Teradici Pcoip® Graphics Agent for Windows 2.12 Administrators' Guide

Home , Control Panel (Windows), Get Help

Teradici PCoIP® Graphics Agent for Windows Version 2.12 Administrators' Guide

TER1505005-2.12 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Contents

Who Should Read This Guide? 4 About the PCoIP Graphics Agent 5 What's New in This Release? 5 Where to Find Information About Other Components 6 System Requirements 7 Windows System Requirements 7 Installing PCoIP Graphics Agent Software 10 Before You Begin 10 Installing NVIDIA GRID Drivers on Windows 11 Installing NVIDIA GRID Drivers for AWS EC2 Instances 11 Installing NVIDIA GRID Drivers for Azure NV-Series Instances 11 Installing the PCoIP Graphics Agent 12 Performing a Silent Installation 14 Updating the PCoIP Graphics Agent 16 Uninstalling the PCoIP Graphics Agent 16 Licensing Your PCoIP Graphics Agent for Windows 18 Licensing PCoIP Agents with Cloud Licensing 18 Licensing PCoIP Agents With a Local License Server 19 Licensing PCoIP Agents With a Local License Server in a Brokered Environment 19 Licensing Agents with a Local License Server in an Unbrokered Environment 21 Configuring the PCoIP Graphics Agent 23 Importing the GPO Administrative Template 23 Modifying the PCoIP GPO Variables 24 Disabling the PCoIP Control panel 24 Disabling USB Support 25 Allowing and Disallowing USB Devices 26 PCoIP Graphics Agent Deployment and Client Connectivity Requirements 28 Connection Management With Cloud Access Manager 28 Connecting with PCoIP Clients 28 PCoIP Graphics Agent For Windows Features 30 Supported Displays 30 Configuring the Host Desktop to Use Graphics Cards 31 Audio Support 32 USB Support 32 Wacom Tablet Support 33

TER1505005 2 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Printing Support 33 Languages 34 Getting Support 35 Contacting Support 35 Finding your PCoIP Graphics Agent Version Number 35 Creating a Technical Support File 35 The Teradici Community Forum 36 Performing Diagnostics 37 Troubleshooting License Issues 37 Registering, Checking, and Renewing Your License using the PCoIP Control Panel 37 Locating PCoIP Graphics Agent for Windows Log Files 39 Creating a Technical Support File 39 Setting Log Levels 40 Session Log IDs 40 Viewing Windows Event Viewer PCoIP Agent Logs 41 Handling GPU Configuration Problems 43 Understanding and Configuring GPU Status Markers 44 Resetting NVIDIA GRID Settings 46 Security Certificates in PCoIP Graphics Agents 47 Using Custom Security Certificates 47 Custom Certificate Guidelines 47 Creating And Installing Custom Certificates 48 Installing OpenSSL Requirements 48 Creating the Internal Root CA Certificate 49 Creating a Private Key and Certificate for the PCoIP Graphics Agent 51 Installing the Private Key and Certificate in the PCoIP Graphics Agent 53 Configuring the Workstation's Certificate Mode 54 Installing the Internal Root CA Certificate in a PCoIP Client 55 Configuring the Agent Certificate Mode 58 VMware vSphere Deployments 61 Configuring Multiple Monitors on an ESXi Host for Virtualized Workstations 61 Configuring Multiple Monitors for NVIDIA GRID vGPU 61 Configuring Displays for NVIDIA GRID with Pass-Through 63 Configuring the Number of Displays with Non-GRID-Compatible GPUs 64 Frequently Asked Questions 66

TER1505005 3 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Who Should Read This Guide? This guide is intended for administrators who are deploying the PCoIP Graphics Agent for Windows as part of the Teradici Cloud Access Software. It assumes thorough knowledge of Windows conventions and networking concepts, including firewall configuration. Although many PCoIP Graphics Agent features and settings can be configured using the Windows user interface, some administrative tasks require use of Windows command line tools. Users should be familiar with both cmd and PowerShell.

Note: Understanding terms and conventions in Teradici guides For information on the industry specific terms, abbreviations, text conventions, and graphic symbols used in this guide, see Using Teradici Product and Component Guides and the Teradici Glossary.

TER1505005 4 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

About the PCoIP Graphics Agent The PCoIP Graphics Agent for Windows is part of the Teradici Cloud Access Software. It enables Teradici customers to deliver GPU-powered physical and virtual workstations to end users via remote clients. Users include high-end knowledge workers, graphic designers, artists, and CAD/CAM designers. A deployed PCoIP Graphics Agent requires these components:

l A host machine which provides the desktop to remote clients. The host can be physical or virtual, in the cloud, or in a data center.See System Requirements on page 7 for more information.

l The PCoIP Graphics Agent software installed on the host machine.

l A GPU. The PCoIP Graphics Agent is compatible with any GPU, but is optimized for NVIDIA GRID-compatible GPUs as well as AMD FirePro (as technology preview). The GPU can be dedicated to the workstation, or shared among virtual workstations by a hypervisor. See System Requirements on page 7 for more information. What's New in This Release? Release 2.12 of the PCoIP Graphics Agent for Windows includes the following enhancements: Wacom tablet support This release introduces support for Wacom tablets PTK-440, PTH 451, PTH-660, and PTH-860 in low-latency (< 25ms) networks when used with PCoIP Tera2 Zero Clients Please review PCoIP Software Client release notes for Wacom tablet support with PCoIP Software Clients. Cloud Access Manager release Cloud Access Software now includes a brokering and provisioning service called Cloud Access Manager. This service automates the provisioning of remote workstations, manages cloud compute costs and brokers PCoIP connections to remote Windows or Linux workstations. Increased default frame rate The default value of the Maximum Frame Rate in the PCoIP Image Quality Levels setting for PCoIP Graphics Agents has been modified. The default Maximum Frame Rate was increased from 30 to 60 frames per second Enhanced multiple-display performance optimization Improved performance on multiple-display systems when one display is idle.

TER1505005 5 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Improved Log File Control Old log files are now deleted automatically after 30 days. The housekeeping interval can be customized via a configuration setting. Improved USB security When the agent is installed with USB disabled, the USB bridging components are no longer installed.

Info: Known and resolved issues For the latest known and resolved issues for this release, see:

l PCoIP Graphics Agent 2.12 for Windows Release Notes

Where to Find Information About Other Components For complete information about other components in PCoIP ecosystems, including architectural diagrams and deployment suggestions, see one of the following documents:

l Teradici All Access: Teradici Cloud Access Architecture Guide

For more information about PCoIP clients, see one of the following:

l Teradici PCoIP® Software Client 3.5 for Windows Administrators' Guide

l Teradici PCoIP® Software Client 3.5 for Mac Administrators' Guide

l Tera2 PCoIP Zero Client Firmware 6.0 Administrators’ Guide

This guide discusses only the PCoIP Graphics Agent for Windows.

TER1505005 6 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

System Requirements This section lists system requirements for the PCoIP Graphics Agent for Windows. Windows System Requirements

Data Center Environments Cloud Environments

VMware Windows Bare AWS EC2 Microsoft ESXi Metal Azure (6.0+)

System Requirements

Instance VMware Physical l G2 l NV6

Types Hardware Machine l G3 l NV12 Version 11 l NV24

Operating l Windows 10 64-bit

Systems l Windows 7 Professional, Enterprise, Ultimate 64-bit

l Windows Server 2016 (single-user only)1

l Windows Server 2008 R2 (single-user only)

Remote At least 2 GB of RAM is required on the host desktop. Host The PCoIP Graphics Agent should have at least 512 MB of Memory available memory.

Remote At least 1 GB per 4K UHD display. Host GPU Memory

Remote At least 2 CPUs are required on the host desktop. Host CPUs Processors must support Streaming SIMD Extensions (SSE) 4.2.

Network The following ports must be open on the host desktop: Ports l TCP 443

l TCP 4172

l UDP 4172

l TCP 60443

Storage At least 100 MB for installation and 100 MB for logging are recommended.

TER1505005 7 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Data Center Environments Cloud Environments

VMware Windows Bare AWS EC2 Microsoft ESXi Metal Azure (6.0+)

Supported GPUs

GPU- All All NVIDIA NVIDIA NVIDIA accelerated NVIDIA GPUs that GPUs: M60 PCoIP GPUs that support NVIDIA l K520 performance support Capture SDK. NVIDIA Refer to the l M60 Capture NVIDIA SDK. Capture SDK Refer to Release Notes the for the current NVIDIA list. Capture SDK Release Notes for the current list.

Supported GRID 5.2 GRID 5.2 GRID 5.2 GRID 5.2 GRID driver (386.09) (386.09) (386.09). (386.09). versions Driver and Driver and instructions instructions provided by provided by Amazon. Microsoft.

AMD AMDGPU- AMDGPU-PRO FirePro™ PRO 16.603 GPU 16.602

Info: 2560x1600 Display Graphics Agents running on Azure may be limited to a single 2560x1600 display, depending on the state of NVIDIA GRID licensing.

1 Windows Server 2016 is currently not supported for AMD GPU technology preview.

2 Currently available as technology preview. Be aware that the preview may have stability, compatibility, or other issues. Windows Server 2016 is not currently supported.

TER1505005 8 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

3 Currently available as technology preview. Be aware that the preview may have stability, compatibility, or other issues. Windows Server 2016 is not currently supported.

