User Guide (Administrators) - static.huaweicloud.com · HUAWEI TECHNOLOGIES CO., ... Different from the conventional local VDI solution, ... Client, Thin Client, and Mobile Terminal)

Workspace

User Guide (Administrators)

Issue 18

Date 2018-08-17

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei and thecustomer. All or part of the products, services and features described in this document may not be within thepurchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees orrepresentations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

Bantian, LonggangShenzhen 518129People's Republic of China

Website: http://e.huawei.com

Issue 18 (2018-08-17) Copyright © Huawei Technologies Co., Ltd. i

http://e.huawei.com

Contents

1 Introduction.................................................................................................................................... 11.1 Concepts......................................................................................................................................................................... 11.1.1 Workspace....................................................................................................................................................................11.1.2 Software Client............................................................................................................................................................ 21.1.3 Thin Client...................................................................................................................................................................21.1.4 Mobile Terminal.......................................................................................................................................................... 21.1.5 Infrastructure Server.................................................................................................................................................... 21.1.6 AD Management Server.............................................................................................................................................. 21.1.7 Desktop........................................................................................................................................................................31.1.8 Regions and AZs......................................................................................................................................................... 31.1.9 Project..........................................................................................................................................................................31.2 Application Scenarios.....................................................................................................................................................31.3 Service Process and Function Overview........................................................................................................................ 41.4 Accessing and Using Workspace....................................................................................................................................61.4.1 How to Access Workspace.......................................................................................................................................... 61.4.2 Workspace Packages....................................................................................................................................................61.4.3 Related Services.......................................................................................................................................................... 71.4.4 User Permissions......................................................................................................................................................... 8

2 Getting Started............................................................................................................................... 92.1 Logging In to the Workspace Management Console......................................................................................................92.2 Applying for the Workspace Service..............................................................................................................................92.3 Purchasing Workspace Desktops.................................................................................................................................. 112.4 Logging In to a Desktop Using an SC..........................................................................................................................172.5 Logging In to a Desktop Using an SC (Using a Proxy for Internet Access)................................................................192.6 Logging In to a Desktop Using a Browser................................................................................................................... 222.7 Logging In to a Desktop Using a TC............................................................................................................................242.8 Logging In to a Desktop Using a Mobile Terminal (Android).....................................................................................252.9 Logging In to a Desktop Using a Mobile Terminal (iOS)............................................................................................ 27

3 Operation Guide (Administrators).......................................................................................... 303.1 Overview...................................................................................................................................................................... 303.2 Managing Desktops...................................................................................................................................................... 313.3 Managing Users............................................................................................................................................................32

WorkspaceUser Guide (Administrators) Contents

Issue 18 (2018-08-17) Copyright © Huawei Technologies Co., Ltd. ii

3.4 Viewing User Login Records........................................................................................................................................353.5 Managing Policies........................................................................................................................................................ 353.6 Restoring Infrastructure Server Data............................................................................................................................393.7 Changing the Internet Access Port............................................................................................................................... 403.8 Changing the Service Subnet........................................................................................................................................403.9 Configuring Two-Factor Authentication...................................................................................................................... 413.10 Changing the Password of a Domain Administrator.................................................................................................. 433.11 Monitoring.................................................................................................................................................................. 433.11.1 Workspace Monitoring Metrics............................................................................................................................... 433.11.2 Setting Alarm Rules.................................................................................................................................................443.11.3 Viewing Monitoring Metrics................................................................................................................................... 443.12 Recording Workspace Operations.............................................................................................................................. 453.12.1 Key Operations Recorded by CTS.......................................................................................................................... 453.12.2 CTS Traces.............................................................................................................................................................. 473.13 Canceling Workspace................................................................................................................................................. 48

4 Operation Guide (End Users)....................................................................................................494.1 Introduction to Workspace............................................................................................................................................504.2 Introduction to Terminals............................................................................................................................................. 534.3 Risky Operations.......................................................................................................................................................... 554.4 Failure When Connecting to Desktops.........................................................................................................................584.5 Dual-Screen Display Configuration............................................................................................................................. 584.6 HDPDeviceHelper Peripheral Assistant.......................................................................................................................62

5 FAQs (Administrators)............................................................................................................... 635.1 What Is Workspace?..................................................................................................................................................... 635.2 What Are the Features and Advantages of Workspace?...............................................................................................635.3 What Is the Process of Using Workspace?................................................................................................................... 645.4 What Are Workspace Packages?.................................................................................................................................. 645.5 How Is Workspace Charged?........................................................................................................................................655.6 Do I Need to Purchase TCs?.........................................................................................................................................655.7 How Do End Users Access the Internet?......................................................................................................................665.8 How Do I Install Applications on the Desktop?...........................................................................................................705.9 What Resources Do I Need to Prepare Before Applying for Workspace?................................................................... 715.10 What Should I Do If I Fail to Apply for Workspace?.................................................................................................725.11 How Is Workspace Connected to Enterprise Intranets?..............................................................................................725.12 How Do I Interconnect Workspace with Microsoft AD?........................................................................................... 735.13 What Should I Do If I Fail to Apply for Workspace by Interconnecting with Microsoft AD?..................................775.14 How Do I Check the Network Status of Desktops?................................................................................................... 775.15 What Are the Network Requirements for Accessing the Desktop?........................................................................... 79

6 FAQs (End Users)........................................................................................................................ 806.1 What Devices Can Be Used to Log In to Workspace?................................................................................................. 806.2 What Are the Precautions for Using Workspace?........................................................................................................ 80


Issue 18 (2018-08-17) Copyright © Huawei Technologies Co., Ltd. iii

6.3 What OSs Can Run on Workspace?............................................................................................................................. 846.4 Can I Upgrade OSs by Myself?....................................................................................................................................846.5 How Do I Install Applications on the Desktop?...........................................................................................................846.6 What Software Is Compatible with Workspace?.......................................................................................................... 846.7 How Does Workspace Manage Peripherals?................................................................................................................856.8 Does Workspace Support Personalized Settings?.........................................................................................................856.9 Can Data in Workspace Be Saved for a Long Time?................................................................................................... 866.10 How Do I Use a Local Printer for Printing?...............................................................................................................866.11 How Do I Use a Network Printer for Printing?.......................................................................................................... 866.12 What Should I Do If the Desktop Cannot Be Connected?......................................................................................... 866.13 How Do I Log In to the Desktop for Maintenance Using VNC?............................................................................... 866.14 What Should I Do If the Desktop Freezes When Using Workspace?........................................................................ 876.15 How Do I Check the Network Status of Desktops?................................................................................................... 906.16 How Do I Change the Login Password?.................................................................................................................... 916.17 How Do I Change the Login Password (Mobile Client)?.......................................................................................... 926.18 What Should I Do If I Forget the Password?..............................................................................................................936.19 What Should I Do If the Account Is Locked?............................................................................................................ 936.20 Does Workspace Support Dual-Screen Display?....................................................................................................... 946.21 What Should I Do If I Fail to Log In to the GPU Desktop Using an SC?..................................................................97

A Change History........................................................................................................................... 98


Issue 18 (2018-08-17) Copyright © Huawei Technologies Co., Ltd. iv

1 Introduction

1.1 Concepts

1.1.1 WorkspaceConcept

Workspace is a cloud computing-based desktop service that outperforms personal computers(PCs) and the conventional Virtual Desktop Infrastructure (VDI) solution.

Workspace provides the same configurations (including vCPUs, GPUs, memory, and disks) asthose of PCs and Windows OSs. Its familiarity ensures that you can use Workspace like usingyour own PCs.

Different from the conventional local VDI solution, Workspace does not require highinvestment or a long deployment period. Workspace can automatically handle heavydeployment tasks and provide hosting services.

Workspace supports access from multiple devices, including computers running Windows andMac OSs, as well as iPads, iPhones, and Android smart devices (For details, see SoftwareClient, Thin Client, and Mobile Terminal). With Workspace, you can save and obtain files,and use applications anytime and anywhere, implementing mobile office.

Procedure

After you apply for Workspace, a secure and exclusive Workspace infrastructure server (Fordetails, see AD Management Server) will be deployed and a dedicated elastic IP addressused for accessing Workspace will be allocated to you.

You can create an active directory (AD) domain (For details, see Infrastructure Server) onthe cloud or use your local Microsoft AD domain when you apply for the Workspace service.

With Workspace, you can effortlessly create and configure desktops (For details, seeDesktop). Workspace provides packages of multiple types so that you can create desktopsbased on your requirements. After you apply for the Workspace service and desktops aresuccessfully created, the system will notify the end users by email.

Principle

Figure 1-1 illustrates basic principles of Workspace.

WorkspaceUser Guide (Administrators) 1 Introduction

Issue 18 (2018-08-17) Copyright © Huawei Technologies Co., Ltd. 1

Figure 1-1 Basic principles of Workspace

1.1.2 Software ClientA software client (SC) runs on local PCs running Windows or Mac OSs and is used forlogging in to and using Workspace.

1.1.3 Thin ClientA thin client (TC) is a PC-standard-compliant computer that uses an embedded processor andsmall-sized flash memory and runs a simplified OS. It is used to access Workspace. The TCsends whatever entered by the mouse and keyboard to the backend server for processing andthen the backend server returns the processing result to the display connecting to the TC. TCsof various models provide different performance, peripheral ports, and operation portals. Thevariety of TCs meets the requirements of different scenarios, such as common office, highsecurity, and high-performance graphics design.

1.1.4 Mobile TerminalA mobile terminal is a mobile device used for logging in to and using Workspace, includingiPads, iPhones, and Android smart devices.

1.1.5 Infrastructure ServerAn infrastructure server is automatically created when you apply for Workspace and runscomponents such as desktop management. Two infrastructure servers occupy two quotas,including two instances, eight cores, and 32 GB memory.

1.1.6 AD Management ServerThe active directory (AD) management server, an infrastructure component where the ADservice is deployed, provides directory service functions for centralized organizationmanagement and network resource access. You can create an AD domain on the cloud or useyour local Microsoft AD domain when you apply for the Workspace service.



1.1.7 DesktopA desktop is a virtual computer system where desktop agent software is installed and that caninteract with desktop management components.

Workspace deposits all desktops in the data center for unified management. End users canaccess the desktop by using SCs, browsers, TCs, or mobile terminals to obtain complete PC-like user experience.

1.1.8 Regions and AZsA region is a geographic area where Workspace is located.

Workspace services in the same region can communicate with each other over an intranet, butthose in different regions cannot.

