windows Activation section will be hidden.
   • The Information menu lists the activated operating system under System.

The Thin Client can be addressed via the IP address or the computer name in the network. The computer name can be used for remote access to the Thin Client via VNC, for example. The computer name should therefore be unique in the network.

1. Enter the name in the Computer Name field.
   • NOTE:
     It might make sense in large networks to enter a description too, in order to be able to identify the device faster.
2. Enter an informative description of the device in the Description field.

Use this option to change the formats of date and time.

The operating system can manage power consumption on a system-wide basis. The system will shut down and resume quickly, and wake up when required.

Use the proxy server to control and limit access to internet resources, for example. The client request is forwarded to the target server with the IP address of the proxy server.

Using a proxy server

1. Identify the IP address or the network name of the proxy server.
2. Activate the Use a Proxy Server function.
3. Enter the IP address or the network name of the proxy server.

Don't use a proxy server

1. Deactivate the Use a Proxy Server function.

Configuration of remote access to the Thin Client via VNC and RDM

1. Activate Allow configuration export/import via RemoteHMI Device Manager to allow the export and import of the Thin Client configuration via the RemoteHMI Device Manager.
2. Activate Allow remote access via VNC to allow the VNC remote access to the Thin Client.
3. Specify a password for remote access.
4. As an option, specify a password for read-only remote access.
5. Click on Advanced VNC Server Configif you need to change the VNC settings.
6. Click on Input blocking during remote access to define access behaviour during a remote connection.
7. Activate Off to allow local and remote operation during remote access.
8. Activate Local to block local operation of the Thin Client during remote access.
9. Activate Remote on local activity, inactivity timeout = 3 sec to block the remote operation via local operation during remote access.
   This block is removed if no local operation occurs during a specified idle period. The factory setting for this idle period is 3 seconds. This can be adjusted.
10. To adjust the idle period, click on Advanced VNC Server Config.

You can save login data for access to the Windows Administrator account under Windows Admin Account Login Credentials. The login data is needed to start applications via the firmware that require Administrator or other elevated rights.

If you save the login data,

• you no longer need to enter the data every time you start the app
• users who do not know the login data can start the app

1. Enter the login data of the Windows admin account in the Name and Password fields.

We recommend you activate the Windows firewall and the virus protection, and allow all necessary security updates. In its factory state, these functions are activated.

Activating Windows security

The Thin Client must be connected to the internet for the automatic download of security updates. If this function is deactivated, you have to manually keep up with, acquire and implement updates at the system level.

1. Activate the Windows Firewall.
2. Activate the Windows Defender
3. Activate the Windows Security Updates to allow the installation of security updates.

The Unified Write Filter (UWF) is a write protection for the SSD and can be activated in the Protection menu. Use the UWF to protect the SSD from accidental writing. It transfers all write access to an overlay buffer in the RAM.

This prevents premature wear of the SSD and a corruption of system files after a sudden network failure. Also, viruses and Trojans are not permanently stored in the system, since all changes stored in the overlay buffer are deleted when the device is switched off.

Activating the data memory protection

1. In the Protection menu, activate the Drive Protection (UWF) function.
2. Confirm the request for a restart.
   • After the restart, the data memory protection is activated.

Depending on your security concept, you can block the use of USB devices or permit the use of connected USB devices in the Protection  menu. You can allow the use of other devices can via the Teach-In function.

Blocking the use of USB mass storage devices

1. Under USB Lockdown, activate the Block USB mass storage devices only function.
2. Confirm your selection with Apply.
   All USB storage devices are blocked.

Blocking the use of new USB devices

Use this function to block all USB devices that are not or have never been connected to the Thin Client.

1. Open the Protection menu.
2. Under USB Lockdown, activate the Block access to USB devices function.
3. Activate Block new USB devices only.
4. Confirm your selection with Apply.
   The specifications of the connected USB devices will be saved.
   • New USB devices are blocked.