TER1505005 9 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Installing PCoIP Graphics Agent Software This section provides steps for installing the PCoIP Graphics Agent for Windows on a host desktop. Before You Begin Before starting, ensure the following requirements are met:

l A supported NVIDIA or AMD driver must already be installed. See Configuring the Host Desktop to Use Graphics Cards on page 31 for more information.

l The PCoIP Graphics Agent installer executable must be on the host desktop. The installer can be downloaded from downloads.teradici.com/win/stable.

l You must have a license registration code from Teradici.

l You must execute the installer as administrator.

Important: PowerShell Execution Policy Setting PCoIP Agent software requires a minimum PowerShell execution policy setting of allowing signed PowerShell scripts to execute. On systems that have PowerShell execution policy set to Restricted, this setting will be adjusted by the PCoIP Agent installer. Inability to change this setting will result in an installation error.

l The following ports must be available on the host desktop: TCP 443, TCP 60443, TCP 4172, and UDP 4172.

l On Windows 2008 R2 or Windows 7, the PCoIP Graphics Agent must be able to simulate Secure Attention Sequence. If SAS is not set, installation will fail. SAS is enabled by setting a Windows GPO variable; for more information, see Why does CTRL+Alt+Delete not work on my PCoIP Standard Agent or PCoIP Graphics Agent? (KB 15134-2712).

TER1505005 10 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Important: Protect your license registration code The license registration code you receive from Teradici is unique to your organization, and should be protected as you would any sensitive data. Be careful that you do not inadvertently expose your registration code in forums or other public areas by pasting log messages without redacting sensitive information.

Installing NVIDIA GRID Drivers on Windows Before installing the PCoIP Graphics Agent, you must install the correct NVIDIA drivers for your system. For current version information, see Windows System Requirements on page 7.

Important: Installation reference and links subject to change The following reference and links are provided as a convenience for Teradici customers; your hypervisor or NVIDIA may change the reference links here without notice. Refer to your hypervisor and/or NVIDIA’s documentation for updated information.

Installing NVIDIA GRID Drivers for AWS EC2 Instances If you are installing NVIDIA driver for G2 instances, download the appropriate driver from http://www.nvidia.com/Download/Find.aspx. If you are installing NVIDIA driver for G3 instances, you can download the NVIDIA driver from Amazon S3 using the AWS Tools for Windows PowerShell. To install the driver, follow the instructions on Amazon Web Services Documentation:

l Windows Accelerated Computing Instances Installing NVIDIA GRID Drivers for Azure NV-Series Instances To install NVIDIA driver for Azure NV-Series, follow the instructions on Microsoft Azure online documentation:

l Set up GPU drivers for N-series VMs running Windows Server Follow the instructions to install GRID drivers on NV-series VMs.

TER1505005 11 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Installing the PCoIP Graphics Agent The PCoIP Graphics Agent installs at the system level and is available to all users. You need administrator privileges to install the program.

Caution: Do not use the installation wizard during a PCoIP session If you are updating an existing installation and want to use the installation wizard, connect to your host desktop using RDP. To update during a PCoIP session, see Performing a Silent Installation on page 14.

To install the PCoIP Graphics Agent via RDP: 1. Launch the setup wizard. 2. Select your language and click OK. 3. Click Next on the welcome screen. 4. Carefully review the license agreement. To indicate your acceptance, click I Agree. 5. Specify an installation directory and click Install. By default, the software will be installed in the C:\Program Files (x86)\Teradici\PCoIP Agent directory.

Note: Installation may appear to stall The installer may appear to stall while working. Allow at least one minute for it to finish.

Important: You may be disconnected when installing via RDP When installing via RDP, you may be disconnected from your RDP session while the installer is working. This is expected behavior. The installation will continue and you can reconnect immediately.

Important: Installing without USB Invoking the installer using the command line parameter and DisableUSB will not install the USB components. If you want to use USB bridging you need to install the PCoIP Agent without this command line parameter. USB keyboard and mouse are not impacted by this setting.

TER1505005 12 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

6. If you are not using the local license server you need to go to the License Registration dialog, type the registration code you received from Teradici. Click Next when finished.

7. If your system uses a proxy server to access the internet, select Use a proxy server for Internet connection and specify the address and port numbers of the proxy server.

Click Next to validate your license and continue. When installation is finished, a confirmation is displayed.

TER1505005 13 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Note: NVIDIA Capture SDK is automatically enabled The installer enables the NVIDIA Capture SDK automatically during installation. The NVIDIA Capture SDK may need to be manually re- enabled after updating NVIDIA drivers. For more information, see Configuring the Host Desktop to Use Graphics Cards on page 31.

Tip: Record FQDN and IP addresses for direct connections PCoIP clients require explicit connection information when connecting directly. If you will be accepting direct connections to this host desktop, be sure to note its FQDN and Public IP address for use by connecting clients.

Note: No local graphical user interface Once installed and running, the PCoIP Graphics Agent takes over the graphics subsystem which is then unavailable to hypervisors. You can only view the graphical user interface when connecting with a PCoIP client. For example, you cannot view an ESXi virtual machine console through VSphere; you must connect to the machine using PCoIP.

8. Click Finish to close the installer.

Once installed, the agent runs as the PCoIPAgent service and is listed in your Windows Task Manager > Services list.

The PCoIP Control Panel is added to the Windows system tray when installation is complete. For information on licensing your PCoIP Agent with a local license server and with Cloud Licensing, see Licensing Your PCoIP Graphics Agent for Windows on page 18. Performing a Silent Installation The PCoIP Graphics Agent can be installed onto the host desktop directly, without using an interface. Silent installation requires access to the Windows Command Prompt window. The installation will finish with a reboot. To install the PCoIP Graphics Agent directly onto the host desktop: 1. Connect to the host desktop. 2. Copy the PCoIP Graphics Agent installer file to the host desktop. 3. Run the installer using one of the following methods:

TER1505005 14 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

l Windows BAT Open a Windows command line tool and enter the following:

start /WAIT /S /NoPostReboot

echo %ERRORLEVEL%

l Windows PowerShell Open a PowerShell window and enter the following (one command):

$process = Start-Process -FilePath -ArgumentList "/S /NoPostReboot _?=" -Wait -PassThru $process.ExitCode

The installer will return one of the following process return codes:

0 - success 1 - installation aborted by user (user cancel) 2 - installation aborted due to error 1641 - success, but reboot required

4. If you are not using the local license server then it is possible to register the PCoIP Graphics Agent‘s license by executing the pcoip-register-host PowerShell script. a. Open a PowerShell window and type (one command):

pcoip-register-host.ps1 -RegistrationCode

b. For help with additional functionality, such as providing proxy settings, type the following command in a PowerShell window:

get-help pcoip-register-host.ps1

For information on licensing your PCoIP Agent with a local license server and with Cloud Licensing, see Licensing Your PCoIP Graphics Agent for Windows on page 18.

TER1505005 15 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Updating the PCoIP Graphics Agent You can update your PCoIP Graphics Agent software in two ways: from the PCoIP Control panel, or by running the new PCoIP Graphics Agent installer file on the host machine. You do not need to uninstall the old version before installing the new version.

Note: PCoIP Control Panel requires Internet access Updating software via the PCoIP Control Panel requires Internet access. If your host machine cannot connect to the Internet, copy the new installer file onto the host machine and run it in place. For instructions, see Installing PCoIP Graphics Agent Software on page 10.

To install an update from the PCoIP Control Panel:

1. Click in the Windows system tray and select Updates from the context menu to open the PCoIP Control Panel. The control panel appears with the Updates tab selected. 2. Click Check for Updates. 3. If an update is available, install it by clicking Install Updates and then clicking OK.

Important: Updating from remote sessions If you are updating from a remote session, the session must be disconnected to complete the update. You will be prompted to do this in an alert; click OK to disconnect your session. Your PCoIP session will disconnect and the installation will continue on the host machine. While the installation is in progress, you will be unable to connect remotely.

To install an update manually: To manually update the software, copy the new installer file onto the host machine and run it in place. See Installing PCoIP Graphics Agent Software on page 10 for information about installing software using the installer wizard or silently via the command line. Uninstalling the PCoIP Graphics Agent You can uninstall the PCoIP Graphics Agent using the Windows Control Panel, or by using the uninstall utility in the Agent's installation directory.

TER1505005 16 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To uninstall the PCoIP Graphics Agent using the Windows Control Panel: 1. Disconnect all PCoIP sessions on the host desktop. 2. Log in as an administrator to the host desktop via Remote Desktop. 3. In Control Panel > Programs, select Uninstall a program. 4. Select the Agent from the list and click Uninstall.

To uninstall the program from Windows: 1. Disconnect all PCoIP sessions on the host desktop. 2. Log in as an administrator to the host desktop via Remote Desktop. 3. Open a Windows Explorer window and navigate to the directory where the PCoIP agent is installed (for example, C:\Program Files (x86)\Teradici\PCoIP Agent). 4. Double-click uninst and follow the prompts.

TER1505005 17 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Licensing Your PCoIP Graphics Agent for Windows The PCoIP Graphics Agent must be assigned a valid PCoIP session license before it will accept a new PCoIP session. The agent can be licensed via Teradici's Cloud Licensing service, or by your own PCoIP license server. Licensing PCoIP Agents with Cloud Licensing Cloud licensing requires no configuration beyond providing a registration code for each PCoIP agent. The required registration code is provided by Teradici when PCoIP licenses are purchased. One registration code can be used to activate multiple PCoIP agents.

Note: Registration code format Registration codes look like this: YUOIFUSD32@AB33-H372-D78E-78XX

The license registration code can be provided manually via the Windows installer or the PCoIP Control panel, and programmatically via a PowerShell script. To provide the registration code during installation via the Windows installer:

l Provide the registration code in the License Registration field when it appears during installation.

l If the PCoIP agent uses a proxy server to access the internet, provide your environment's proxy settings when asked during installation.