HUAWEI CLOUD data centers are deployed worldwide in places such as North America,Europe, and Asia. Workspace is therefore available in different regions. For example,applications can be designed to meet user requirements in specific regions or comply withlocal laws or regulations.

Each region contains many availability zones (AZs) where power and networks are physicallyisolated. AZs in the same region can communicate with each other over an intranet. Each AZprovides cost-effective and low-latency network connections that are unaffected by faults thatmay occur in other AZs. Using Workspace deployed in an independent AZ protects yourapplications against failures in a single place.

1.1.9 ProjectProjects are used to group and isolate OpenStack resources (computing resources, storageresources, and network resources). A project can be a department or a project team. Multipleprojects can be created for one account.

1.2 Application ScenariosUse of conventional PC desktops or the local VDI solution requires high investment andfeatures difficult and complicated deployment and management. For Workspace, neither earlyinvestment nor continuous infrastructure management is required. You can apply for acomplete set of cloud desktop computing services, such as computation and persistent storage,with certain fees, providing secure desktop experience with various access options for yourusers in simple and cost-effective ways.

Workspace can be applied to mainstream industries including government and public utilities,telecommunications, energy, finance, transportation, medical care, education, broadcasting,media, and manufacturing. It is applicable to diversified scenarios, such as common office,security office, branch office, and public terminal (call center, business hall, and trainingclassroom).

l Mobile office scenario

Users can log in remotely to Workspace anytime and anywhere. Workspace is applicablefor employees who are on business trips frequently and need to work in many locations.

l Short-term use scenario



Workspace and necessary application system services can be configured for short-termemployees of enterprises. After the short-term employees leave, their services can bestopped.

l Security office automation (OA) scenario

Workspace can provide enterprises with office solutions that comply with the enterprises'security standards. Permission to access physical devices can be controlled and data isnot locally stored, thereby improving the security of enterprise data.

l Branch office scenario

Workspace is applicable for employees who work in branches and external employees.They can log in to Workspace to access applications on the headquarters network. Data isnot locally stored.

l High-definition (HD) graphics processing scenario

Workspace provides 2D and 3D graphics processing capabilities for end users andsupports multiple high-performance graphics software such as Computer Aided Design(CAD) and Geographic Information System (GIS), 3D game software, and omnimediavideo editing software. Workspace can meet the high-performance graphics processingrequirements of customers from multiple industries (including engineering,manufacturing, oil, automobile, medical care, game, and media).

1.3 Service Process and Function OverviewWorkspace provides two different operation pages for administrators and end usersrespectively. Administrators apply for the Workspace service, purchase desktops, managedesktops and users on the Workspace management console. End users log in to and usedesktops on the web page.

Figure 1-2 shows the processes for applying Workspace and purchasing a Workspacedesktop.

Figure 1-2 Operation process for administrators

Figure 1-3 shows the process for logging in to and using a desktop.



Figure 1-3 Operation process for end users

Table 1-1 describes the functions provided by Workspace.

Table 1-1 Function list

Role Function Description

Administrator Self-serviceserviceapplication

The administrator can apply for the Workspaceservice online in self-service mode.

Self-servicedesktop creation

The administrator can create Workspace desktopsonline in self-service mode.

User login recordquery

User login information can be recorded, includinglogin time and device types.

LiteADauthentication

The Linux-based AD can be used to implementusername and password authentication.

Customer ADdiversification

Existing Microsoft ADs of enterprises can beinterconnected.

Policymanagement

The administrator can configure policies to managedevices such as printers and USB devices.

End user End usernotification email

The administrator can send notification emails tonew users who obtain desktops.

Windows 7desktopexperience

The Windows 7 desktop experience based on theWindows Server 2008 R2 64-bit OS is provided.

Windows 10desktopexperience

The Windows 10 desktop experience based on theWindows Server 2016 OS is provided.



Role Function Description

Multi-deviceaccess

End users can access desktops by using PCs runningWindows or Mac OSs and Android or iOS mobilephones or tablets.

1.4 Accessing and Using Workspace

1.4.1 How to Access WorkspaceHUAWEI CLOUD provides a web-based service management platform. Users can accessWorkspace by using a management console. For details about how to log in to the Workspacemanagement console, see Logging In to the Workspace Management Console.

You need to enable ports listed in Table 1-2 on the enterprise firewall so that end users canlog in to the desktops properly.

Table 1-2 Internet access ports

Port Protocol Description

443 TCP Used by the end user to access the web login page.

8443 TCP Used by the end user to access the desktop.

NOTE

By default, port 443 and port 8443 are used. If you want to change the ports, see Changing the InternetAccess Port.

Figure 1-4 shows how an end user accesses Workspace through a specified port.

Figure 1-4 Accessing Workspace

1.4.2 Workspace Packages

Workspace PackagesWorkspace packages are resources that are packaged for leasing. Table 1-3 lists Workspacepackages.



Table 1-3 Workspace packages

PackageType

vCPU Memory

GPU SystemDisk

DataDisk

OS

Economical 2 2 GB - 60 GB 100 GB Windows

Standard 2 4 GB - 60 GB 100 GB Windows

Advanced 4 8 GB - 60 GB 150 GB Windows

Luxury 8 16 GB - 60 GB 200 GB Windows

GPU Adesktop

4 8 GB M60-1Q (1GB)

80 GB 200 GB Windows

GPU Bdesktop

8 16 GB M60-2Q (2GB)


NOTICEl When an order expires, a 7-day grace period is provided. Services in the grace period are

still available.l After the grace period elapses, a 15-day reservation period is provided. Resources in the

reservation period are unavailable but retained.l The resources are automatically deleted after the reservation period elapses and the order

is not renewed.

Charging Mode of AD Management Virtual Desktopsl For a normal order, AD management virtual desktops are not charged.l If the administrator applies for the Workspace service but does not purchase desktops in

more than 15 days, the AD management desktops will be reclaimed. The administratormust apply for Workspace again for subsequent use.

1.4.3 Related Servicesl ECS

Elastic Cloud Server (ECS) is a computing server that consists of CPUs, memory,images, and Elastic Volume Service (EVS) disks, and supports on-demand allocation andelastic scaling. The Workspace service invokes ECS interfaces to create desktops.

l IMSImage Management Service (IMS) provides a simple and convenient self-servicemanagement function. In Workspace, desktops are created based on IMS.

l ELBElastic Load Balance (ELB) is a service that automatically distributes access traffic tomultiple ECSs to balance their service loads. It enables you to achieve greater levels offault tolerance in your applications and expand application service capabilities. ELB isthe access entry of Workspace from the Internet.



l VPCVirtual Private Cloud (VPC) provides virtual networks similar to conventional networksand advanced network services, such as elastic IP addresses, security groups, and virtualprivate networks (VPNs). The VPC service implements network isolation in logicalmode and provides secure and isolated network environments for Workspace.

l DirectConnectDirect Connect (DirectConnect) is a service that allows you to establish a dedicatednetwork connection from your data center to the cloud platform. With DirectConnect,potential network delays when Workspace is used are reduced, which provides a high-performance system to satisfy user experience.

l IAMIdentity and Access Management (IAM) is a Web service. The administrator can applythis service to manage users and user rights. Only after an account is created throughIAM can the administrator use related resources of Workspace.

l NAT gatewayThe NAT gateway provides the Network Address Translation (NAT) service forWorkspace desktops in a VPC so that multiple Workspace desktops can share an EIP toaccess the Internet.

l Tag Management Service (TMS)Tag Management Service (TMS) is a visualized service for fast, unified tag managementthat enables you to control your resource permissions and billing across regions andservices. Tags identify Workspace desktops so that the desktops can be categorized easilyand searched quickly.

l CTSCloud Trace Service (CTS) generates traces to enable you to get a history of operationsperformed on cloud service resources. The content of a trace includes operation requestssent using the management console or open APIs as well as the operation results. Youcan view all generated traces to query, audit, and backtrack performed operations.

l Cloud EyeCloud Eye is an open monitoring platform that helps you monitor the statuses ofWorkspace infrastructure servers in real time. Cloud Eye supports multiple alarm modesto ensure timely pre-warning and normal service running.

1.4.4 User PermissionsHUAWEI CLOUD provides two types of user permissions by default: user management andresource management.

User management refers to the management of users, user groups, and user group rights.

Resource management refers to the control operations that can be performed by users oncloud service resources.

For further details, see Permission Description.



https://support.huaweicloud.com/en-us/usermanual-permissions/en-us_topic_0063498930.html

2 Getting Started

2.1 Logging In to the Workspace Management Console

Scenario

Log in to the Workspace management console.

Procedure

Step 1 Use the administrator account to log in to HUAWEI CLOUD.

Step 2 Click in the upper-left corner of the management console and select Region and Project.

Step 3 On the console home, locate Enterprise Application and select Workspace.

The Workspace management console is displayed.

----End

2.2 Applying for the Workspace Service

Scenario

Apply for the Workspace service. After you apply for Workspace, a secure and exclusiveWorkspace infrastructure will be deployed and a dedicated elastic IP address used foraccessing Workspace will be allocated to you. The AD is a necessary component used formanaging users and desktops. You can create an AD on the cloud or use an existing AD. Afteryou apply for the Workspace service, you can purchase Workspace desktops.

Prerequisites

When applying for Workspace, if the existing enterprise AD domain is used, refer to How DoI Interconnect Workspace with Microsoft AD? to enable related ports on the AD server andprepare the following data:

WorkspaceUser Guide (Administrators) 2 Getting Started


l Domain namel Domain administrator's account and passwordl Active domain controller IP addressl (Optional) Standby domain controller IP addressl Active DNS server IP addressl (Optional) Standby DNS server IP address

Procedure

Step 1 Log in to the Workspace management console.

Step 2 On the Dashboard page, click Click here to complete real-name authentication andcomplete real-name authentication as prompted.

Step 3 On the Dashboard page, click Apply for Workspace.

The Apply for Workspace page is displayed.

Step 4 Select an AZ based on actual conditions.

NOTE

An AZ is a physical region where resources use independent power supplies and networks. AZs arephysically isolated but interconnected through an internal network, improving HA of applications.

Step 5 Click View VPC to create a VPC and a subnet.

For details about how to create a VPC, see the Virtual Private Cloud User Guide.

NOTE

You are advised to use 16-bit subnet gateways during VPC creation. After you apply for the Workspaceservice, do not modify the VPC configuration.

Step 6 Click to refresh the drop-down list.

Step 7 Configure the VPC.

Select the VPC and Service Subnet created in Step 5 and enter Management Subnet.

