Workstation Profiles
IPI Enterprise Server – Workstation Profile.
Last updated
IPI Enterprise Server – Workstation Profile.
Last updated
Administrators can set the options for Locking and Unlocking Workstations directly in the web interface of IPI Enterprise Server on the section Workstations → Profiles.
To set the Proximity lock and unlock settings, the Administrator has to configure those settings on the IPI Enterprise Server.
For that reason, there is a section Workstation Profiles on the IPI Enterprise Server.
The Admin has to create a new one with the required configuration and assign the Workstations to that profile (1) or edit the existing Workstation profile (2).
Enable Proximity Lock – If this option is enabled, the workstation will be automatically locked in case of disconnection from IPI Key or if the signal level drops below the specified threshold.
Proximity Lock Signal Level · X%
This is the signal level below which the workstation will be locked. It is indicated in percentage. The recommended level is 20-30%.
Proximity Lock Delay · X sec.
It sets a delay before locking the computer. If during this time the signal level increases above the threshold, the locking process will not occur. The delay is specified in seconds. To reduce the number of false locking, it is recommended to set it to 5–10 seconds.
Enable Proximity Unlock – If this option is enabled, the workstation will be automatically unlocked if the signal level from IPI Key rises above the specified threshold. The signal level can be measured even without the actual connection of the IPI Key.
Proximity Unlock Signal Level · X%
This is the signal level above which the workstation will be unlocked. It is indicated in percentage. The recommended level is 70-80%.
To enable proximity to unlock for certain workstation Administrator have to add that workstation to the Proximity Unlock Workstations. In case, the Administrator does not do this, automatic Proximity unlocking will not work, even if it is set in the Workstation profile.
To enable Proximity Unlock for the workstation two conditions must be met:
workstation added to the Proximity Unlock Workstations
workstation assigned with the Profile which has Enabled Proximity Unlock
Please note, it is not recommended to simultaneously add multiple IPI Key devices for unlocking the same computer remotely, as this may lead to false unlocks.
When we add a new workstation it has a profile “Default”, that uses the following settings for proximity: - locking occurs when Bluetooth signal strength drops below 20-30%, - unlocking occurs when Bluetooth signal strength exceeds 70-80%.
Actual distances in meters can vary greatly in different rooms and depend on external factors (location of the IPI Key, the presence of furniture and walls in the room, etc.). You need to determine optimal parameters for yourself experimentally.
Important Conditions:
The proximity mechanism is not very stable. The signal can constantly change (even when the key lies in one place). Within a few seconds, the signal level can vary by 30-40 units! It is influenced by a lot of factors: mobile networks and other Bluetooth devices. These are the properties of the technology itself. According to our observations, we recommend setting intervals between the values of at least 40. We have chosen the optimal values: Enable Proximity Lock - 20-30%; Enable Proximity Unlock - 70-80%.
Handle BLE Tap – Treat IPI Key to IPI Dongle tap as an action for a third-party app. E.g., if you tap IPI Key to Dongle, this action will generate an event that could be applied in the third-party app. This option could be useful if the supervisor has to confirm the operation of the Employee on some specific workflow. Also, the event will appear in the Remote Workstation as well.
Allow Multiple Device Connections - Allow simultaneous connection of multiple IPI Keys to the computer. If you disable that option, you cannot connect more than one IPI Key to works station. Also, that option allows generating BLE Tap events as the previous option.
The next two options work only via Remote Desktop Protocol by Windows.
Auto Forward Device - Automatically forward the device to the remote machine when an RDP connection is made. User confirmation is required. E.g., if you connect from the local workstation with a connected IPI Key to the Remote Workstation by Windows RDP, the IPI Key will appear in the Remote and Local workstations automatically in the section Remote Vault. That means you do not need to enter manually the serial number of the IPI Key.
Auto Confirm Device Forwarding - Do not require user confirmation for establishing a connection to IPI Key on a remote computer. That means you do not need to confirm on the local workstation the connection IPI Key to the remote workstation. The IPI will appear in the remote workstation automatically. That option works only with the enable option Auto Forward Device (previous option).
\