To provide the registration code after installation via the PCoIP Control Panel:

1. Open the PCoIP control panel by clicking in the system tray. 2. Select the Licensing tab. 3. Provide the registration code in the registration code field.

To provide the registration code via the Windows PowerShell script: Run the pcoip-register-host.ps1 script during a silent installation or at any time after installation:

C:\Program Files (x86)\Teradici\PCoIP Agent\pcoip-register- host.ps1 [-ProxyServer ] [-ProxyPort ] -RegistrationCode []

TER1505005 18 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Important: PowerShell execution policy PowerShell scripts must be permitted to run on your machine. If your execution policy prevents pcoip-register-host.ps1 from running, you can temporarily enable PowerShell script execution with the following command:

powershell.exe -InputFormat None -ExecutionPolicy Bypass -Command .\pcoip-register-host.ps1

Licensing PCoIP Agents With a Local License Server In deployments where PCoIP agents cannot access the internet, or where cloud-based licensing is not permitted or desired, a local PCoIP License Server can be used instead. The PCoIP License Server manages PCoIP session licenses within your private environment. Configuring PCoIP agents to use a local license server is done in one of two ways, depending on whether your deployment uses a PCoIP Connection Manager, or whether your PCoIP clients connect directly to PCoIP agents. Licensing PCoIP Agents With a Local License Server in a Brokered Environment In brokered deployments, the license server address is configured in the Connection Manager, which passes it through to its managed PCoIP agents.

When using a Connection Manager, the license server address is only configured once no matter how many PCoIP agents are behind the Connection Manager.

TER1505005 19 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To set the License Server URL in the Connection Manager: 1. On the Connection Manager machine, use a text editor to open /etc/ConnectionManager.conf. 2. Set the LicenseServerAddress parameter with the address of your local license server:

l For License Server 1.x: @

l For License Server 2.x:

http://:/request 3. Save and close the configuration file. 4. Restart the Connection Manager.

Verifying Your Licensing Configuration To verify your system's licensing configuration, run the pcoip-validate-license.ps1 PowerShell script on the PCoIP Graphics Agent machine. The script will ping the license server and attempt to retrieve information on an available license:

C:\ProgramFiles(x86)\Teradici\PCoIPAgent\pcoip-validate-license.ps1 -LicenseServerUrl [-ThroughProxyServer ] [-ProxyPort ]

Where is the address of the license server to ping, formatted for the license server version:

l For License Server 1.x: @

l For License Server 2.x:

http://:/request

If the license server is behind a proxy server, provide the proxy information via the -ThroughProxyServer and -ProxyPort parameters. If successful, the response will show that a valid license was found on the license server, and its expiration date. If the connection is unsuccessful, investigate the following possibilities:

l The license server address is incorrect, or in the wrong format (License server 1.x and 2.x use different address formats).

l The license server is inaccessible.

TER1505005 20 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

l There are no available licenses on the license server. This command will only return a positive response if there is at least one available session license.

l If you have only one license on the license server and you are attempting this command from a PCoIP session, the command will fail because there are no free licenses available. In this scenario, disconnect your PCoIP session and try again from an RDP session instead. Licensing Agents with a Local License Server in an Unbrokered Environment In direct, or unbrokered, deployments, each PCoIP agent is configured with the license server address via a GPO variable. When a client initiates a new PCoIP session, the PCoIP agent uses its local configuration to communicate with the license server.

Local license validation using a PCoIP Windows agent and a direct (unbrokered) connection Each PCoIP agent in your environment must be individually configured with the license server's URL. To configure the License Server URL on the PCoIP Graphics Agent: 1. Open the Local Group Policy Editor on the agent machine: a. Press +r to open the run dialog b. type gpedit.msc and press Enter. 2. If you have not already imported the Teradici GPO Administrative Template, import it now: a. Navigate to the Local Computer Policy > Computer Configuration > Administrative Templates directory. b. Right-click the Administrative Templates folder and select Add/Remove Templates from the context menu. c. Click Add, and navigate to the following directory:

TER1505005 21 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

C:\Program Files (x86)\Teradici\PCoIP Agent\configuration d. Select pcoip.adm, and click Open and then Close. 3. Navigate to Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > PCoIP Session Variables > Overridable Administrative Defaults. The list of configurable PCoIP settings will appear in the right panel. 4. Open the Configure the license server URL variable. 5. Select the Enabled option. 6. Enter the License Server URL, formatted for your license server version, in the option field and click OK.

l For License Server 1.x: @

l For License Server 2.x:

http://:/request

Verifying Your Licensing Configuration To verify your system's licensing configuration, run the pcoip-validate-license.ps1 PowerShell script. The script will ping the license server using the local GPO configuration and attempt to retrieve information on an available license:

C:\ProgramFiles(x86)\Teradici\PCoIPAgent\pcoip-validate-license.ps1

If successful, the response will show that a valid license was found on the license server, and its expiration date. If the connection is unsuccessful, investigate the following possibilities:

l The license server address is incorrect, or in the wrong format (License server 1.x and 2.x use different address formats).

l The license server is inaccessible.

l There are no available licenses on the license server. This command will only return a positive response if there is at least one available session license.

TER1505005 22 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Configuring the PCoIP Graphics Agent Once the PCoIP Graphics Agent is installed, administrators can configure the PCoIP agent and adjust PCoIP protocol behavior for individual network conditions by adjusting PCoIP software session variables. Before configuring session variables, they must be added to the host desktop's Local Group Policy Editor or the Group Policy Editor on the domain controller. Session variables are located in admx template files, which are provided by the agent installer. Importing the GPO Administrative Template This section explains how to import the PCoIP GPO template files, which allow you to customize PCoIP session variables. After importing the files, you can adjust the session variables to configure options or optimize host desktop PCoIP performance. To use the admx template:

l Copy the admx file from

C:\Program Files (x86)\Teradici\PCoIP Agent\configuration\policyDefinitions\PCoIP.admx

C:\Windows\PolicyDefinitions

l Copy the adml file from

C:\Program Files (x86)\Teradici\PCoIP Agent\configuration\policyDefinitions\en-US\PCoIP.adml

C:\Windows\PolicyDefinitions\en-US

You can now modify PCoIP session variables using the GPO editor. For instructions, see Modifying the PCoIP GPO Variables on page 24.

TER1505005 23 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Modifying the PCoIP GPO Variables This section explains how to adjust the session variables to configure options or optimize workstation PCoIP performance. Before modifying session variables, you must first import the GPO Administrative Template. The PCoIP settings will not appear in the GPO editor until the template is present. For instructions, see Importing the GPO Administrative Template on page 23. To modify a PCoIP session variable: 1. Open the Local GPO Editor: a. Press + r to open a run dialog.

b. Type gpedit.msc and press Enter. 2. In the left pane, navigate to Administrative Templates and then to PCoIP Session Variables. The variables you can configure appear in the right pane. 3. Double-click the PCoIP variable you want to configure to open the variable's configuration window, then: a. Select Enabled to enable the PCoIP setting. b. Configure any parameters that are available for the setting. c. Click OK to close the variable's configuration window. 4. Repeat step 3 until all variables have been set. 5. Close the Local Group Policy Editor.

The change will be effective on the next PCoIP connection to the host desktop. Disabling the PCoIP Control panel By default, users can self-manage their PCoIP Graphics Agent installation using the PCoIP Control panel. Administrators who wish to prevent users from self-managing their host desktop, can disable the PCoIP Control Panel using a GPO variable setting.

Note: Import the GPO administrative template file first The GPO Administrative Template file must be imported before setting this variable. See Importing the GPO Administrative Template on page 23.

TER1505005 24 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To disable the PCoIP Control Panel: 1. Using the Local Group Policy Editor, open the GPO administrative template file and navigate to Overridable Administrator Defaults. For detailed instructions, see Modifying the PCoIP GPO Variables on page 24. 2. Open the Configure PCoIP Control Panel variable by double-clicking it. 3. Set the variable's value to Disabled. 4. Click OK. 5. Close the Local Group Policy Editor.

The change will be effective on the next PCoIP connection to the host desktop. Disabling USB Support USB bridging, which enables USB devices to be used via a PCoIP client on a host desktop, is enabled by default. To prevent USB devices from being used from remote sessions, USB redirection must be disabled by changing the Enable/disable USB in the PCoIP session GPO variable. Keyboards, mice, and other pointer devices are managed by PCoIP clients, and are always allowed.

Note: Import the GPO administrative template file first The GPO Administrative Template file must be imported before setting this variable. See Importing the GPO Administrative Template on page 23.

To disable USB redirection: 1. Connect to the host you wish to configure via a PCoIP client. 2. Open the Local GPO Editor: a. Press + r to open a run dialog.

b. Type gpedit.msc and press Enter. 3. In the left pane, navigate to Local Computer Policy > Computer Configuration > Administrative Templates > PCoIP Session Variables > Overridable Administrator Defaults 4. Double-click Enable/disable USB in the PCoIP session. The variable editor window appears.

TER1505005 25 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

5. Select Disabled and click OK. 6. Close the GPO Variable Editor.

The change will be effective on the next PCoIP connection to the host desktop. Allowing and Disallowing USB Devices You can create rules that allow your expected USB devices to run, or prohibit devices you will not support, by modifying the Configure PCoIP USB allowed and unallowed device rules GPO variable. You can allow or disallow specific devices, device classes, subclasses, or protocols within subclasses. You can establish up to 10 authorized (allowed) device rules and 10 unauthorized (disallowed) device rules.