NOTE

l You can select multiple subnets to support more desktops.

l Use the subnet that is created in Step 5 and dedicated to Workspace. Do not use the subnet dedicatedto other services.

l The service subnet is used by desktops to access applications and resources on ECSs or enterprisesinternets.

l The management subnet is used for internal communication among desktops.

Step 8 Configure the AD domain.

Check whether your enterprise has an AD domain.

l If yes, go to Step 10.l If no, go to Step 9.

Step 9 Create an AD domain.



https://support.huaweicloud.com/en-us/vpc_dld/index.html

Set the Domain Name, Domain Administrator Account, Domain AdministratorPassword, and Confirm Password parameters of the new AD domain.

After an AD domain is created, go to Step 11.

NOTE

To ensure system security, you need to change the password periodically. You are advised to change thepassword every three months.

Step 10 Connect to the existing domain.

Set the Domain, Domain Administrator Account, Domain Administrator Password,Primary domain controller IP address, Backup domain controller IP address (optional),Active DNS IP address, and Standby DNS IP address (optional) parameters of the existingdomain.

NOTE

When you use an existing AD domain, ensure that the related ports of the firewall are enabled. Fordetails, see How Do I Interconnect Workspace with Microsoft AD?.

Step 11 Specify the network access mode. By default, Internet access is selected. You can selectmultiple options.l If the network quality does not meet requirements, you can select DirectConnect access.

For details about the network quality requirements, see What Are the NetworkRequirements for Accessing the Desktop?.

l If GPU desktops are required, you must select DirectConnect access.

NOTE

The DirectConnect access mode provides the load balancing capability. Therefore, enterprises do notneed to deploy third-party load balancers before access addresses.

Step 12 Read the Huawei Workspace Service Agreement.

Step 13 Select I have read and agree to the Huawei Workspace Service Agreement.

Step 14 Click Apply Now. The Workspace service application is complete.

NOTE

l The application process takes about 40 minutes.

l The system creates WorkspaceManagerSecurityGroup and WorkspaceUserSecurityGroupsecurity groups in the VPC during the application. WorkspaceManagerSecurityGroup is used formanagement components, and WorkspaceUserSecurityGroup is used for user desktops. Bydefault, only virtual desktops in the WorkspaceUserSecurityGroup security group can access eachother. If you want to access a virtual desktop in the security group from an external desktop, chooseVPC > Security Groups to modify the configurations.

----End

2.3 Purchasing Workspace Desktops

Scenario

Select and purchase related packages and assign desktops to end users after applying for theWorkspace service. After the administrator creates desktops, end users will be informed byemail that Workspace desktops are provisioned.



ProcedureYearly/Monthly


Step 2 On the Overview or Desktop page, click Create Desktop.

The Create Desktop page is displayed.

Step 3 Select Charging Mode to Yearly/Monthly.


An availability zone (AZ) is a physical region where resources use independent powersupplies and networks. AZs are physically isolated but interconnected through an internalnetwork.

l If you create a desktop for the first time, you are advised to use the default value, that is,the optimal AZ recommended by the system.

l If you do not create a desktop for the first time, you are advised to create desktops indifferent AZs to improve application availability.

Step 5 Select the proper Specifications based on site requirements.

Step 6 Select the proper Image Type and OS based on site requirements.

NOTE

l For details about the creation and maintenance of private images, see the Workspace Private ImageManagement Guide.

l The current version supports only private images with a 80 GB system disk.

l If the private images of the GPU type are required, select the GPU desktop package in Step 5.

Step 7 Check whether the user's existing AD domain is used in Workspace.l If yes, go to Step 8.l If no, go to Step 9.

Step 8 Set the OUs.

Enter a maximum of 5 levels and separate levels from each other using a slash (/). Onlyletters, digits, spaces (not before or after a slash), and special characters including -_/$!@&*?. are allowed, for example, ab/cd/ef.

Step 9 Select a Service Subnet based on actual conditions.

Step 10 Add a tag based on actual conditions.

For more information about tags, see the Tag Management Service User Guide.

NOTE

You can add a maximum of 10 tags to a desktop.



https://support.huaweicloud.com/en-us/workspace_dld/index.html


https://support.huaweicloud.com/en-us/tms_dld/index.html

Table 2-1 Tag key and value requirements

Parameter Requirement

Key l Cannot be left blank.l Can contain a maximum of 36 characters.l Can contain only the following character types:

– Uppercase letters– Lowercase letters– Numerals– Special characters: hyphens (-) and underscores (_)– Unicode characters

l The keys of a desktop must be different.

Value l Cannot be left blank.l Can contain a maximum of 43 characters.l Can contain only the following character types:

– Uppercase letters– Lowercase letters– Numerals– Special characters: periods (.), hyphens (-), and underscores

(_)– Unicode characters

Step 11 Assign desktops.

You can manually add or batch import users. In a scenario where the existing AD domain isused, you need to create users on the AD server before assigning desktops.l Manual input

Set Username used for logging in to Workspace and Email used for receiving thenotification email. Select a user group from the drop-down list of User Group.You can grant different levels of access permission to users based on site requirements.The following describes the user group permission:– Administrators: Administrator group. Administrators have complete access to the

desktop and can make any desired changes except for forbidden operations.– Users: Standard user group. Users in this group can use most software and change

system settings that do not affect other users.

NOTE

You can click Add Desktop to add other desktops as required. A maximum of 10 desktops can beadded each time. Each desktop belongs to one user only.

l Batch import. A maximum of 50 desktops can be added each time.– Click Download Template.– In the Excel template, enter values for columns A (Username), B (Email), and C

(User Group) respectively.– Save the settings and close the Excel template.



– Upload the file.

Step 12 Send notification emails.

By default, the system automatically sends notification emails to users after desktops aresubscribed. In a scenario where the existing AD domain is used, you can select or deselectSend Notification Email based on site requirements.

Step 13 Drag the slider to set Validity Period.

Step 14 Click Buy Now.

The Confirm Order page is displayed.

Step 15 Check whether the values of Order Details and Price are correct.

Step 16 Read the Huawei Workspace Service Agreement.

Step 17 Select I have read and agree to the Huawei Workspace Service Agreement.

Step 18 Click Submit.

The Pay page is displayed.

Step 19 You can pay for your order by using the following methods:l Account balance paymentl Platform paymentl Online bank paymentl Transfer and remittance payment

Step 20 After you select a payment method and pay for your order, the Workspace service ispurchased successfully.

----End

Metered


Step 2 On the Overview or Desktop page, click Create Desktop.

The Create Desktop page is displayed.

Step 3 Select Charging Mode to Metered.


An availability zone (AZ) is a physical region where resources use independent powersupplies and networks. AZs are physically isolated but interconnected through an internalnetwork.

l If you create a desktop for the first time, you are advised to use the default value, that is,the optimal AZ recommended by the system.

l If you do not create a desktop for the first time, you are advised to create desktops indifferent AZs to improve application availability.

Step 5 Select the proper Specifications based on site requirements.

Step 6 Select the proper Image Type and OS based on site requirements.



NOTE

l For details about the creation and maintenance of private images, see the Workspace Private ImageManagement Guide.

l If the private images of the GPU type are required, select the GPU desktop package in Step 5.

Step 7 Configure disks based on the actual requirements. Table 2-2 provides disk configurationdetails.

Table 2-2 Disk configuration

Category Description Disk Type ConfigurationRange (GB)

System Disk Mandatory. Only onesystem disk can beconfigured based on theactual requirements.

l Common I/O: type ofdisks that use SATAstorage.

l Ultra-high I/O: type ofdisks that use SSDstorage.

80 to 32,768

Data Disk Optional. A maximum of10 data disks can beconfigured based on theactual requirements.

l Common I/O: type ofdisks that use SATAstorage.

l Ultra-high I/O: type ofdisks that use SSDstorage.

100 to 32,768

Step 8 Check whether the user's existing AD domain is used in Workspace.l If yes, go to Step 9.l If no, go to Step 10.

Step 9 Set the OUs.

Enter a maximum of 5 levels and separate levels from each other using a slash (/). Onlyletters, digits, spaces (not before or after a slash), and special characters including -_/$!@&*?. are allowed, for example, ab/cd/ef.

Step 10 Select a Service Subnet based on actual conditions.

Step 11 Add a tag based on actual conditions.

For more information about tags, see the Tag Management Service User Guide.

NOTE

You can add a maximum of 10 tags to a desktop.





https://support.huaweicloud.com/en-us/tms_dld/index.html

Table 2-3 Tag key and value requirements

Parameter Requirement

Key l Cannot be left blank.l Can contain a maximum of 36 characters.l Can contain only the following character types:

– Uppercase letters– Lowercase letters– Numerals– Special characters: hyphens (-) and underscores (_)– Unicode characters

l The keys of a desktop must be different.

Value l Cannot be left blank.l Can contain a maximum of 43 characters.l Can contain only the following character types:

– Uppercase letters– Lowercase letters– Numerals– Special characters: periods (.), hyphens (-), and underscores

(_)– Unicode characters

Step 12 Assign desktops.

You can manually add or batch import users. In a scenario where the existing AD domain isused, you need to create users on the AD server before assigning desktops.l Manual input

Set Username used for logging in to Workspace and Email used for receiving thenotification email. Select a user group from the drop-down list of User Group.You can grant different levels of access permission to users based on site requirements.The following describes the user group permission:– Administrators: Administrator group. Administrators have complete access to the

desktop and can make any desired changes except for forbidden operations.– Users: Standard user group. Users in this group can use most software and change

system settings that do not affect other users.

NOTE

You can click Add Desktop to add other desktops as required. A maximum of 10 desktops can beadded each time. Each desktop belongs to one user only.

l Batch import. A maximum of 50 desktops can be added each time.– Click Download Template.– In the Excel template, enter values for columns A (Username), B (Email), and C

(User Group) respectively.– Save the settings and close the Excel template.



– Upload the file.

Step 13 Send notification emails.

By default, the system automatically sends notification emails to users after desktops arecreated. In a scenario where the existing AD domain is used, you can select or deselect SendNotification Email based on site requirements.

Step 14 Click Create Desktop.

The Confirm Specifications page is displayed.

Step 15 Check whether the value of Resource Details is correct.

Step 16 Click Submit.

Desktops are created successfully.

----End

2.4 Logging In to a Desktop Using an SC

ScenarioDownload, install, and configure an SC, and then log in to Workspace from the login addressin the notification email using the SC.

NOTE

When you access the Internet using a proxy, log in to your desktop by following the instructions inLogging In to a Desktop Using an SC (Using a Proxy for Internet Access).The procedure for logging into desktops in this section takes the Windows PC as an example. Operationsfor logging in to the SC on PCs running other operating systems are slightly different.