Allowing the use of connected USB devices

1. Under USB Lockdown, activate the Block access to USB devices function.
2. Connect the USB devices you want to permit.
3. Activate Block all USB devices except connected.
4. Confirm your selection with Apply.
   The specifications of the connected USB devices will be saved.
   • All registered USB devices are cleared for use.

Clearing further USB devices for use (Teach-In)

1. Under USB Lockdown, activate the Block all USB devices except connected function.
2. Deactivate Block access to USB devices.
3. If applicable, remove already connected USB devices and connect the new ones.
4. Activate Block new USB devices only.
5. Repeat steps 2 to 4 to add more devices.
6. When you have added all devices, click on Apply.
   • All registered USB devices are cleared for use.

The HORM function (Hibernate Once Resume Many) allows for a fast start of the Thin Client from a fixed system image (snapshot). After the start, the system is in exactly the same state as when the last HORM snapshot was taken. This means that applications running in the Pro version do not have to be restarted, but are available right away.

Taking a snapshot of the main memory

1. Activate memory protection under Drive Protection (UWF).
2. Activate the Resume System from same snapshot on every device startup function.
3. Confirm your selection with Apply.
4. Confirm the request for a restart.
5. Click on Snapshot to create an image of the main memory.
6. Confirm the request for a restart to create the snapshot and restart the system.

The restart may take some time. If the system does not start properly, you can use the "Recovery Stick" to return it to its factory state. The stick is part of the delivery. Depending on the recovery stick you can also save the device configuration as a backup.

Adjusting resolution

1. Go to Resolution and select the resolution of connected displays (6 max.)
2. Activate Portrait Mode to display screen content in portrait mode.

Adjusting scaling

1. Activate Always stretch to fullscreen to always display screen content in full screen mode.
   This function may result in a distorted display.
2. Activate Maintain aspect ratio to maintain the aspect ration of the screen content.

Changing Windows text and element size

The settings are only valid for local applications and RDP connections with Windows 10/Server 2012. A greater size makes the touch screen easier to operate. Values of over 100% may result in a faulty display of local apps and apps executed via RDP.

• Select the desired size of Windows elements. We recommend 125%.
• If local apps and those executed via RDP are displayed incorrectly, reduce the value to 100%.

Activating the screen saver

1. Activate the screen saver under Screen Saver.
2. Click on After user inactivity of and specify the period of inactivity after which the screen saver should be activated (1 to 60 minutes).
3. Click on Advanced to open the screen saver settings.
4. Select a screen saver and confirm your selection.
5. Open the Display menu.
   • The screen saver starts after a period of inactivity greater than the one specified.

Automatic dimming of backlight

To increase the service life of the backlight we recommend you activate the Backlight Auto Dimming function.

1. Activate the automatic backlight dimming under Backlight Auto Dimming.
2. Click on After user inactivity of and specify the period of inactivity after which the dimming function should be activated (1 to 60 minutes).
3. Click on to brightness level and specify the level to which the backlight should be dimmed (1% to 80%).
   • The backlight is dimmed to this level after a period of inactivity greater than the one specified.

You can adjust the resolution and orientation for each display. You can also specify the order (topology) and the main screen.

The name of the displays used in the firmware is that of the port at which the display is connected.

Adjusting the display order

1. Select the resolution of each display in the Topology field.
2. Activate the Clone function if you want to display the screen contents on both displays.
3. Activate the Extend function for the second display to be an extension of the main display.
4. Select the main display under Primary Display Position (left, right).

It is not possible to change the keyboard via the firmware on Shark devices with Intel i7 CPU.

Adjusting the size of the menu and the keyboard

1. Open the User Interface menu.
2. Click on RemoteHMI and use the scroll bar to adjust the size of the menu.
3. Click on Virtual Keyboard and use the scroll bar to adjust the size of the keyboard.