Note: Import the GPO administrative template file first The GPO Administrative Template file must be imported before setting this variable. See Importing the GPO Administrative Template on page 23.

To configure PCoIP USB allowed and disallowed device rules: 1. Connect to the host you wish to configure via a PCoIP client. 2. Open the Local GPO Editor: 3. Press + r to open a run dialog.

4. Type gpedit.msc and press Enter. 5. In the left pane, navigate to Local Computer Policy > Computer Configuration > Administrative Templates > PCoIP Session Variables > Overridable Administrator Defaults

TER1505005 26 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

6. Double-click Configure PCoIP USB allowed and unallowed device rules. The variable editor appears.

7. Read the instructions in the help pane for detailed information about rule formats and restrictions. 8. Specify your USB allowed and unallowed rules in the Options pane and click OK.

Tip: Allow all USB devices To globally allow all USB devices, add the following authorization rule:

23XXXXXX

9. Close the Local Group Policy editor.

The change will be effective on the next PCoIP connection to the host desktop.

TER1505005 27 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

PCoIP Graphics Agent Deployment and Client Connectivity Requirements Your PCoIP Graphics Agent can connect to your chosen client via proof-of-concept, cloud, or datacenter deployments. Requirements and network security levels will vary depending on your deployment type. See Supported PCoIP Architectures for each deployment's components and requirements. Connection Management With Cloud Access Manager Cloud Access Manager can be used to centrally manage PCoIP deployments. Cloud Access Manager enables highly-scalable and cost-effective Cloud Access Software deployments by managing cloud compute costs and brokering PCoIP connections to remote Windows or Linux workstations.

Info: Cloud Access Manager For information about Cloud Access Manager, including deployment and configuration instructions, see PCoIP Cloud Access Manager Administrators Guide.

Teradici also supports third-party brokers. For a a list of compatible third-party brokers, see Teradici Technology Partners.

Related: Connection managers and third-party brokers For information about Connection Managers, including installation and configuration instructions, see the Teradici PCoIP® Connection Manager and PCoIP® Security Gateway Administrators’ Guide. For a list of compatible third-party brokers, see Teradici Technology Partners.

Connecting with PCoIP Clients PCoIP clients are software- or firmware-based endpoints used to make secure PCoIP connections to the PCoIP Graphics Agent. For more information about PCoIP client connectivity requirements and complete usage instructions, see the following guides:

TER1505005 28 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

l Software clients: o Teradici PCoIP® Software Client 3.5 for Windows Administrators' Guide o Teradici PCoIP® Software Client 3.5 for Mac Administrators' Guide

l Zero clients: Tera2 PCoIP Zero Client Firmware 6.0 Administrators’ Guide

TER1505005 29 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

PCoIP Graphics Agent For Windows Features This section describes the features and configurable settings in the PCoIP Graphics Agent for Windows. Supported Displays The PCoIP Graphics Agent for Windows, in combination with a GPU, supports a maximum of four displays on the PCoIP client, and a maximum resolution of 4K UHD (3840×2160).

Important: Display acceleration requires a supported GPU The PCoIP Graphics Agent must be deployed with one or more NVIDIA GRID GPUs. For a list of supported GPUs, see Windows System Requirements on page 7. For help troubleshooting configuration or licensing problems, see Handling GPU Configuration Problems on page 43.

Note: Using multiple high-resolution displays Systems with multiple high-resolution displays, such as quad 4K UHD topologies, require powerful system infrastructure. Be sure to use a system with sufficient bandwidth, licensed GPUs, and client capability to support your required display topology.

Important: Attaching monitors to the host machine in not supported PCoIP client supports a maximum of four displays. Attaching extra monitors to the host machine will conflict with client display topologies.

The PCoIP Graphics Agent supports any of these monitor configurations:

l Vertical line

l Horizontal line

l Box display

Monitors can be used in any standard rotation (0°, 90°, 180°, or 270°). Any monitor can be the primary. The PCoIP Graphics Agent for Windows, in combination with one or more properly configured and licensed GPUs, provides the following benefits:

l Display resolutions: PCoIP Graphics Agents can provide any resolution a client asks for up to 4K UHD. The practical number of displays available at any given

TER1505005 30 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

resolution is determined by the GPU, host system hardware, GPU profile licensing, and the connecting client's version.

l Hot-pluggable displays from Tera2 PCoIP Zero Clients: Displays may be added and removed as needed during an active PCoIP session when using a Tera2 PCoIP Zero Client.

l 3D application support: Full-screen 3D applications are supported.

Note: NVIDIA Tesla cards have license limitations Systems using NVIDIA Tesla-based GPUs, including M60, M10, and M6, are subject to licensing restrictions which may further reduce the available number of monitors or their available resolutions. For systems using Tesla-based GPUs, only licensed displays and resolutions will use GRID functionality. For more information, see NVIDIA’s Grid Licensing User Guide: http://images.nvidia.com/content/pdf/grid/guides/GRID-Licensing-Guide.pdf

Caution: Low-memory vGPU profiles may limit displays If you're running PCoIP Graphics Agent on a Windows 10 or Windows Server 2016 machine, a vGPU profile with less than 1024 MB may be limited to a single monitor. For more information, see https://blogs.nvidia.com/blog/2016/11/29/vgpu-profile-for-windows-10/

Configuring the Host Desktop to Use Graphics Cards The PCoIP Graphics Agent does not require any special configuration for multiple monitor support, but your system must be configured to use your graphics card. In datacenter or cloud deployments, this usually means configuring a hypervisor; consult your hypervisor's documentation for instructions. For users deploying on VMware ESXi hosts, basic instructions are included in Configuring Multiple Monitors on an ESXi Host for Virtualized Workstations on page 61.

TER1505005 31 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Info: Install GPU drivers before PCoIP Graphics Agent

You need to install your GPU driver before installing your PCoIP Graphics Agent. For NVIDIA GPUs: If the PCoIP Graphics Agent is installed first, or if you update your NVIDIA driver later, the NVIDIA Capture SDK may need to be manually re-enabled. To enable the NVIDIA Capture SDK, run the following command on the host machine:

C:\Program Files (x86)\Teradici\PCoIP Agent\GRID\NvFBCEnable.exe -enable

Audio Support Stereo audio output and mono audio input are supported by the PCoIP Graphics Agent, and enabled by default. During a session, the host's default audio device is changed to the Teradici Virtual Audio Driver. When the session is disconnected, the audio device selection reverts to its previous setting.

Note: Applications must use the system default device The PCoIP Graphics Agent delivers audio over PCoIP connections by reassigning the system's default audio device. Only applications that use the system default audio device will send or receive audio over PCoIP.

Note: Volume is set to full when the PCoIP Graphics Agent is installed When the PCoIP Graphics Agent is installed, the system volume is reset to maximum. Test the volume level before use.

USB Support The PCoIP Graphics Agent supports USB devices attached to PCoIP clients. Administrators can set rules governing allowed and disallowed devices, device classes, or device protocols.

TER1505005 32 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Important: USB support is enabled by default As of release version 2.12, USB redirection is enabled by default. To disable USB support globally, see Disabling USB Support on page 25.

For information about client support for USB devices, see Allowing and Disallowing USB Devices on page 26.

Caution: Isochronous USB devices supported through technology partners USB devices with time-sensitive information, such as webcams, are not generally supported. However, Teradici's technology partners provide additional solutions to expand peripheral support such as webcams. For more information and installation, see Peripherals on the list of Teradici Technology Partners.

Wacom Tablet Support The PCoIP Graphics Agent for Windows supports certain Wacom tablets when connected via USB, and when using a PCoIP Zero Client or PCoIP Software Client for Windows and Mac. Wacom tablet models PTK-440, PTH-451, PTH-660 and PTH-860 have been tested with the above clients. Other Wacom tablets may work, but have not been tested and should not be used in production environments. Wacom tablets are supported only in low-latency environments. Tablets in network environments with greater than 25ms latency will show reduced responsiveness. Printing Support When a local printer is visible to a client computer by USB connection or local network connection, it may be possible to print from the PCoIP Graphics Agent. Refer to the following table for local printing support. Cloud printing is available from all clients so long as it supported by the host desktop.

Note: Client printing support Remote printing is supported in the PCoIP Software Client for Windows and PCoIP Software Client for Mac, versions 1.5 and newer. To print from PCoIP Zero Clients, you must install printer drivers for your printers on each host desktop.

TER1505005 33 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Zero Software Mobile Client Client Client

Local USB printing Printer is connected Printer is connected to USB printing is not to a USB port on the a USB port on the supported on mobile zero client. client computer. clients.

Local Network Printing

Cloud Printing

Languages The PCoIP Graphics Agent installer supports the following languages:

l French

l German

l Spanish

l Simplified Chinese

l Traditional Chinese

l Japanese

l Portuguese

l Italian

l Korean

l Russian

l Turkish

TER1505005 34 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Getting Support If you experience difficulty in installing, configuring, or running your PCoIP Graphics Agent for Windows, Teradici can help. This section contains information about contacting Teradici support, generating support files, and connecting with the Teradici user community. Contacting Support If you encounter problems installing, configuring, or running the PCoIP Graphics Agent, you can submit a support ticket at http://techsupport.teradici.com. Before creating a support ticket, be prepared with the following:

l A detailed description of the problem

l Your Agent version number. See Finding your PCoIP Graphics Agent Version Number on page 35.

l A prepared log archive. See Creating a Technical Support File on page 1. Finding your PCoIP Graphics Agent Version Number You can find your PCoIP Graphics Agent's version number using the PCoIP Control Panel or the Windows control panel. To find your PCoIP Graphics Agent's version number using the PCoIP control panel:

1. Click in the Windows system tray and select Updates from the context menu to open the PCoIP Control Panel. The control panel appears with the Updates tab selected. 2. The installed software version appears in the Status box of the Updates tab.