PrerequisitesRequired software has been downloaded and installed. For details, see Table 2-4.

Table 2-4 Software packages

SoftwarePackage

Description How to Obtain

AccessClient.msi Applies toWindows PC

https://obs.myhwclouds.com/obs-workspace-share/AccessClient.msi





SoftwarePackage


AccessClient_x86lnx.run

Applies toLinux PCsrunning thefollowingoperatingsystems:l Red Hat

6.6 32-bitl Ubuntu

14.04 32-bit

https://obs.myhwclouds.com/obs-workspace-share/AccessClient_x86lnx.run



6.6 64-bitl Ubuntu

14.04 64-bit


Client_for_mac_v1.6.xxxxx.dmg

Applies toMac PC

https://obs.myhwclouds.com/obs-workspace-share/Client_for_mac_v1.6.xxxxx.dmg

Procedure

Step 1 After the cloud client software is installed, double-click the CloudClient icon on the desktopto start the SC.

Step 2 In the Address Manager window, click Add. In the Edit Server Info window that isdisplayed, set Server Name to a customized name and set Server Address to the addressobtained from the notification email.

NOTE

The Edit Server Info window is displayed automatically upon your first login to the desktop.

Step 3 Click Ok to save the configuration information, as shown in Figure 2-1.









Figure 2-1 Edit server info

Step 4 Click Launch to go to the desktop login page.

Step 5 On the desktop login page, enter your domain account and password, and click Login to go tothe desktop list page.

Step 6 On the desktop list page, click to log in to the desktop, as shown in Figure 2-2.

Figure 2-2 Desktop list

----End

2.5 Logging In to a Desktop Using an SC (Using a Proxyfor Internet Access)

Scenario

Log in to a Workspace desktop using an SC when a proxy is used for Internet access.

NOTE

The procedure for logging into desktops in this section takes the Windows PC as an example. Operationsfor logging in to the SC on PCs running other operating systems are slightly different.



PrerequisitesRequired software has been downloaded and installed. For details, see Table 2-5.

Table 2-5 Software packages

SoftwarePackage


AccessClient.msi Applies toWindows PC




6.6 32-bitl Ubuntu

14.04 32-bit




6.6 64-bitl Ubuntu

14.04 64-bit


Client_for_mac_v1.6.xxxxx.dmg

Applies toMac PC


Procedure

Step 1 After the cloud client software is installed, double-click the CloudClient icon on the desktopto start the SC.

Step 2 In the Address Manager window, click Add.

The Edit Server Info window is displayed.











Figure 2-3 Editing server information

Step 3 Set Server Name to a customized name and set Server Address to the address obtained fromthe notification email.

Step 4 Click Ok.

Step 5 On the Address Manager page, select the newly added server address and click Launch.

The window for logging in to the desktop is displayed.

Step 6 Tap in the upper-right corner.

The Settings dialog box is displayed.

Step 7 On the Network tab page, select Enable HTTP Proxy.

Figure 2-4 Enabling HTTP proxy



Step 8 Click Yes.

Step 9 Enter the value for Host, Port, User Name, and Password of the proxy server obtained fromthe administrator.

Step 10 Click Ok.


Step 12 On the desktop list page, click to log in to the desktop, as shown in Figure 2-5.

Figure 2-5 Desktop list

----End

2.6 Logging In to a Desktop Using a Browser

Scenario

Log in to a Workspace desktop using a browser. Use Internet Explorer 8, Internet Explorer 9,Internet Explorer 10, Internet Explorer 11, and Mozilla Firefox 14 or later to log in todesktops.

NOTE

When you use a proxy for Internet access, you cannot log in to your desktop using a browser. Instead,you can log in to your desktop following the instructions in Logging In to a Desktop Using an SC(Using a Proxy for Internet Access).

ProcedureNOTE

A Windows PC is used as an example in the following steps. The specific operation steps may bedifferent on different OSs.

Step 1 Open the browser, enter the desktop login address obtained from the notification email in theaddress box, and press Enter.

The window for logging in to the desktop is displayed.



NOTICEIf a dialog box indicating a plug-in running request is displayed in the browser, enable theplug-in to avoid any effect on proper login and use.

Step 2 Enter your domain account and password, and click Login, as shown in the following figure.

Step 3 Download the client plug-in upon the first login, as shown in the following figure.

Step 4 On the desktop list page, click to log in to the desktop, as shown in the following figure.



----End

2.7 Logging In to a Desktop Using a TC

Scenario

Log in to a Workspace desktop using a TC.

Procedure

Step 1 Connect all cables and power on the TC.

Step 2 Click Start, and choose Control Center.

Step 3 In Control Center, select Cloud Client.

Step 4 Click Add. In the Edit Server Info window that is displayed, set Server Name to acustomized name and set Server Address to the address obtained from the notification email.

Step 5 Click Ok to save the configuration information.

Step 6 Click Launch to go to the desktop login page.




Step 8 On the desktop list page, click to log in to the desktop.

----End

2.8 Logging In to a Desktop Using a Mobile Terminal(Android)

ScenarioFusionAccess is an application installed on a mobile terminal and used for accessing andusing Workspace desktops. If you need to use Workspace desktops to work at home or duringyour trips, you can download FusionAccess to your Android device and use it to access anduse Workspace desktops.

Procedure

Step 1 Open the application store on your Android mobile terminal.

Step 2 Search for FusionAccess.

Step 3 Download and install the FusionAccess desktop client software.

Step 4 After the FusionAccess software is installed, open the software on your Android mobileterminal.

Step 5 Tap Add Account.

Step 6 On the Add page that is displayed, set Label to customized description, set Address and UserName to the address and username obtained from the notification email, and set Password tothe new password.

Step 7 Tap save in the upper-right corner to save the configuration.



Step 8 On the home page of the FusionAccess software, tap the Label you set to log in to thedesktop.

The following figure shows the functions of the shortcut menus on the desktop.



----End

2.9 Logging In to a Desktop Using a Mobile Terminal(iOS)

Scenario

FusionAccess is an application installed on a mobile terminal and used for accessing andusing Workspace desktops. If you need to use Workspace desktops to work at home or duringyour trips, you can download FusionAccess to your iOS devices and use it to access and useWorkspace desktops.

Procedure

Step 1 Open App Store on your iOS mobile terminal.

Step 2 Search for FusionAccess.

Step 3 Download and install the FusionAccess desktop client software.

Step 4 After the FusionAccess software is installed, open the software on your iOS mobile terminal.

Step 5 Tap New Account.

Step 6 Tap in the upper-right corner.



The New Account page is displayed.

Step 7 Set Description to customized description, set Address and User Name to the address andusername obtained from the notification email, and set Password to the new password.

Step 8 Tap Save in the upper-right corner to save the configuration.

Step 9 On the home page of the FusionAccess software, tap the desktop description you set to log into the desktop.

The following figure shows the functions of the shortcut menus on the desktop.



----End



3 Operation Guide (Administrators)

3.1 OverviewAfter applying for the Workspace service, view statistics information about Workspace,including the configuration information, desktop status, and number of online users on theDashboard page.

Configuration Information


Step 2 Click Dashboard.

The Dashboard page is displayed.

Step 3 In the Configuration Information area, view Workspace network configurations and ADdomain configurations.

----End

Desktop Status




Step 3 In the Status area, Workspace displays the Login Status and Running Status of the desktopin pie charts. Table 3-1 describes the meaning of each status.

Table 3-1 Desktop status

Category Status Description

Login Status In use Indicates that a user has successfully logged in to thedesktop and is using the desktop.

WorkspaceUser Guide (Administrators) 3 Operation Guide (Administrators)


Category Status Description

Unregistered Indicates that the desktop is stopped or faulty. A desktopautomatically registers with the infrastructure server afterbeing started up.

Ready Indicates that the desktop has been registered with andconnected to the infrastructure server and is waiting forthe user to log in.

Disconnected Indicates that the desktop is disconnected from theterminal because the user closes the window of theterminal or the network connection between the terminaland the desktop is interrupted.

RunningStatus

Running Indicates that the desktop runs properly.

Stopped Indicates that the desktop is stopped.

Faulty Indicates that the desktop is faulty. You can restart thedesktop or contact technical support engineers to rectifythe fault.

----End

Number of Online UsersStep 1 Log in to the Workspace management console.



Step 3 In the Online Users area, view the number of online users by day, week, or month.

----End

3.2 Managing Desktops

ScenarioStart, stop, restart, or delete a desktop, add disks to a desktop, manage tags, or change desktopspecifications. You can search for and view a desktop based on the tag added during desktopcreation.

ProcedureStep 1 Log in to the Workspace management console.

Step 2 Click Desktop.

The Desktop page is displayed.

Step 3 In the upper-right corner of the desktop list, select Assigned user, enter a keyword, and click

.



Step 4 Select a desktop, and click Start/Stop/Restart/Delete/Add Disk/Modify Specifications inthe upper-left corner of the desktop list or in the Operation column.

NOTE

l When performing the Stop Desktop operation, determine whether to select Forcibly stop based onsite requirements.

l When performing the Restart Desktop operation, determine whether to select Forcibly restartbased on site requirements.

l When performing the Delete Desktop operation, determine whether to select Delete the user basedon site requirements.

l You can add disks (data disks) to the desktop whose status is Running and user group isAdministrators only. Each desktop can have a maximum of 10 data disks.

l You can change specifications for desktops whose status is Stopped only and can only make themmore advanced.

Step 5 Click in the row that contains the desktop, click the Tag tab, and add tags to, delete tagsfrom, or edit or view the tags of the desktop.

NOTE

You can add tags to, delete tags from, or edit the tags of the desktops whose Running Status isRunning, Stopped, or Creating.

l View tags.

You can view details of desktop tags, including the number of tags and the key and valueof each tag.

l Add a tag.

Click Add in the upper left corner. In the displayed dialog box, enter the key and valueof the tag to be added, and click OK.

l Edit a tag.

Locate the row containing the tag to be edited and click Edit in the Operation column.In the Edit Tag dialog box, change the value of the tag and click OK.

l Delete a tag.

Locate the row containing the tag to be deleted and click Delete in the Operationcolumn. In the Delete Tag dialog box, click OK.

Step 6 Confirm the displayed information.

----End

3.3 Managing Users

Scenario

View the number of desktops owned by a user, change the email address, export data, resetthe password, unlock the account, send the notification email or delete the account for acreated user.

NOTE

If the enterprise uses an existing AD domain, the password reset and account unlocking functions arenot supported.