Restoring device-specific factory settings

1. Open the User Interface menu.
2. In the RemoteHMI window, click on Default to restore the device-specific factory settings for the menu size.
3. In the Virtual Keyboard window, click on Default to restore the device-specific factory settings for the keyboard size.

The factory setting for the keyboard layout is the US layout (QUERTY). This applies to the virtual and external keyboards (optional). The language layout is independent of the design, coding, position and number of keys on the physical keyboard.

The language of the Thin Client system console is set to English, and this can NOT be changed.

The firmware supports various language layouts for the virtual and external keyboards. The country codes for the language layouts are those listed in ISO 3166-1, subsection ALPHA-2.

Changing the keyboard layout

1. Open the User Interface menu.
2. Go to Keyboard Layout and select the keyboard layout you want.
3. If the keyboard layout you want is not listed, use Add/Remove to add a layout.

Hotkey for opening the firmware

You can specify how to open the firmware as follows:

• The hotkey toggles the dashboard between closed and minimised state (standard)
• The hotkey toggles the dashboard between closed, minimised and expanded state (Hotkey toggles all 3 menu states)

Go to Ignore hotkeys if RemoteHMI menu is closed to specify whether the hotkeys for calling up remote connections and applications should be ignored when the dashboard is closed. The defined hotkeys are only effective if the dashboard is open. Use this function to use the same hotkeys for different purposes.

If you have defined a hotkey for opening the dashboard, this hotkey will always be active. It is not affected by this function.

Configuring the user interface

1. Open the User Interface menu.
2. Activate Show computer name in title to show the computer name in the minimised dashboard.
3. Activate Auto hide after connect to hide the dashboard after the connection has been successfully established.
4. Activate Hotkey toggles all 3 menu states to toggle between all three dashboard states via the hotkey.
5. Define the hotkey for opening the dashboard.
6. Activate Ignore hotkeys if RemoteHMI menu is closed if the hotkeys should be ignored when the RemoteHMI menu is closed.

This menu item lets you share the keyboard and pointing device with other HMIs. To use this function both the HMIs should be connected with an RS-422 cross link cable.

The keyboard / mouse sharing is not compatible with the sleep mode.

Once the sharing option is enabled, this window will pop up, showing the status of keyboard sharing.

Once the connection has been established, the keyboard icons on both HMIs will light up permanently.

The keyboard icon on the currently active HMI will light up green, while the keyboard icon of the HMI in standby mode will light up orange . If the connection is interrupted, both icons will start flashing, but will retain their colour.

1. Open the User Interface menu.
2. Activate Apply if you wish to apply the changes after leaving the register.
   • The changes are applied once you change to a different register.
3. Activate Revert if you wish to apply the changes via the Apply button.

If you don't click on Apply the changes will be discarded.

Installing a driver from a USB mass storage device

Deactivate the UWF filter to install the device driver.

1. Check whether the Thin Clients meets the system requirements of the input device.
2. Make sure that the USB mass storage device is known or deactivate the USB lockdown.
3. Open the Maintenance menu.
4. Click on Add / Remove Device to open the Thin Client system settings.
5. Install the device driver on the Thin Client.
6. Connect the input device to a free COM port. The name of the COM port depends on the HMI device platform.
7. Open the Keyboard Wedge menu.
8. Activate Simulate keyboard input via a connected reader/scanner device.
9. Click on + Add / Auto Connect to connect the device.

The configuration of the COM interface has to conform with the reader's specifications to ensure correct data transmission.

1. Open the Keyboard Wedge menu.
2. Go to Serial Communication to select the COM port of the connected device.
3. Select a suitable baud rate for the connected device.
4. Specify the following parameters Data Bits, Stop Bits and Parity for the serial interface.
   An active connection is shown in the status.

Configuring the handling of control characters

You can specify whether control characters for a line break sent by the barcode scanner should simulate the pressing of the Enter key. This may be necessary so that a scanned barcode is correctly completed and applied. CR: carriage return LF: line feed

1. Activate Translate CR to Enter-key to use "CR" as a control character.
2. Activate Translate LF to Enter-key to use "LF" as a control character.