To find your PCoIP Graphics Agent's version number using the Windows control panel: 1. Open the Windows Control Panel, and navigate to Uninstall a program. 2. Find the PCoIP agent type and version number in the program list. Creating a Technical Support File Teradici support may request a support file from your system. The support file is a zip archive containing PCoIP Graphics Agent logs and other diagnostic data that can help support diagnose your problem.

TER1505005 35 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

You can create a support file using the PCoIP control panel. If the PCoIP control panel is disabled, you can also run the bundling application directly using Windows Explorer or from the command line. Both methods place a support bundle in the Teradici Support folder, located at C:\ProgramData\Teradici\Support. To create a support file with the PCoIP Control Panel:

1. Open the PCoIP Control Panel from the system tray. 2. Select the Support tab and then click the Create Support File button. 3. When the zipped support file is ready, an Explorer window opens and displays your Teradici Support folder. The generated file is selected.

To create a support file with the bundling application: 1. Using Windows Explorer or a command line tool, navigate to C:\Program Files (x86)\Teradici\PCoIP Agent. 2. Run SupportBundler.exe. 3. When the zipped support file is ready, an Explorer window opens and displays your Teradici Support folder. The generated file is selected. The Teradici Community Forum The PCoIP Community Forum enables users to have conversations with other IT professionals to learn how they resolved issues, find answers to common questions, have peer group discussions on various topics, and access the Teradici PCoIP Technical Support Service team. Teradici staff are heavily involved in the forums. To visit the Teradici community, go to https://communities.teradici.com.

TER1505005 36 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Performing Diagnostics Each PCoIP component creates and updates a log file which records its activity as the system is used. Most troubleshooting within a PCoIP system begins by examining these log files and looking for error conditions or other indications that may explain why the system is not operating as expected. Log files for the PCoIP Graphics Agent and other Teradici PCoIP components are saved to log directories. The Windows Event Viewer also contains PCoIP event logs for high-level events.

Note: Bundling log files for support When investigating issues with Teradici support, you may need to provide a set of log files. For instructions on creating a log file bundle for support, see Creating a Technical Support File on page 39.

Troubleshooting License Issues Teradici includes a license validation utility that scans your local system and any connected physical or cloud-based license servers for active licenses, and informs you of when your license subscription expires. For more information, see Welcome to Teradici PCoIP Cloud Licensing (KB 15134-3136). To run the license validation tool, open a PowerShell window, navigate to the PCoIP Agent directory, and type:

.\pcoip-validate-license.ps1

For more detailed instructions, open a PowerShell window and type:

get-help ./pcoip-validate-license.ps1

Registering, Checking, and Renewing Your License using the PCoIP Control Panel You can use the PCoIP Control Panel to register, check the status of, and renew your license. The PCoIP Control Panel is accessible from the Windows notification area, or by running C:\Program Files (x86)\Teradici\PCoIP Agent\bin\pcoip_ control_panel.exe. If you have not registered your license already, select the Licensing tab and enter your registration code, as shown next.

TER1505005 37 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Once you are licensed, the tab will show your license subscription expiry information, and enables you to renew the license.

TER1505005 38 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Locating PCoIP Graphics Agent for Windows Log Files Log files for the PCoIP Graphics Agent are located in the following directories by default. If you changed your agent's location during installation, the log files will be in your custom location instead.

Component Log File Location

PCoIP Graphics Agent %programdata%\Teradici\PCoIPAgent\logs

PCoIP Server %programdata%\Teradici\PCoIPAgent\logs

Note: Bundling log files for support When investigating issues with Teradici support, you may need to provide a set of log files. For instructions on creating a log file bundle for support, see .

Creating a Technical Support File Teradici support may request a support file from your system. The support file is a zip archive containing PCoIP Graphics Agent logs and other diagnostic data that can help

TER1505005 39 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

support diagnose your problem. You can create a support file using the PCoIP control panel. If the PCoIP control panel is disabled, you can also run the bundling application directly using Windows Explorer or from the command line. Both methods place a support bundle in the Teradici Support folder, located at C:\ProgramData\Teradici\Support. To create a support file with the PCoIP Control Panel:

To create a support file with the bundling application: 1. Using Windows Explorer or a command line tool, navigate to C:\Program Files (x86)\Teradici\PCoIP Agent. 2. Run SupportBundler.exe. 3. When the zipped support file is ready, an Explorer window opens and displays your Teradici Support folder. The generated file is selected. Setting Log Levels Each PCoIP component is configured to log at a particular verbosity level. The default log levels are recommended for use in a production deployment. When troubleshooting a particular problem, Teradici Support Services may recommend adjusting the log level for specific components to obtain more information from certain parts of the system. Session Log IDs Log messages generated by the PCoIP Graphics Agent include a session ID prefix which is set automatically by the PCoIP client. All log messages generated during a single session, by any PCoIP component, will be prefixed with the same session log ID in RFC-4122 format:

yyyy-mm-ddThh:mm:ss.ffffffZ xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx > …

For example:

TER1505005 40 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

2015-11-06T08:01:18.688879Z 4208fb66-e22a-11d1-a7d7-00a0c982c00d > …

Log messages that do not pertain to a specific session will show a string of zeroes in place of the session log ID number. If a PCoIP component does not receive a session log ID from the PCoIP client, or receives an invalid value, it will generate a new session log ID and distribute it to the other components in the system. Viewing Windows Event Viewer PCoIP Agent Logs You can also view high-level session and connection events in PCoIP Graphics Agent logs from the Windows Event Viewer. To view logs using the Windows Event Viewer: 1. Navigate to Start > Control Panel > System and Security > Administrative Tools and double-click Event Viewer. 2. Navigate to Event Viewer (Local) > Windows Logs, right-click Application, and select Filter Current Log. 3. In the Event sources drop-down list, select PCoIPAgentService and click OK. 4. Select an event to see its details.

The next example shows typical PCoIP agent session and connection events that you can view in the Windows Event Viewer.

TER1505005 41 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Key PCoIP Graphics Agent events to watch for are shown next:

Event Description ID

88 SESSION_START

89 SESSION_END

90 LAUNCHER_EXIT

91 CONNECTION_TIMEOUT

92 CONNECTION_FAILURE

93 SESSION_REDIRECTION

94 SESSION_INTERRUPTION

95 SERVICE_STARTING PCoIP Agent service starting.

96 SERVICE_STOPPING PCoIP Agent service stopping.

TER1505005 42 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Event Description ID

97 SESSION_RESUMING

98 VIDEO_DRIVER_REPAIR_ERROR

99 FLEXERA_SERVICE_ERROR

100 VCHAN_LOADER_EXCEPTION An exception was thrown in a PCoIP virtual channel plugin.

101 NO_AGENT_ERROR The PCoIP agent process could not be detected.

102 VCHAN_LOADER_INTERNAL_ERROR An internal error has occured.

103 VCHAN_LOADER_BAD_INVOCATION_ERROR The PCoIP virtual channel loader utility was invoked incorrectly.

104 AGENT_PROCESS_TERMINATED_ERROR The PCoIP Agent process was terminated.

105 SSO_PIPE_CREATION_ERROR The Single Sign On framework was unable to establish a secure connection with the Teradici Agent.

112 SERVICE_START_ERROR PCoIP Agent service cannot be started.

113 SERVICE_INTERNAL_ERROR

114 SERVICE_ADMINISTRATIVE_MESSAGE

CAMIdleShutdown event ID:

Event ID Description

115 Shutting down idle machine.

96 CAM Idle Machine Shutdown service stopping.

95 CAM Idle Machine Shutdown service starting.

114 Machine will be checked for idle state.

Handling GPU Configuration Problems If you are experiencing performance issues with your PCoIP Graphics Agent system, or believe that your displays are not being accelerated by your GPU(s) as expected, there may be a configuration or licensing issue. The PCoIP Graphics Agent for Windows includes tools designed to help diagnose configuration problems.

TER1505005 43 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Understanding and Configuring GPU Status Markers If the GPU system is not configured properly, the PCoIP Graphics Agent falls back to non-accelerated performance. When this occurs, a small yellow marker appears at the top right corner of each affected display. Displays which are working properly do not show an indicator. If required, you can change the status indicator behavior. The possible indicator states are:

l All indicators off. Markers will never be displayed.

l Non-GPU indicator only (default): The system shows a yellow marker on each non-accelerated display.

l All indicators on. Markers will appear on all displays: Yellow markers on each non-accelerated display, and green markers on each accelerated display.

To change how GPU status indicators display: 1. Open the Registry Editor: a. Press + r to open a run dialog.

b. Type regedit and press Enter. 2. Navigate to the HKEY_LOCAL_MACHINE > SOFTWARE > Teradici > PCoIP > pcoip_admin directory. 3. Right-click the pcoip.efe_marker and select Modify. 4. In the Edit DWORD Value dialog box, revise the number in the Value data field:

l Type 0 to turn off all status marker.

l Type 1 to display status marker when the system displays a non-GPU display. This is the default setting.

l Type 2 to turn on all status markers. 5. Click OK. Disabling Non-Accelerated Displays If you would prefer that non-accelerated screens be disabled instead of falling back to non-accelerated performance, configure the pcoip.efe_capture_fallback registry key as described next.