ProcedureChanging an email address

You can change an email address if the email address provided by a user is incorrect or cannotreceive emails.


Step 2 Click User.

The User Management page is displayed.

Step 3 In the row that contains the user whose email address you want to change and click Modify.

The Modify User Information dialog box is displayed.

Step 4 In the Email Address text box, enter the new email address.

Step 5 Click OK. The user receives an email address change notification.

----End

Exporting data

You can batch export user data, including the username, email address, and the number ofdesktops.


Step 2 Click User.


Step 3 Click Export Account.

The system exports user information to a local computer.

----End

Resetting a password

You can reset the password of a user when the user loses or forgets the login password.

NOTICEPassword resetting is risky. After being reset, the original password cannot be used. Confirmthat the operation is necessary.


Step 2 Click User.


Step 3 In the row that contains the user whose password needs to be reset, click More > ResetPassword.

The dialog box for password resetting is displayed.



Step 4 Click OK. The password resetting link will be sent to the user's email address automaticallyby the system.

NOTICEThe validity period of the password resetting link in the email is 24 hours. Reset the passwordin a timely manner.

----End

Unlocking an account

You can unlock the account for a user when the user's account is locked because the userenters an incorrect password consecutively.


Step 2 Click User.


Step 3 In the row that contains the user whose account needs to be unlocked, click More > Unlock.

The dialog box for account unlocking is displayed.

Step 4 Click OK.

----End

Sending a notification email

You can send a notification email when the user already has a desktop and the email fornotifying the user of the desktop creation needs to be sent again.


Step 2 Click User.


Step 3 In the row that contains the user to whom the notification email needs to be sent, click More> Resend Notification Email.

The dialog box for sending the email is displayed.

Step 4 Click OK.

----End

Deleting an account

You can delete a specific account as required. You cannot delete a user if the user hasdesktops.


Step 2 Click User.

The User page is displayed.



Step 3 In the row that contains the user whose account needs to be deleted, click More > Delete (Ifthe enterprise uses an existing AD domain, click Delete).

The dialog box for user information deletion is displayed.

Step 4 Click OK.

----End

3.4 Viewing User Login Records

Scenario

View user login records to obtain the desktop running status and user login status. This helpstroubleshooting and system maintenance.

Procedure


Step 2 Click User Login Record. The User Login Record page is displayed.

Step 3 View user login records, including Desktop Name, Login User, Terminal IP Address,Terminal System Type, Connection Start Time, Connection End Time, and FailureCause.

----End

3.5 Managing Policies

Scenario

Configure policies such as USB Port Redirection, Printer Redirection, File Redirection,and Clipboard Redirection to control the permission on data transmission and peripheralaccess between user terminals and Workspace.

Procedure


Step 2 Click Policy.

The Policy page is displayed.

Step 3 On the Policy page, click the following button to enable or disable a policy. Table 3-2describes the policies.

l indicates that the policy is enabled.

l indicates that the policy is disabled.



Table 3-2 Policy management

Policy Type Policy Parameter Policy Description

USB portredirection

Graphics devices (suchas scanners)

Users can use USB graphics devices byusing USB port redirection on desktops.

Video devices (such ascameras)

Users can use USB video devices by usingUSB port redirection on desktops.

Print devices (such asprinters)

Users can use USB print devices by usingUSB port redirection on desktops.

Storage devices (suchas USB flash drives)

Users can use USB storage devices byusing USB port redirection on desktops.

Smartcard devices(such as Ukeys)

Users can use smartcard devices by usingUSB port redirection on desktops.

Printerredirection

Sync Client DefaultPrinter

Users can use printers by using printerredirection (a policy of device redirection)on desktops.

Universalprinter driver

– Default– HDP XPSDrv

Driver– Universal Printing

PCL 5– Universal Printing

PCL 6– Universal Printing

PS

When Default is selected, UniversalPrinting PS will be loaded if printerredirection is enabled on Linux clients,and HDP XPSDrv Driver will be loadedif printer redirection is enabled onWindows clients.NOTICE

To use the printer service, you need to ensurethat all end users use SCs running the same OSto log in to Workspace.

Fileredirection

Fixed Drive (such aslocal disks)

Redirects client fixed drives.

Removable drive (suchas USB flash drives)

Redirects client removable drives, such asUSB flash drives and removable harddisks.

CD/DVD-ROM drives Redirects client CD-ROM drives.

Network Drive Redirects client network drives.

Clipboardredirection

Server to client After the redirection is enabled, end userscan copy data on desktops and paste thedata on clients. However, data copied onclients cannot be pasted on desktops. Thatis, the one-way clipboard function fromthe server to the client is supported.



Policy Type Policy Parameter Policy Description

Client to server After the redirection is enabled, end userscan copy data on clients and paste the dataon desktops. However, data copied ondesktops cannot be pasted on clients. Thatis, the one-way clipboard function fromthe client to the server is supported.

Enable Bidirection After the redirection is enabled, end userscan copy data on clients and paste the dataon desktops, and data copied on desktopscan also be pasted on clients. That is, thetwo-way clipboard function between theclient and the server is supported.

Disable Disables the clipboard redirection.

HDP Plus – Enable– Disable (default)

This option only applies to video editingscenarios.

Display level Smoothness first(default)

Balances display quality and bandwidthrequirement. The recommendedbandwidth is 20,000 kbit/s.

Image quality first Provides best display quality but requireshighest bandwidth. The recommendedbandwidth is 25,000 kbit/s.

Advancedpolicies

– Bandwidth– Frame Rate– Video Frame Rate– Smoothing Factor– Lossy Compression

Quality

For details about how to set video imagequality and smoothness, see Table 3-3.



Table 3-3 Advanced policies

Policy Name Default Value Range Description

Bandwidth (kbit/s)This policy is availableonly when the HDPPlus policy is disabled.

– Smoothnessfirst: 20,000

– Quality first:25,000

1000 to25,000

Specifies the data codestream limit. Increasingthis value improves userexperience butconsumes morebandwidth resources.For this reason, if thenetwork bandwidth isinsufficient, increasingthis value compromisesthe smoothness.The default value isrecommended.

Frame Rate (fps)This policy is availableonly when the HDPPlus policy is disabled.

– Smoothnessfirst: 25

– Quality first:30

15 to 30 Specifies the frame ratein non-video scenarios.Increasing this valueimproves imagesmoothness butconsumes morebandwidth resources.For this reason, if thenetwork bandwidth isinsufficient, increasingthis value compromisesthe smoothness.The default value isrecommended.

Video Frame Rate (fps)This policy is availableonly when the HDPPlus policy is disabled.



15 to 50 Specifies the videoframe rate. Increasingthis value improvesimage smoothness butconsumes morebandwidth resources.For this reason, if thenetwork bandwidth isinsufficient, increasingthis value compromisesthe smoothness.The default value isrecommended.



Policy Name Default Value Range Description

Smoothing FactorThis policy is availableonly when the HDPPlus policy is disabled.



0 to 60 Specifies the staticimage quality.Decreasing this valueimproves image qualitybut consumes morebandwidth resources,and compromises thesmoothness.

Lossy CompressionQuality



70 to 90 Specifies the staticnatural image quality.Increasing this valueimproves image qualitybut consumes morebandwidth resources,and compromises thesmoothness.

Step 4 Click Save to save the configured policy information. An end user must relog in to thedesktop for the new policy to take effect.

----End

3.6 Restoring Infrastructure Server Data

Scenario

If a system fault occurs, use data that is automatically backed up to restore the infrastructureservers.

NOTICEAfter you restore the data of infrastructure servers:l The desktop data and user data generated after the backup point in time are not stored. If

the desktop data or user data is incorrect, follow the instructions or contact technicalsupport engineers to rectify the fault.

l Enabled or disabled policies may be restored to the state before the backup point in time.If this happens, configure the policies again. For details, see Managing Policies.

l An end user cannot use the password set after the backup point in time to log in to thedesktop. Inform the end user to use the password set before the backup point in time to login to the desktop or reset the password.

Procedure




Step 2 Click Infrastructure.

The Infrastructure page is displayed.

Step 3 Click Restore.

The Restore page is displayed.

Step 4 Choose the time point when you want to restore the data of infrastructure servers from theBackup Time Point drop-down list.

Step 5 Select I understand the impact and want to continue and click OK.

Disk data is restored to the last backup point in time.

----End

3.7 Changing the Internet Access Port

Scenario

On the Workspace management console, change the Internet access port based on the plan.

Procedure




Step 3 In the Network area, click Modify next to Internet Access Port.

The Internet access port changing dialog box is displayed.

Step 4 Change the HTTPS access port or Access Gateway (AG) port based on the plan. The port IDcan be 80 or 443, or ranges from 1024 to 65,535.

Step 5 Click OK.

----End

3.8 Changing the Service Subnet

Scenario

On the Workspace management console, change the service subnet based on the plan.

Procedure






Step 3 In the Network area, click Modify next to Service Subnet.

Step 4 Select a desired service subnet based on your planned subnet information.

Step 5 Click OK.

----End

3.9 Configuring Two-Factor Authentication

Scenario

Two-factor authentication indicates the Domain account + Dynamic password authentication.

In the scenario where Workspace is connected to an existing AD server, you can enable two-factor authentication as required to enhance system security.

NOTE

Two-factor authentication only applies to the scenario where dynamic password authentication using thecustomer's Radius authentication server based on the standard Radius protocol is required.

Procedure

Enabling dual-factor authentication




Step 3 Click Modify next to Two-factor authentication.

The Two-factor authentication dialog box is displayed.

Step 4 Click to enable two-factor authentication and set the following parameters.

Table 3-4 Parameters to be configured

Parameter Description Example Value

Radius server address The Radius server is a two-factor authentication serverused for dynamic passwordauthentication based on theRadius protocol.Indicates the IP address ofthe Radius server.

127.0.0.1

Port Indicates the port used forcommunication between theRadius server and the Weblogin page of end users.

Default: 1812



Parameter Description Example Value

Shared secret code Indicates the password usedfor authentication betweenthe Radius server and client.

-

Confirm shared secret code Enter the shared passwordagain.

-

Authentication type Indicates the passwordauthentication protocol.

Only PAP is supported.

Server timeout(in seconds) 1 to 999.Configure it based onlatencies of the Web loginpage of end users andRadius server.

Recommended value: 10

Max retries 1 to 999.Indicates the maximumnumber of retries uponconnection failure betweenthe Web login page of endusers and Radius server.

Recommended value: 2

Step 5 Click OK.

Two-factor authentication is enabled.