Server keyboard layout settings

For all scanned characters, particularly control characters, to be processed correctly, the keyboard layouts of both devices must match. If the Thin Client is set to US layout, this layout must also be selected for the connected server. For connections via a KVM box this layout must also be selected in the user interface of the KVM box. The following options are available under Server Keyboard Layout US American keyboard layout: QWERTY DE German keyboard layout: QWERTZ FR French keyboard layout: AZERTY

1. Set Server Keyboard Layout to "US" to ensure faultless data transmission

Specifying data transmission delay

KVM Keystroke Delay specifies the delay before the next character is transmitted to a KVM box. This delay ensures that no character is lost during a fast data transmission to the host. The standard value is usually sufficient.

1. Only increase this value if characters are lost in the transmission.
2. Use the scroll bar or the arrows to specify the delay value (from 1 to 50ms).

Activating user roles

1. Open the Access Control menu.
2. Activate the 3-tier access management under Main.
3. Activate Limit Operator access to Dashboard to hide the dashboard's register bar from the operator.
   Operators can only see the dashboard data.
4. Enter the different passwords for the "Engineer" and "Admin" user roles in the Login Passwords fields.
5. Repeat the passwords. If the passwords are incorrect, the system will issue an error message.
6. Click on Apply to accept the settings.
   • Users with roles "Engineer" and "Admin" have to logon with their passwords.

An automatic logout can be specified for the Admin and Engineer user roles. A user is automatically logged off if he or she has been inactive for more than the pre-defined logout time.

1. Open the Access Control menu.
2. Activate Auto Logout to activate the automatic user logout.
3. Click on after user not operating RemoteHMI Menu for to specify the logout period (1 to 60 minutes).

Use the Allow Multiple simultaneous connections function to allow parallel use of multiple remote connections (multi-session connections). This enables you to:

• Change between remote connections without having to terminate a connection
• Display several remote connections on one split screen
• Display several remote connections on two or more screens

Activating multi-session connection

1. Open the Connections menu.
2. Activate Allow Multiple simultaneous connections to allow the set-up of several remote connections.

Go to On connection loss, auto reconnect to specify an interval after which a reconnect is attempted after a connection has been lost.

This function must be activated separately for each remote connection in the address book entry.

• Open the Connections menu.
• Click on On connection loss, auto reconnect after to specify after how many seconds a reconnect should be started (1 to 30 seconds).

The Connection Health Check function is used by the Thin Client to send cyclical pings (echo requests) to all servers configured in the address book. The result of these requests is shown as the connection status in the address book.

The connection health check only works properly if the servers' firewalls permit answering to an echo request.

You can switch off this function if you do not require an echo request. In this case the status of the connection is not shown in the address book.

Activating health check

1. Open the Connections menu.
2. If you are using a firewall, check whether the firewall permits echo requests, and activate the echo request.
3. Activate Ping servers to show reachable state on Address Book buttons to constantly monitor the remote connections.
4. Click on Apply .
   • The Thin Client monitors the remote connections and shows the status of the active connections.

If the echo request from the host is not possible or not wanted, deactivate Ping servers to show reachable state on Address Book buttons. The remote connections are not monitored. Not connection status is shown.

The UWF filter must be deactivated before you can carry out this process.