TER1505005 44 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To configure system fallback behavior: 1. Open the Registry Editor: a. Press + r to open a run dialog.

b. Type regedit and press Enter. 2. Navigate to the HKEY_LOCAL_MACHINE > SOFTWARE > Teradici > PCoIP > pcoip_admin directory. 3. Right-click the pcoip.efe_capture_fallback and select Modify. 4. Set the desired behavior for the Value data field:

l Type 0 to turn off the fallback feature. Non-accelerated displays will be disabled.

l Type 1 to turn on the fallback feature. Non-accelerated displays will be used. This is the default setting. 5. Click OK. Troubleshooting GRID Status Indicators

Note: Recommendations may also work for troubleshooting non- GRID status indicators Although the following recommendations are for addressing GRID status indicators, their equivalent may also for non-GRID GPUs, including the AMD technology preview. Teradici's general advice is to ensure that your GPU card and driver version is supported, restart your PCoIP session, and retry when necessary.

A yellow status indicator indicates that a display is not GPU-accelerated and is using fallback behavior. If you see a yellow status indicator, it is most most likely caused by a GRID licensing issue or limitation of the allocated GRID profile. Here are some recommendations for addressing status indicators:

l Check the licensing status of the NVIDIA graphic card. For more information, see http://images.nvidia.com/content/pdf/grid/guides/GRID-Licensing-Guide.pdf

l Ensure you have a supported NVIDIA GRID driver installed. Supported driver versions are listed in System Requirements on page 7.

l If you update your NVIDIA driver, the NVIDIA Capture API may need to be manually re-enabled. To enable the NVIDIA Capture API, run the following command on the host machine:

TER1505005 45 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

C:\Program Files (x86)\Teradici\PCoIP Agent\GRID\NvFBCEnable.exe -enable

l If you recently updated your driver and see a yellow status indicator, restart your PCoIP session.

l Run the GRID reset script, described next. Resetting NVIDIA GRID Settings The Graphics Agent includes a script that automatically resets the NVIDIA GRID driver, NVIDIA GRID licensing, and NVIDIA Capture SDK functionality. This script is helpful in resolving issues like the following:

l Loss of support for high resolutions

l Loss of support for multiple displays

l Image offset on a display (the screen image begins below or to the right of the actual display)

l Cursor and image misalignment

To reset NVIDIA GRID settings: 1. Close all running applications, particularly those that utilize the GPU.

As an administrator, run the reset_grid.bat script located here: C:\Program Files (x86)\Teradici\PCoIP Agent\GRID\reset_grid.bat 2. Disconnect from your PCoIP session. 3. Reconnect to your desktop using PCoIP.

TER1505005 46 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Security Certificates in PCoIP Graphics Agents PCoIP Graphics Agents use a self-signed certificate that is generated at runtime to secure PCoIP communications. The default self-signed certificates for the PCoIP components in your system will automatically work together without requiring any configuration from administrators. If needed, you can create and deploy your own custom certificates instead of using the Teradici self-signed certificates. A certificate must be either generated or selected for a PCoIP session to be established. This section explains how to create and implement custom certificates. Using Custom Security Certificates You can use OpenSSL, Microsoft Certification Authority, or a public certificate authority (CA) of your choice to create your certificates. If you are not using OpenSSL, consult your certificate authority's documentation for instructions on creating certificates in a Windows Certificate Store-compatible format. The procedures is this section use OpenSSL to generate certificates that will satisfy most security scanner tools when the root signing certificate is known to them.

Warning: Certificates are stored in Windows Certificate Store Certificates are stored in the Windows certificate store. If you have old certificates that are stored on the host, they should be deleted. See Installing the Private Key and Certificate in the PCoIP Graphics Agent on page 53 for instructions on installing custom certificates.

Custom Certificate Guidelines If you choose to use your own certificates, follow these general guidelines:

l Save your root CA signing certificate in a safe place for deployment to clients.

l Back up private and public keys to secure locations.

l Never store files created when generating keys or certificates on network drives without password protection.

l Once certificates have been deployed to the Windows certificate store, the files they came from are no longer needed and can be deleted.

l Standard automatic tools, such as Automatic Certificate Enrollment and Group Policy, can be used for deploying automatically generated certificates. Both Automatic Certificate Enrollment and Group Policies are implemented through

TER1505005 47 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Active Directory. See MSDN Active Directory documentation for more information. Creating And Installing Custom Certificates This section describes how to replace Teradici's default certificates with your own custom certificates.

Note: These procedures use OpenSSL The procedures in this section use OpenSSL to create private keys, certificate signing requests, and certificates. To use OpenSSL, install Visual C++ 2008 Restributables and Win32 OpenSSL Light v1.0.2g+. For detailed information about OpenSSL, see http://openssl.org/docs.

To replace Teradici's default certificates with custom certificates: 1. Install required OpenSSL components on your system. See Installing OpenSSL Requirements on page 48. 2. Create the internal root CA certificate. SeeCreating the Internal Root CA Certificate on page 49. 3. Create a private key and certificate pair for the PCoIP Graphics Agent. See Creating the Private Key and Certificate on page 52. 4. Install the agent's private key and certificate in the Windows Certificate Store for each PCoIP Graphics Agent workstation. See Installing the Private Key and Certificate in the PCoIP Graphics Agent on page 53 5. Configure the certificate mode for each PCoIP Graphics Agent workstation. See Configuring the Workstation's Certificate Mode on page 54. 6. Install the internal root CA in your PCoIP clients. See Installing the Internal Root CA Certificate in a PCoIP Client on page 55. Installing OpenSSL Requirements Install the following components on your Windows PCoIP Graphics Agent machine:

l Visual C++ 2008 Redistributables

l Win32 OpenSSL v1.0.2g Light (or later). When prompted during OpenSSL installation, copy the OpenSSL DLLs to the OpenSSL binaries directory; for example, C:\OpenSSL-Win32\bin.

Note: Examples use the default installation directory. The following examples assume the default OpenSSL installation directory: C:\OpenSSL-Win32.

TER1505005 48 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Creating the Internal Root CA Certificate This section shows how to create a root CA private key, how to use this key to self- sign and generate an internal root CA certificate, and how to add X.509 v3 extensions to a certificate that restrict how the certificate can be used. Creating a Root CA Private Key To create a root CA private key in RSA format: 1. Open a command prompt (cmd) and navigate to the OpenSSL binaries directory (c:\OpenSSL-Win32\bin). 2. Type openssl to launch OpenSSL.

Note: OpenSSL may need help finding the .cfg file If you receive a WARNING: can’t open config file: /usr/local/ssl/openssl.cnf error, you will need to set the OPENSSL_CONF variable before proceeding. See Setting the OPENSSL_CONF variable on page 49.

3. To create 3072-bit root RSA key named rootCA.key, use one of the following commands:

l For an unsecured key, type:

genrsa -out rootCA.key 3072

l For a password-protected key, add the -des3 argument:

genrsa -out rootCA.key 3072 -des3 Password-protected keys require the password to be entered each time they are used.

Caution: Store your private root key in a safe location Anyone with access to your private root key can use it to generate certificates that your PCoIP clients will accept.

Setting the OPENSSL_CONF variable If OpenSSL is unable to find its configuration file, you may need to set the OPENSSL_ CONF variable.

TER1505005 49 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To set the OPENSSL_CONF variable: 1. Exit OpenSSL. 2. Type the following command:

set OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg

3. Type ssl and Enter to continue with the step you were performing when you saw the error.

Self-signing and Creating the Internal Root CA Certificate Now that we have our private key (created in Creating a Root CA Private Key on page 49), we will use it to generate a self-signed X.509 root CA certificate called rootCA.pem that is valid for 1095 days (1095 days is three years, ignoring leap days). To create the root CA certificate: 1. Type the following command. Replace the number of days with a different value, if needed:

req -x509 -new -nodes -key rootCA.key -days 1095 -out rootCA.pem

An interactive script will run, which prompts you to enter values for several fields. 2. Follow the prompts to enter field values:

Country Name Optional. Use one of the ISO 3166-1 alpha-2 country codes.

State or Optional Province Name

Locality name Optional

Organization Optional Name

Common name Required. Enter a name for your root CA (for example, certificates.mycompany.com)

Email address Optional. Enter an administrative alias email if you use this field.

Note: Field values can be templatized If you will be creating a lot of certificates, consider using a configuration file that contains global field values. See http://www.openssl.org/docs for more information.

TER1505005 50 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Creating a Private Key and Certificate for the PCoIP Graphics Agent For each PCoIP Graphics Agent instance, you will create three items:

l A private key file

l A certificate signing request (CSR)

l A certificate

You will also need an X.509 v3 extension file, which is used as an input when generating the workstation certificate.

Note: There are two different private keys The private key you create here is used by the PCoIP Graphics Agent to decrypt data. It is different from the internal root CA private key.

Creating an X.509 Version 3 Extension File X.509 Version 3 extensions restrict how certificates can be used. To create the X.509 v3 extension file: 1. Using a text editor, open a new file and paste the following text into it:

authorityKeyIdentifier=keyid,issuer basicConstraints=CA:TRUE keyUsage=digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName=email:[email protected]

2. Save the file with an .ext extension (for example, v3.ext). 3. Store the file in the C:\OpenSSL-Win32\bin directory.

Note: More about X.509 v3 extensions For more information about X.509 v3 certificate extensions, see https://www.openssl.org/docs/apps/x509v3_config.html

TER1505005 51 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Creating the Private Key and Certificate To create the PCoIP Graphics Agent's private key, certificate signing request, and certificate:

1. Launch openssl from the C:\OpenSSL-Win32\bin directory. 2. To create a 3072-bit private key in RSA format, type the following command:

genrsa -out pcoipprivate.pem 3072

This command creates a pcoipprivate.pem file in the current directory. 3. To create the certificate signing request, type following command:

req -new -key pcoipprivate.pem -out pcoip_req.csr

This command initiates an interactive script that prompts you to enter certificate metadata. For a detailed information about the metadata fields, see Self-signing and Creating the Internal Root CA Certificate on page 50. You may be prompted for a challenge password and company name. The only mandatory field is the Common Name. For this certificate, the Common Name field must be the fully-qualified domain name (FQDN) of the workstation where the PCoIP Graphics Agent is installed; for example, mypcname.mydomain.local. If you want to use the same certificate on multiple machines in the same domain, use a wild card for all but the last two segments of the FQDN; for example, *.mydomain.local. When finished, this command creates a pcoipprivate.pem file in the current directory.