----End

Disabling dual-factor authentication




Step 3 Click Modify next to Two-factor authentication.

The Two-factor authentication dialog box is displayed.

Step 4 Click to disable two-factor authentication.

Step 5 Click OK.

Two-factor authentication is disabled.

----End



3.10 Changing the Password of a Domain Administrator

Scenario

The password of a domain administrator needs to be changed periodically to ensure systemsecurity. You are advised to change the password every three months. Change the password ofa domain administrator on the Workspace management console.

NOTE

If the enterprise uses an existing AD domain, the period for changing the password of the domainadministrator depends on the preset password policy. Change the domain administrator password on theAD server first, and then perform the following operations.

Procedure




Step 3 Click Modify in the lower right corner of AD Domain.

The Modify Password dialog box is displayed.

Step 4 Set Old Password, New Password, and Confirm New Password, and click OK.

----End

3.11 Monitoring

3.11.1 Workspace Monitoring MetricsTable 3-5 describes Workspace monitoring metrics.

Table 3-5 Workspace monitoring metrics

Metric Description ValueRange

Monitored Object

CPU usage Measures the CPU usage of amonitored object (unit: %).

0% to100%

Infrastructure server

Memoryusage

Measures the memory usage of amonitored object (unit: %).

0% to100%


Disk usage Measures the disk usage of amonitored object (unit: %).

0% to100%


IOPS Measures the number of I/Ooperations per second on amonitored object.

≥ 0 counts Infrastructure server



Metric Description ValueRange

Monitored Object

Networkinputthroughput

Measures incoming networktraffic of a monitored object persecond (unit: bytes/s).

≥ 0 bytes/s Infrastructure server

Networkoutputthroughput

Measures outgoing networktraffic of a monitored object persecond (unit: bytes/s).

≥ 0 bytes/s Infrastructure server

3.11.2 Setting Alarm Rules

ScenariosSetting alarm rules for Workspace infrastructure servers allows you to customize themonitored objects and notification policies and determine the running status of yourinfrastructure server at any time.

An infrastructure server alarm rule includes the alarm rule name, monitored object, metric,threshold, monitoring interval, and whether to send a notification. This section describes howto set alarm rules for infrastructure servers.

Procedure

Step 1 Log in to the management console.

Step 2 Choose Management & Deployment > Cloud Eye.

Step 3 In the navigation pane on the left, choose Alarm Management > Alarm Rules.

Step 4 On the displayed Alarm Rules page, click Create Alarm Rule.

For details about how to configure alarm parameters, see the Cloud Eye User Guide.

----End

3.11.3 Viewing Monitoring Metrics

ScenariosCloud Eye provided by the public cloud monitors the running statuses of Workspaceinfrastructure servers. You can obtain the monitoring metrics of each infrastructure server onthe management console.

Monitored data requires a period of time for transmission and display. The status of aninfrastructure server displayed on the Cloud Eye page is the status obtained 5–10 minutesbefore. If your Workspace service has just been enabled, that is, your infrastructure server hasjust been created, wait for 5-10 minutes and check the monitoring data.

PrerequisitesThe infrastructure server is running properly for about 10 minutes.



https://support.huaweicloud.com/en-us/usermanual-ces/en-us_topic_0084572213.html

Procedure


Step 2 Choose Management & Deployment > Cloud Eye.

Step 3 In the navigation pane on the left, choose Cloud Service Monitoring > Workspace.

Step 4 Click View Graph in the Operation column of the infrastructure server whose monitoringdetails you want to view.

Step 5 In the Workspace monitoring area, you can select a duration to view the monitoring data.

You can view the monitoring data of an infrastructure server in the recent 1 hour, 3 hours, or12 hours. To view the monitoring curve of a longer time range, click to enlarge the graph.

----End

3.12 Recording Workspace Operations

3.12.1 Key Operations Recorded by CTSCTS records operations related to Workspace for further query, audit, and backtrackoperations.

Table 3-6 Workspace operations that can be recorded by CTS

Operation ResourceType

Trace Name

Start a desktop. workspace startDesktop

Shut down a desktop. workspace shutdownDesktop

Restart a desktop. workspace rebootDesktop

Purchase a desktop. workspace orderVm

Subscribe to the service. workspace openService

Update a desktop. workspace updateDesktopStatus

Modify the userinformation.

workspace modifyUserInfo

Delete a user. workspace deleteUser

Unlock a user. workspace unlockUser

Reset a password. workspace resetUserPassword

Export the userinformation.

workspace exportUserInfo

Download a usertemplate.

workspace downloadUserMould




Trace Name

Update a policy. workspace updatePolicy

Modify the domaincontroller information.

workspace updateAdPwd

Deregister a tenant. workspace tenantClose

Delete a desktop. workspace deleteDesktop

Update the desktopmetadata information.

workspace updateDesktopMetadata

Delete a task. workspace deleteJob

Synchronize IAMresource tenants.

workspace synIamResourceTenant

Change the password ofa domain user.

workspace updateDomainUserPassword

Tenants retry tasks aboutthe service.

workspace tenantRetryServiceTask

Restore an infrastructureVM.

workspace restoreManagerVmBackup

Modify desktopproperties.

workspace modifyDesktopAttributes

Modify the Internetaccess address.

workspace modifyInternetAddress

Update the access mode. workspace updateAccessWay

Update a port. workspace changeInternetAccessPort

Clear a tenant'sresources.

workspace cleanUpTenantResources

Add data disks to adesktop.

workspace addVolumes

Send emails to a user. workspace sendEmail

Modify the bandwidth. workspace modifyBandwidth

Enable Internet access. workspace adjustAccessMode

Change desktopspecifications.

workspace resizeDesktop

Modify the Radius serverinformation.

workspace modifyRadius

Modify a subnet. workspace updateSubnets




Trace Name

Create a tag. workspace createTag

Delete a tag. workspace deleteTag

Update a tag. workspace updateTag

Perform operations ontags in batches.

workspace operationTagBatch

Implement an order. workspace orderImplementation

3.12.2 CTS Traces

Scenarios

After CTS is enabled, CTS starts recording operations on cloud resources. The CTSmanagement console stores the last seven days of operation records.

This section describes how to query the last seven days of operation records on the CTSconsole.

Procedure


Step 2 In the upper left corner of the page, click and select the desired region and project.

Step 3 Click Service List. Under Management & Deployment, choose Cloud Trace Service.

Step 4 Choose Trace List in the navigation pane on the left.

Step 5 Specify the filters used for querying traces. The following four filters are available:l Trace Source, Resource Type, Search By, and Operator

Select the filter from the drop-down list.When you select Trace name for Search By, you also need to select a specific tracename.When you select Resource ID for Search By, you also need to select or enter a specificresource ID.When you select Resource name for Search By, you also need to select or enter aspecific resource name.

l Operator: Select a specific operator (a user rather than tenant).l Trace Status: Available options include all trace status, normal, warning, and

incident. You can only select one of them.l Start time and end time: You can specify the time period for query traces.

Step 6 Click on the left of the record to be queried to extend its details.



Step 7 Locate a trace and click View Trace in the Operation column.

----End

3.13 Canceling Workspace

ScenarioIf Workspace is no longer needed, delete the user desktops and perform the following steps tocancel Workspace.

Procedure




Step 3 In the Configuration Information area, click Cancel Workspace.

The Cancel Workspace dialog box is displayed.

Step 4 Click OK.

----End



4 Operation Guide (End Users)

WorkspaceUser Guide (Administrators) 4 Operation Guide (End Users)


4.1 Introduction to Workspace







4.2 Introduction to Terminals





4.3 Risky OperationsWorkspace desktops provide on-demand services based on network resources and workdepending on OSs and network configurations in desktops. This section describes some riskyoperations on desktops.

Risky Operations (Processes and Services)1. Change the default service and startup options in the system configuration. Figure 4-1

shows the Services and Startup options.

Figure 4-1 Services and startup

2. Disable HDP services shown in Figure 4-2.



Figure 4-2 HDP services

3. Uninstall programs shown in Figure 4-3.

Figure 4-3 Programs

4. End the LOCAL SERVICE, NETWORK SERVICE, or SYSTEM processes in TaskManager. Figure 4-4 shows the processes that cannot be ended.



Figure 4-4 Task Manager

Risky Operations (Network)1. Disable NICs, and disable or modify network configurations, as shown in Figure 4-5.

Figure 4-5 Local connection

2. Run the script or command for modifying a route, such as route DELETE *.3. Delete ports 28511, 28512, 28521, and 28522 from Windows firewall exception options.4. Enable software or tools, such as the IPsec, that can restrict network traffic.

Risky Operations (Others)1. Delete files or folders in C:\Program Files\Huawei listed in Figure 4-6.



Figure 4-6 Folders

2. Enable the sleep function on desktops. The sleep function is disabled for desktops bydefault, as shown in Figure 4-7.

Figure 4-7 Sleep function

3. Modify the configuration file of the HDP client (AccessAgent).4. Run Rabbit Magic or Wopti Utilities to clean or optimize the registry.5. Install a customized screensaver with complex transformation functions, which

consumes system resources and causes a delay in desktop access.

4.4 Failure When Connecting to DesktopsDuring the use of Workspace desktops, desktops may fail to be connected due to

misoperations. If this happens, you can click to restart the desktops to resolve theproblem.

NOTE

If desktops cannot be restarted or you cannot log in to the desktops after they are restarted, click toforcibly restart the desktops. Data that is not saved may be lost after the desktops are forcibly restarted.Therefore, exercise caution when forcibly restarting desktops.

4.5 Dual-Screen Display ConfigurationWhen accessing Workspace desktops using TCs, perform the following operations toconfigure dual-screen display.



Prerequisites

Table 4-1 lists the materials required for configuring dual-screen display.

Table 4-1 Materials required for configuring dual-screen display

Item Quantity

Image (Example) Description

TC 1 -

Monitor/Converter 2 Typically, a monitor providesa DVI-D port and a VGAport. If two monitors haveonly VGA ports in somespecial cases, a DVI-D-to-VGA converter is required.

DVI-I one-to-twocable

1 Converts DVI-I signals toDVI-D and VGA signals.

DVI-D-to-DVI-Dcable

1 -

VGA-to-VGA cable 1 -

Procedure

Dual-Screen Connection

Step 1 Connect a TC to monitors based on the monitor type.

l If the monitors provide DVI and VGA ports, go to Step 2.

l If the monitors provide VGA ports only, go to Step 3.



Step 2 Connect the TC to the monitors, as shown in Figure 4-8.

Figure 4-8 Dual-screen connection



----End

TC Setting

Step 1 Power on the TC.