You can exclude the following settings from the import:

• Application List (see App management)
• Network Settings (see Network)
• Access Control Password (see Access Control)

Importing a configuration file from a USB mass storage device

1. If the USB lockdown is activated, make sure the USB mass storage device is known. Otherwise, deactivate the USB lockdown.
2. Connect the USB mass storage device.
3. Open the Import & Export menu.
4. Select the configurations you do not require from the import filter.
5. Activate USB Flash Drive.
6. Click on Import.
   A progress bar shows how far the import has proceeded.
   If the process has been completed successfully, the firmware will issue a message.
7. If an error message is issued, check whether the USB mass storage device has been inserted correctly and that it is not write-protected.
8. Remove the USB mass storage device before restarting the device.
   • NOTE:
     If you do not remove a bootable Recovery PE Lite USB mass storage, the device will expect the installation of the firmware during the restart.
9. Click on Apply to apply the imported settings.
10. Restart the device to activate the changed configuration.

Importing a configuration file from a network directory

1. Save the import file in the network directory.
2. Select the configurations you do not require from the import filter.
3. Activate Network.
4. Click on Select to select the network directory from the Windows Explorer.
5. Click on Import.
   A progress bar shows how far the import has proceeded.
   If the process has been completed successfully, the firmware will issue a message.
6. Click on Apply to save the imported settings.
7. Restart the device to activate the changed configuration.

Exporting a configuration file to a USB mass storage device

1. If the USB lockdown is activated, make sure the USB mass storage device is known. Otherwise, deactivate the USB lockdown.
2. Connect the USB mass storage device.
3. Activate USB Flash Drive.
4. Click on Export.
   The USB mass storage device is checked.
   If it contains no configuration file it will be saved immediately.
5. If it already contains a configuration file, you need to confirm that the existing file will be written over.
   If the process has been completed successfully, the firmware will issue a message. The RemoteHMI.config file is saved in the root directory of the USB mass storage device.
6. Remove the USB mass storage device.

If you do not remove a bootable Recovery PE Lite USB mass storage, the device will expect the installation of the firmware during the restart.

Exporting the configuration file to a network directory

1. Activate Network.
2. Click on Select to select the network directory from the Windows Explorer.
3. Click on Export.
   The network directory is checked.
   If it contains no configuration file it will be saved immediately.
4. If it already contains a configuration file, you need to confirm that the existing file will be written over.
   If the process has been completed successfully, the firmware will issue a message. The RemoteHMI.config file is saved on the network directory.

Carrying out a firmware update from a USB mass storage device

1. If the USB lockdown is activated, make sure the USB mass storage device is known. Otherwise, deactivate the USB lockdown.
2. Connect the USB mass storage device.
3. Click on Check for Update.
   The firmware trawls through the connected USB devices for available updates.
   If an update is available it will be shown under Available.
4. Click on Install Update to install the update.
   The installation process starts.
   If the update has been installed, the menu will show a change protocol.
5. Remove the USB mass storage device.

Updating the firmware from a network directory

Our Support department will provide you with the update file.

1. Store the update file on the network directory.
2. Click on Select to select the network directory from the Windows Explorer.
3. Click on Check for Update.
   The firmware trawls the network directory for available updates.
   If an update is available it will be shown under Available.
4. Click on Install Update to install the update.
   The installation process starts.
   • Once the update is finished, the system will issue a message.

The following parameters are necessary to configure the VNC connection. The actual name may vary depending on the VNC server system used.

VNC server address

The VNC server address is the same as the server IP address or the server name.
The VNC server systems usually have several ways to find out the address with which the server can be addressed in the network.
In addition to the IP address, port numbers can be allocated in the settings of the VNC server, with which the server can be addressed in the network.
The target address of the Host PC must be located in the network of the Thin Client or must be contactable from the Thin Client.

Ports

VNC password

VNC server applications authenticate users of a VNC connection via a password. The following password procedures are available:

Encryption

Most VNC servers use encryption to protect the transmission of image, mouse and keyboard data from unauthorised access.

Prompt local user to accept connections

Allows the host user to accept or reject a connection request. Since the host is usually used for direct remote access, this setting is not relevant for the Thin Client connection.

Start VNC Server automatically with Windows

Specifies that the VNC server system is automatically activated when Windows is started. If this function is not activated, the remote access must be explicitly started after a system start of the host PC.