1. To sign and create an X.509 v3 certificate, type the following command. Replace the number of days with a different value, if needed (in this example, the number of days is 365):

x509 -req -outform PEM -in pcoip_req.csr -extfile v3.ext -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -sha256 -out pcoipcert.pem -days 365

When finished, this command creates a poipcert.pem file in the current directory.

TER1505005 52 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Caution: Use Secure Hash Algorithms Windows Certificate Manager has deprecated the use some older hash algorithms such as MD4, MD5, and SHA1. Use the more secure SHA- 384 or SHA-256 when creating your certificates, as shown in the previous command.

2. To create a PKCS#12 file to import into a Windows certificate store, enter the following command. Do not copy the -password value in this example; substitute your own password.

pkcs12 -export -in pcoipcert.pem -inkey pcoipprivate.pem -name PCoIP -out pcoipagent.p12 -password *********

This command creates a pcoipagent.p12 file and places it in the current directory.

Note: The -name parameter must be 'PCoIP' You must specify PCoIP as the -name parameter value. This value sets the PCoIP Graphics Agent certificate's friendly name.

3. Place the pcoipagent.p12 and rootCA.pem files where administrative users of the PCoIP Graphics Agent can access them, such as network storage or a USB key. Installing the Private Key and Certificate in the PCoIP Graphics Agent The agent certificate and signing certificate must be installed on each workstation running the PCoIP Graphics Agent. To install the agent certificate and signing certificate: 1. Open Microsoft Management Console: a. Press + r to open a run dialog.

b. In the Run dialog, type mmc and press Enter. 2. Add the Certificates snap-in: a. Select File > Add/Remove Snap-in. b. Select Certificates from the Available snap-ins list and click Add. c. Select Computer account and click Next. d. Select Local computer and click Finish. e. Click OK.

TER1505005 53 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

3. Add rootCA.pem to the PCoIP Graphics Agent's Trusted Root Certification Authorities list: a. Expand Certificates (Local Computer). b. Right-click Trusted Root Certification Authorities, select All Tasks > Import from the context menu, and click Next. c. Use the Browse button to navigate to the directory where the rootCA.pem file is located. d. Select All Files (*.*) from the File name drop-down list, and select the rootCA.pem file. e. Click Open, Next (twice), and Finish. f. Click OK to close the The import was successful message. 4. Add pcoipagent.p12 to the Personal store of the agent's computer account: a. Expand Certificates (Local Computer). b. Right-click Personal, select All Tasks > Import from the context menu, and click Next. c. Select Personal Information Exchange (*.pfx;*.p12) from the File name drop-down list, and select the pcoipagent.p12 file. d. Click Open and Next. e. Type the password you entered for the password field in Installing the Private Key and Certificate in the PCoIP Graphics Agent on page 53. f. Ensure these settings are correct: a. Mark this key as exportable... is enabled b. Include all extended properties is enabled g. Click Next twice and Finish. h. Click OK to close the The import was successful message. 5. Restart the PCoIP Graphics Agent service on the workstation: a. Open Control Panel and select Administrative Tools. b. Double-click on Services. c. Select PCoIP Graphics Agent in the Services list. d. Click Restart the service. Configuring the Workstation's Certificate Mode After installing your custom certificate on a workstation, you must configure the workstation's group policy to get certificates from the Windows Certificate Store instead of using the Teradici self-signed certificate. Each workstation must be configured separately. For instructions, see Configuring the Agent Certificate Mode on page 58.

TER1505005 54 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Installing the Internal Root CA Certificate in a PCoIP Client Your root CA certificate must be installed in any PCoIP client that will be used to connect to the PCoIP Graphics Agent. Zero Client Certificate Requirements On zero clients, the root CA certificate must have a .pem extension. For instructions on confirming the certificate file format, see Certificate File Extensions on page 56. Software Client Certificate Requirements On the PCoIP Software Client for Mac and PCoIP Software Client for Windows, the certificate's extension must be changed to .crt. For instructions, see Certificate File Extensions on page 56 Mobile Client Certificate Requirements For PCoIP mobile clients, see the documentation for your iOS or Android device. Installing Root CA Certificates on a Zero Client Zero clients are managed via an Administrative Web Interface (AWI) and accessed using a web browser. Supported browsers are:

l Firefox 46

l Chrome 60

l Internet Explorer 11

l Microsoft Edge 25

Note: Browser must support TLS Web browsers must support TLS 1.1 or later to connect to the zero client's Administrative Web Interface.

To upload the root CA certificate to a zero client: 1. From a supported browser, enter the IP address of the zero client and log in to its Administrative Web Interface. 2. Select the Upload > Certificate menu to display the Certificate Upload page. 3. In the Certificate filename field, click Browse, and then navigate to the directory that contains your root CA certificate. 4. Select your root CA certificate (*.pem) and then click Open. 5. Click Upload and then OK. 6. Click Continue.

TER1505005 55 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

If the certificate uploads successfully, it will appear in the Uploaded Certificates section on this page. Installing Root CA Certificates on a PCoIP Software Client Before you can install the root CA certificate in a PCoIP Software Client, you must change the file extension from .pem to .crt. The .pem extension is used for different types of X509 v3 files that contain ASCII Armor (Base64) data prefixed with a "-----BEGIN" line. The .crt extension is used for certificates that may be encoded either in binary DER format or ASCII PEM format. Certificate File Extensions If you have OpenSSL installed on your system, you can use it to verify that your root CA certificate is in ASCII PEM format. To verify that the root CA certificate is in ASCII PEM format: 1. Launch openssl from the C:\OpenSSL-Win32\bin directory. 2. Type the following command:

x509 -in rootCA.pem -text -noout

If your certificate contents successfully display on the screen, you can assume the certificate is encoded in PEM format and not in binary DER format. Changing the Certificate File Extension If you are installing the certificate on a PCoIP Software Client, you will need to change the certificate's file extension to .crt. To change the certificate file extension: 1. From a Windows Explorer window, right-click on your root CA certificate and select Rename. 2. Change the extension from .pem to .crt.

Installing Root CA Certificates in the Teradici PCoIP Software Client for Mac For Mac OS X, certificates are stored in the Keychain Access application. To import your root CA certificate in the Teradici PCoIP Software Client for Mac: 1. Copy your root CA certificate file (*.crt) to the Mac client desktop. 2. Double-click on Applications > Utilities Keychain Access.app to open Keychain Access. 3. Select File > Import Items. 4. Navigate to the desktop and then select your root CA certificate.

TER1505005 56 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

5. In the Destination Keychain drop-down menu, select System, and then click Open. 6. If prompted, enter your Keychain Access password and then click Modify Keychain. 7. At the next screen, click Always Trust when asked whether you want your computer to trust certificates signed by this certificate. 8. If prompted, enter your Keychain Access password and then click Update Settings.

After the certificate installs successfully, it appears in the System > Certificates list. Installing Root CA Certificates in the Teradici PCoIP Software Client for Windows:

Note: Windows must trust your root certification authority When you use your own private key and certificate, you must add your internal root CA certificate to the Windows Trusted Root Certification Authorities certificate store on the client computer. Users without a trusted root CA will receive an Unable to get local issuer certificate error and fail to connect.

The following instructions explain how to add a root CA certificate to the Trusted Root Certification Authorities store on a client PC using Microsoft Management Console.

Note: Active Directory group policies For information on using Active Directory Group Policy to distribute certificates to client computers, see http://technet.microsoft.com/en- us/library/cc772491.aspx.

To import the root CA certificate for the Teradici PCoIP Software Client for Windows: 1. Copy your root CA certificate file (*.crt) to a directory reachable by your Windows client. 2. Open Microsoft Management Console: a. Press + r to open a run dialog..

b. Type mmc and press Enter. 3. Add the Certificates snap-in: a. Select File > Add/Remove Snap-in. b. Select Certificates from the Available snap-ins list and then click Add.

TER1505005 57 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

c. Select My user account and then click Finish. d. Click OK. 4. Import the root CA certificate: a. Expand Certificates - Current User. b. Right-click on Trusted Root Certification Authorities, select All Tasks > Import from the context menu, and then click Next. c. Use the Browse button to navigate to the directory where your root CA certificate is located and select your root CA certificate. d. Click Open and then Next. e. Select the option to place all certificates in the Trusted Root Certification Authorities certificate store. f. Click Next and then Finish. g. At the security warning, click Yes.