Step 2 Perform the following operation based on the TC type.l Linux TC: Perform Step 3 to Step 7.l Windows TC: Perform Step 8to Step 10


Step 4 Double-click Display.

Step 5 Select Optimum settings.



Step 6 Select the display mode based on site requirements.

l Duplicate

l Extend

Step 7 Select the main monitor based on site requirements.

l DVI

l VGA

The task is completed.

Step 8 Right-click on the desktop and choose Screen Resolution.

Step 9 Set Multiple displays based on site requirements.

l Duplicate these displays

l Extend these displays

NOTE

Only Extend these displays can be selected when two desktops and dual-screen display are used.

Step 10 Click OK.

----End

Client Setting

Step 1 Perform the following operation based on the dual-screen display scenario.

l If a desktop and two screens are used, go to Step 2.

l If two desktops and two screens are used, go to Step 6.

Step 2 Log in to the desktop using the client.

Step 3 Click Settings.

Step 4 Select Open Multiple Monitor (The configuration will take effect after reconnect).

Step 5 Click Close.


Step 6 Log in to a desktop using the client.


Step 8 Deselect Open Multiple Monitor (The configuration will take effect after reconnect).

Step 9 Click Close.

Step 10 Log in to the other desktop and repeat Step 6 to Step 9.

Step 11 Drag the two desktops to different screens to achieve dual-screen display.

----End



Others

4.6 HDPDeviceHelper Peripheral AssistantIf you encounter peripheral configuration problems when using Workspace, you can useHDPDeviceHelper.

Choose Start > Huawei vDesk. Start HDPDeviceHelper and configure peripherals followingthe instructions.

Figure 4-10 vDesk



5 FAQs (Administrators)

5.1 What Is Workspace?Workspace is a cloud computing-based desktop service that outperforms personal computers(PCs) and the conventional VDI solution.

Workspace provides the same configurations (including vCPUs, GPUs, memory, and disks) asthose of PCs and Windows OSs. Its familiarity ensures that you can use Workspace like usingyour own PCs.

Different from the conventional local VDI solution, Workspace does not require highinvestment or a long deployment period. Workspace can automatically handle heavydeployment tasks and provide hosting services.

Workspace supports access from multiple devices, including computers running Windows andMac OSs, as well as iPads, iPhones, and Android smart devices. With Workspace, you cansave and obtain files, and use applications anytime and anywhere, implementing mobileoffice.

5.2 What Are the Features and Advantages of Workspace?A web-based management console is provided for you to flexibly enable and disableWorkspace that works out of the box.

Workspace provides the following features and advantages:

l Workspace can be provisioned and deployed quickly whereas deploying conventionalprivate desktop clouds takes several days.

l Administrators can manage hundreds of desktops at the same time using the web page.

l Multiple desktop package specifications are available for you to choose the mostappropriate one (vCPUs, GPUs, memory, system disks, and data disks).

l The password can be reset if a user forgets it.

l Encrypted remote access, isolated user resources, and network and peripheral securitycontrol are used to ensure high security of data access.

WorkspaceUser Guide (Administrators) 5 FAQs (Administrators)


5.3 What Is the Process of Using Workspace?Administrators only need to apply for Workspace and purchase desktops before usingdesktops, as shown in Figure 5-1. End users can use desktops after completing basicconfigurations on clients, as shown in Figure 5-2.

Figure 5-1 Workspace use process on servers

Figure 5-2 Workspace use process on clients

5.4 What Are Workspace Packages?

Workspace PackagesWorkspace packages are resources that are packaged for leasing. Table 5-1 lists Workspacepackages.



Table 5-1 Workspace packages

PackageType

vCPU Memory

GPU SystemDisk

DataDisk

OS

Economical 2 2 GB - 60 GB 100 GB Windows

Standard 2 4 GB - 60 GB 100 GB Windows

Advanced 4 8 GB - 60 GB 150 GB Windows

Luxury 8 16 GB - 60 GB 200 GB Windows

GPU Adesktop

4 8 GB M60-1Q (1GB)


GPU Bdesktop

8 16 GB M60-2Q (2GB)


NOTICEl When an order expires, a 7-day grace period is provided. Services in the grace period are

still available.l After the grace period elapses, a 15-day reservation period is provided. Resources in the

reservation period are unavailable but retained.l The resources are automatically deleted after the reservation period elapses and the order

is not renewed.

Charging Mode of AD Management Virtual Desktopsl For a normal order, AD management virtual desktops are not charged.l If the administrator applies for the Workspace service but does not purchase desktops in

more than 15 days, the AD management desktops will be reclaimed. The administratormust apply for Workspace again for subsequent use.

5.5 How Is Workspace Charged?Workspace supports the pay-per-use and monthly/yearly charging modes.

Workspace is charged based on the usage of the following resources:l vCPU, memory, and GPUl System disk and data disk

5.6 Do I Need to Purchase TCs?You are advised to log in to the desktop using an SC or purchase a TC for login. You can useHuawei FusionCloud Compatibility Check Assistant > FusionAccess > CompatibleTerminal List to query TC models that are compatible with Workspace.



http://support.huawei.com/onlinetool/datums/fusioncloud/comptool/index.en.jsp

http://support.huawei.com/onlinetool/datums/fusioncloud/comptool/index.en.jsp

You can contact the local TC vendor or agent to purchase the TC.

5.7 How Do End Users Access the Internet?The administrator can enable user desktops to access the Internet as follows:l using NAT gatewayl using SNATl using a proxy server

Method 1: using NAT gateway

The NAT gateway provides the Network Address Translation (NAT) service for Workspacedesktops in a VPC so that multiple Workspace desktops can share an EIP to access theInternet.

For detailed operations, see the NAT Gateway User Guide.

After configuring the NAT gateway, you need to set the number of interface metrics on theuser desktop.

1. Log in to the desktop.2. Go to Network and Sharing Center.3. In the View your active networks area, click Local Area Connection 2 or Ethernet 2.

The Local Area Connection 2 Status dialog box or the Ethernet 2 Status dialog box isdisplayed.

4. Click Properties.The Local Area Connection 2 Properties dialog box or the Ethernet 2 Propertiesdialog box is displayed.

5. Click Advanced.The Advanced TCP/IP Settings dialog box is displayed.

6. Deselect Automatic metric, and set Interface metric to 2.7. Click OK in sequence to save the settings and close the dialog boxes.8. Click Close to close the Local Area Connection 2 Status dialog box or the Ethernet 2

Status dialog box.

Method 2: using SNAT

Based on the SNAT service provided by HUAWEI CLOUD, within the specified bandwidth,Workspace desktops without EIPs can access the Internet. In this way, end users candownload software updates via the Internet. Currently, Workspace desktops are allowed toaccess the Internet, but cannot be accessed from the Internet. The bandwidth is shared by allWorkspace desktops.

Basic principle: ECSs assigned with public EIPs are used as SNAT routers or gateways ofWorkspace desktops in the same subnet or VPC, thereby enabling Workspace desktops toaccess the Internet.

Creating a SNAT server

1. Create an ECS with an EIP as the SNAT server. The ECS is in the same VPC with theWorkspace desktops, runs on CentOS, and has one NIC. The following uses CentOS 6.5as an example.



https://support.huaweicloud.com/en-us/natgateway_dld/index.html

Setting the NIC and security group rule of the SNAT server

1. Log in to the management console.2. On the page that is displayed, choose Computing > Elastic Cloud Server.3. On the displayed page, locate the target ECS in the ECS list and click the ECS name to

switch to the page showing ECS details.4. Click the NIC tab and disable the source/destination check function.5. Select Security Group, and add an inbound Any rule for

WorkspaceUserSecurityGroup.

Configuring routing information

1. Log in to the management console.2. In the navigation pane on the left, choose Virtual Private Cloud.3. In the navigation pane on the left, select a VPC to which a route is to be added and click

Route Table.4. On the Route Table page, click Add Route.5. Set route information on the displayed page.

– Destination: indicates the destination network segment. The value can be a networksegment of subnets in the VPC. The default value is 0.0.0.0/0. The destination ofeach route must be unique.

– Next Hop: indicates the IP address of the next hop. Set it to a private IP address ora floating private IP address in a VPC.

NOTE

If Next Hop is set to a floating private IP address, the floating private IP addresses in the VPCcannot have EIPs bound. Otherwise, the route will not take effect.

6. Click OK.

Configuring the SNAT server

1. On the ECS console, use the remote login function to log in to the ECS on which SNATis to be configured.

2. Run the following command and enter the password of user root to switch to user root:su - root

3. Run the following command to check whether the ECS can successfully connect to theInternet:ping www.google.comThe ECS can access the Internet if the following information is displayed:[root@localhost ~]# ping www.google.comPING www.a.shifen.com (xxx.xxx.xxx.xxx) 56(84) bytes of data.64 bytes from xxx.xxx.xxx.xxx: icmp_seq=1 ttl=51 time=9.34 ms64 bytes from xxx.xxx.xxx.xxx: icmp_seq=2 ttl=51 time=9.11 ms64 bytes from xxx.xxx.xxx.xxx: icmp_seq=3 ttl=51 time=8.99 ms

4. Run the following command to check whether IP forwarding of the Linux OS is enabled:cat /proc/sys/net/ipv4/ip_forwardIn the command output, 1 indicates enabled, and 0 indicates disabled. The default valueis 0.– If IP forwarding in Linux is enabled, go to 8.



– If IP forwarding in Linux is disabled, go to 5.5. Run the following command to edit the /etc/sysctl.conf file. Press I to enter the edit

mode and set net.ipv4.ip_forward to 1.vi /etc/sysctl.conf

6. Press Esc, type :wq, and press Enter.Save the settings and exit the vi editor.

7. Run the following command to make the change take effect:sysctl -p /etc/sysctl.conf

8. Run the following command to configure the NAT conversion rule:iptables -t nat -A POSTROUTING -o eth0 -s VPC or subnet segment whereWorkspace desktops reside/mask bits -j SNAT --to internal IP address of the SNATserverFor example, if the VPC network segment is 192.168.1.0, the mask bits is 24, and theinternal IP address of the SNAT server is 192.168.1.4, run the following command:iptables -t nat -A POSTROUTING -o eth0 -s 192.168.1.0/24 -j SNAT --to 192.168.1.4

9. Run the following command to save the configuration:service iptables save

10. Run the following command to check whether the operation is successful:iptables -t nat --listThe operation is successful if the information shown in Figure 5-3 (for example,192.168.1.0/24) is displayed.