After the certificate installs successfully, it appears in the Trusted Root Certification Authorities > Certificates list. Installing in a PCoIP Mobile Client The Teradici PCoIP Mobile Client software does not implement certificate installation. To install your internal root CA certificate on an iOS or Android device, consult the documentation for your device. Configuring the Agent Certificate Mode The PCoIP Graphics Agent chooses a certificate based on the parameters set in the Configure PCoIP Security Certificate Settings GPO variable. Since the PCoIP Graphics Agent automatically generates and uses self-signed certificates by default, you only need to configure the Configure PCoIP Security Certificate Settings GPO variable if you are deploying your own custom certificates. You can configure the PCoIP Graphics Agent to handle certificates in the following ways:

l Always use self-signed certificates (default)

l Always use local custom certificates

l Attempt to use a local certificate, and revert to self-signed if not found

Note: Import the administrative template file before configuring The Configure License Server Path GPO variable only appears in the GPO editor after you Importing the GPO Administrative Template on page 23.

TER1505005 58 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

The example in this section configures the agent to look for the certificate only in the remote workstation's Windows certificate store. The example also gives the store the friendly name of 'PCoIP'. These settings are mandatory when you deploy your own custom certificates. To configure the Configure PCoIP Security Certificate Settings GPO variable with a custom certificate: 1. Open the Local GPO Editor: a. Press + r to open a run dialog.

b. Type gpedit.msc and press Enter. 2. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > PCoIP Session Variables > Not Overridable Administrator Defaults

3. Double-click Configure PCoIP Security Certificate Settings to open the variable's dialog. 4. Select Enabled to enable the setting. 5. In the How the PCoIP agent chooses the certificate... drop-down list, select From the Certificate Store.

TER1505005 59 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

6. In The minimum key length... drop-down list, select the desired minimum key length (in bits).

7. Click OK. 8. Close the Local Group Policy Editor and reboot the host desktop to apply your settings.

After the PCoIP agent restarts, you can verify that it is using your custom certificate by checking the agent's level 2 log files.

Related: Log files For more information about log files, see Performing Diagnostics on page 37. For instructions on how to set the log level, see Setting Log Levels on page 40.

TER1505005 60 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

VMware vSphere Deployments This section contains basic configuration instructions for users of VMware vSphere ESXi Hypervisors. Configuring Multiple Monitors on an ESXi Host for Virtualized Workstations ESXi hosts must be configured to use your GPU in virtualized workstations. The following sections provide basic instructions for:

l Adding an NVIDIA GRID graphics card to your ESXi virtual machine

l Configuring the number of monitors your virtual machine will use with non-GRID GPUs

ESXi hosts must be configured to use your GPU in virtualized workstations. The following sections provide basic instructions for adding an NVIDIA GRID graphics card to your ESXi virtual machine. See VMware documentation for complete details. Configuring Multiple Monitors for NVIDIA GRID vGPU This section describes how to add a shared NVIDIA GRID PCI device to your virtual machine and specify its GPU profile. The following instructions are only required for virtualized workstations using a supported NVIDIA GRID vGPU video card. For details, see System Requirements on page 7.

Note: Monitor limitations The PCoIP Graphics Agent supports up to four displays. Your video card may limit the actual number of displays you can have.

Before you begin, ensure the following prerequisites are met:

l You have installed the NVIDIA GRID graphics card and supported driver on the ESXi host.

l You have installed VMware Tools on your ESXi host and the VMware SVGA 3D driver on the virtual machine.

l You have local administrative permission to the workstation.

l You have disabled OS power management features on the workstation.

TER1505005 61 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

To add a shared PCI device and specify its GPU profile: 1. Using vSphere Web Client, right-click the virtual machine in the Navigator list and select Power > Power Off. 2. Right-click the virtual machine and select Edit Settings.

3. In the New device drop-down list, select Shared PCI Device and then click Add. 4. Click Reserve all memory. 5. In the GPU Profile drop-down list, select the profile for your card. This profile determines how many virtual display heads, or displays, are available for your card. 6. Click OK. 7. Start the virtual machine.

TER1505005 62 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Configuring Displays for NVIDIA GRID with Pass- Through This section describes how how to add an NVIDIA GRID PCI device to your ESXi host. The following instructions are only required for virtualized workstations using a supported NVIDIA GRID video card with pass-through. For specific supported models, see System Requirements on page 7. Before you begin, ensure the following prerequisites are met:

l You have installed the NVIDIA GRID graphics card.

l You have installed VMware Tools on your ESXi host and the VMware SVGA 3D driver on the virtual machine.

l You have local administrative permission to the workstation.

l You have disabled OS power management features on the workstation.

To add a PCI device: 1. Using vSphere Web Client, right-click the virtual machine in the Navigator list and select Power > Power Off. 2. Right-click the virtual machine and select Edit Settings.

TER1505005 63 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

3. In the New device drop-down list, select PCI Device and then click Add.

4. Click OK. 5. Start the virtual machine. Configuring the Number of Displays with Non-GRID- Compatible GPUs When using non-GRID GPUs in virtualized workstation virtual machine using vSphere Client, you must specify the number of displays the virtual machine will use. You can do this when you first create the virtual machine or at any time afterwards. To configure the number of displays for a virtual machine with a non-NVIDIA GPU: 1. Using vSphere Client, create the virtual machine with the desired settings. 2. In the Ready to Complete dialog, enable Edit the virtual machine settings before completion, and then click Continue. 3. In the Virtual Machine Properties dialog, select Video card.

TER1505005 64 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

4. In the Displays and video memory section, select the number of displays the video card will support for this virtual machine.

5. If desired, enter any other video card parameters. 6. Click OK. 7. Start the virtual machine.

To change the number of monitors in an existing virtual machine: 1. Shut down the virtual machine 2. Right-click the virtual machine in the Inventory List 3. Select Edit Settings 4. In the Virtual Machine Properties dialog, select Video card. 5. In the Displays and video memory section, select the number of displays the video card will support for this virtual machine. 6. Click OK. 7. Start the virtual machine.

TER1505005 65 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Frequently Asked Questions Q: Can I use a screensaver? A: Yes. However, a blank, static screensaver will provide the most efficient CPU and network bandwidth usage.

Q: Why can't I use the maximum number of monitors or monitor resolution? A: GPU profile licensing, GPUs, or clients may limit monitor resolution and monitor count, which will prevent you from utilizing the full agent specification. For more information, see Supported Displays on page 30.

Q: Which graphics rendering APIs are supported? A: The PCoIP Graphics Agent captures and delivers the output from the GPU, which is responsible for providing rendering APIs like OpenGL and DirectX 3D. See the documentation for your GPU for more information about rendering APIs.

Q: How quickly does a PCoIP Graphics Agent complete a connection? A: The Teradici PCoIP Graphics Agent can usually achieve a connection time in 15 to 30 seconds. Teradici uses the statistical value Top Percentile (TP) to measure the time to establish a session: l TP99: Ninety-nine percent of connections complete in under 30 seconds.

l TP50: Fifty percent of connections complete in under 15 seconds.

Q: What do I need to know about power management? A: Hosts with Windows power management enabled may drop PCoIP connections when turning off displays or going to sleep. If this behavior is undesirable, these Windows power management features should be turned off. To disable Windows power management features: 1. From the Windows Control Panel, open Power Options. 2. Click Change plan settings next to the enabled power plan. 3. Select Never in the drop-down list for Turn off the display 4. Select Never in the drop-down list for Put the computer to sleep. 5. Click Save changes.

Q: Why am I seeing black bars?

TER1505005 66 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

A: Black bars may appear around the outside of your desktop when there is a mismatch between the supported resolutions on the host side and the client monitors. This is only applicable to the Teradici PCoIP Graphics Agent, and only when the PCoIP Graphics Agent is not able to successfully initialize or communicate with the NVIDIA GPU via the Grid APIs. For more information, see Handling GPU Configuration Problems on page 43.

Q: Why is my display topology broken after upgrading my GRID card? A: If you upgrade your NVIDIA graphics card to a new supported GRID driver version after installing the Graphics Agent, the NVIDIA Capture SDK may need to be manually re-enabled on the PCoIP Graphics Agent.

To enable the NVIDIA Capture SDK, run the following command on the host machine:

C:\Program Files (x86)\Teradici\PCoIP Agent\GRID\NvFBCEnable.exe -enable

Q: Why is my application not sending audio? A: The PCoIP Graphics Agent delivers audio over PCoIP connections by reassigning the system's default audio device. Only applications that use the system default audio device will send or receive audio over PCoIP; applications that are configured to use non-default devices will not work. If you don't hear audio from your application, make sure it is configured to use the system default audio device.

Q: I'm using Teradici Cloud Licensing. What network blocks should I leave open? A: If you are using Teradici Cloud Licensing, you will need to whitelist the following:

l teradici.flexnetoperations.com

l teradici.compliance.flexnetoperations.com

Alternatively, you can also ensure the following network blocks are whitelisted: l Production: 64.14.29.0/24

l Disaster Recovery: 64.27.162.0/24

The following network blocks are not currently in use, but may also be used in the future:

l Production: 162.244.220.0/24

l Disaster Recovery: 162.244.222.0/24

TER1505005 67 Teradici PCoIP® Graphics Agent 2.12 for Windows Administrators' Guide

Teradici Corporation #301-4601 Canada Way, Burnaby, BC V5G 4X8 Canada phone +1.604.451.5800 fax +1.604.451.5818 www.teradici.com The information contained in this documentation represents the current view of Teradici Corporation as of the date of publication. Because Teradici must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Teradici, and Teradici cannot guarantee the accuracy of any information presented after the date of publication. This document is for informational purposes only. TERADICI MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Teradici Corporation. Teradici may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Teradici, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. Visit Notice of Intellectual Property Rights for more information. © 2004-2018 Teradici Corporation. All rights reserved. Teradici, PC-over-IP, and PCoIP are trademarks of Teradici Corporation and may be registered in the United States and/or other countries. Any other trademarks or registered trademarks mentioned in this release are the intellectual property of their respective owners.

TER1505005 68