Figure 5-3 Verifying configuration

11. Run the following command to edit the rc.local file:vi /etc/rc.d/rc.local

12. Add the following content to the end of the file:echo `/sbin/iptables-restore /etc/sysconfig/iptables` >>/etc/rc.d/rc.local

13. Press Esc, type :wq, and press Enter.Save the settings and exit the vi editor.

14. Run the following command to modify the ifcfg-eth0 file:vi /etc/sysconfig/network-scripts/ifcfg-eth0

15. Add the following content to the end of the file:DNS1=114.114.114.114DNS2=8.8.8.8

16. Press Esc, type :wq, and press Enter.



Save the settings and exit the vi editor.17. Run the following command to restart the NIC:

service network restart

Configuring the user desktop

1. Go to Network and Sharing Center.2. In the View your active networks area, click Local Area Connection 2 or Ethernet 2.

The Local Area Connection 2 Status dialog box or the Ethernet 2 Status dialog box isdisplayed.

3. Click Properties.The Local Area Connection 2 Properties dialog box or the Ethernet 2 Propertiesdialog box is displayed.

4. Double-click Internet Protocol Version 4 (TCP/IPv4).The Internet Protocol Version 4 (TCP/IPv4) Properties dialog box is displayed.

5. Select Use the following DNS server addresses, and set the DNS server address to114.114.114.114 and 8.8.8.8.

6. Click Advanced.The Advanced TCP/IP Settings dialog box is displayed.

7. Deselect Automatic metric, and set Interface metric to 2.8. Click OK in sequence to save the settings and close the dialog boxes.9. Click Close to close the Local Area Connection 2 Status dialog box or the Ethernet 2

Status dialog box.10. In the View your active networks area, click Local Area Connection or Ethernet.

The Local Area Connection Status dialog box or the Ethernet Status dialog box isdisplayed.

11. Click Details….The Network Connection Details dialog box is displayed.

12. Record the IPv4 address, for example, 172.16.0.52.13. Open the cmd window and run the following command to add a route:

route add 169.254.0.0 mask 255.255.0.0 Gateway of the primary NIC –pThe first two segments of Gateway of the primary NIC are the same as those of the IPaddress recorded in 12, and the last two segments are 0 and 1 respectively.

NOTE

For example, if the IPv4 address is 172.16.0.52, the gateway of the primary NIC is 172.16.0.1.Run the following command to add a route:

route add 169.254.0.0 mask 255.255.0.0 172.16.0.1 –p

Method 3: using a proxy server

Creating a proxy server

1. Create a proxy server that runs, for example, CentOS. The proxy server must reside on asubnet different from the one where Workspace resides in the same VPC.

NOTE

For details about how to configure the ECS, see the Elastic Cloud Server User Guide.



https://support.huaweicloud.com/en-us/ecs_dld/index.html

2. Configure an elastic IP address for the proxy server to access the Internet.

Installing squid

NOTE

The following operations use Cent OS 6.6 as an example.

1. Log in to the proxy server as user root.2. Run the following command to check whether squid is installed:

rpm -qa|grep squid– If it is installed, go to 4.– If it is not installed, go to 3.

3. Run the following command to install squid:yum -y install squid

4. Run the following command to edit the squid.conf configuration file:vi /etc/squid/squid.conf

5. Check whether SSH is used for connection.– If SSH is used, go to 6.– If SSH is not used, go to 7.

6. Press I to enter the edit mode and add the following content in a blank row.aclSafe_ports port 22

7. Use # to comment out http_access deny CONNECT !SSL_ports.8. Press Esc to exit the edit mode. Type :wq and press Enter.

Save configurations and exit the vi editor.9. Run the following command to restart the squid service.

service squid restart

Configuring security group rules

1. Configure security group rules to ensure that the extranet cannot access any port of theproxy server and the user desktop can access only the proxy port of the proxy server.

NOTE

For details about how to configure security group policies, see the Virtual Private Cloud UserGuide.

Configuring the user's browser

1. Open the proxy server setting page of the browser.2. Set the IP address and the port of the proxy server to the IP address and the monitoring

port configured in 1, respectively.

5.8 How Do I Install Applications on the Desktop?If an end user needs to install applications on the desktop, the administrator can use thefollowing methods to assist the end user in the installation:

Method 1: using file redirection





1. Choose File redirection > Fixed Drive (such as local disks) to enable the policy. Fordetails, see Managing Policies.

2. The end user downloads required applications to the local PC.

3. The end user copies the applications from the local PC to the desktop and installs them.

Method 2: using USB redirection

1. Choose USB port redirection > Storage devices (such as USB flash drives) to enablethe policy. For details, see Managing Policies.

2. The end user copies the applications from the USB flash drive to the desktop and installsthem.

Method 3: using the Internet

1. Enable the Internet access permission for the end user. For details, see How Do EndUsers Access the Internet?.

2. The end user downloads the applications from the Internet to the desktop and installsthem.

Method 4: using private images

Create the desktop where the required applications are installed for the end user. For details,see Purchasing Workspace Desktops.

Method 5: using Microsoft AD pushing

Use Microsoft AD to push the applications to the desktop of the end user. For details, seeHow to use Group Policy to remotely install software in Windows Server 2008.

5.9 What Resources Do I Need to Prepare Before Applyingfor Workspace?

You need to enable ports listed in Table 5-2 on the enterprise firewall so that end users canlog in to the desktops properly.

Table 5-2 Internet access ports

Port Protocol Description

443 TCP Used by the end user to access the web login page.

8443 TCP Used by the end user to access the desktop.

NOTE

By default, port 443 and port 8443 are used. If you want to change the ports, see Changing the InternetAccess Port.

In GPU desktop scenarios, prepare DirectConnect resources.



https://support.microsoft.com/en-us/kb/816102

5.10 What Should I Do If I Fail to Apply for Workspace?

ScenarioIf you are unable to access Workspace after the initial application is complete, retry theapplication, or cancel Workspace and reapply again.

Procedure




Step 3 In the Configuration Information area, click Retry.

The Retry Apply for Workspace dialog box is displayed.

Step 4 Click OK.

NOTE

You can click Cancel Workspace in the Configuration Information area to cancel Workspace andapply for Workspace again.

----End

5.11 How Is Workspace Connected to Enterprise Intranets?Workspace desktops can communicate with PCs in the enterprise intranet using the VPN orDirectConnect method.

l VPN: Figure 5-4 shows how to use VPN to connect Workspace desktops to PCs in theenterprise intranet.

Figure 5-4 Connecting Workspace to an enterprise intranet using a VPN



l DirectConnect: To connect Workspace to an enterprise intranet using DirectConnect, seeDirect Connect User Guide.

NOTE

Workspace reserves the 198.19.0.0/16 network segment for the NIC on the management plane. Do notuse this network segment on the enterprise intranet in case the route conflict occurs.

5.12 How Do I Interconnect Workspace with MicrosoftAD?

You can deploy Microsoft AD in the intranet of the enterprise DC or in the VPC whereWorkspace resides. The following describes how to interconnect Workspace with MicrosoftAD in two deployment scenarios. After interconnecting Workspace with Microsoft AD,configure DNS forwarding on the DNS to allow Workspace to access the Internet.

NOTE

Ensure that the network where Workspace resides is communicating correctly with that where MicrosoftAD resides.

Procedure

Scenario 1: Microsoft AD is deployed in the intranet of the customer's DC.

Figure 5-5 Microsoft AD deployed in the intranet of the customer's DC

Step 1 Use DirectConnect or IPsec VPN to connect the customer's DC to the VPC. For details aboutthe configuration, see the Direct Connect User Guide or VPN User Guide.

Step 2 If a firewall is deployed between Microsoft AD and Workspace, enable the following ports onthe firewall for Workspace to connect to Microsoft AD, as shown in Table 5-3:

Table 5-3 Port list

Role Port Protocol Description

AD 135 TCP Remote Procedure Call (RPC) protocolThis port is used by the Lightweight DirectoryAccess Protocol (LDAP), Distributed FileSystem (DFS), and Distributed File SystemReplication (DFSR).



https://support.huaweicloud.com/en-us/dc_dld/index.html

https://support.huaweicloud.com/en-us/dc_dld/index.html

http://support.huaweicloud.com/en-us/usermanual-vpn/en-us_topic_0035391332.html

Role Port Protocol Description

137 UDP NetBIOS name resolutionThis port is used by the network login service.

138 UDP NetBIOS data gram serviceThis port is used by services, such as the DFSand network login service.

139 TCP NetBIOS-SSN serviceThis port is used for network basic input andoutput.

445 TCP NetBIOS-SSN serviceThis port is used for network basic input andoutput.

49,152-65,535 TCP RPC dynamic port

49,152-65,535 UDP RPC dynamic port

88 TCP Kerberos key distribution center service

88 UDP Kerberos key distribution center service

123 UDP Port used by the NTP service

389 UDP LDAP server

389 TCP LDAP server

464 TCP Kerberos authentication protocol

464 UDP Kerberos authentication protocol

500 UDP isakmp

593 TCP RPC over HTTP

636 TCP LDAP SSL

3268 TCP LDAP global catalog server

3269 TCP LDAP global catalog server

4500 UDP IPsec NAT-T

5355 UDP llmnr

9389 TCP Active Directory Web service

DNS 53 TCP DNS server

53 UDP DNS server

Step 3 After the configuration, verify the interconnection and ensure that the networks and ports areworking correctly. For details, see Verification.



Step 4 Log in to your DNS server, configure the DNS reverse lookup function in the DNS Manager,and add the first subnet segment that is selected in the subnet list during Workspaceapplication to the IP address segment for reverse lookup.

----End

Scenario 2: Microsoft AD is deployed in a subnet and the VPC where Workspace residesis deployed in another subnet.

Figure 5-6 Microsoft AD deployed in a subnet and the VPC where Workspace residesdeployed in another subnet

In this scenario, you must add security group rules for Microsoft AD to enable some ports ofMicrosoft AD for Workspace so that Workspace can connect to Microsoft AD.

Step 1 Create a security group, add an inbound rule, and configure the parameters as follows:

l Protocol: ANY

l Source IP Address: IP Address

l IP Address: Enter the subnet where Workspace resides.

Step 2 Apply the security group to AD server instances so that Workspace can communicatecorrectly with Microsoft AD.

NOTE

If you want to minimize the number of enabled ports and protocols, you can add multiple inbound rulesto the security group. For details about the ports that need to be enabled, see Table 5-3.

Step 3 After the configuration, verify the interconnection and ensure that the networks and ports areworking correctly. For details, see Verification.

Step 4 Log in to your DNS server, configure the DNS reverse lookup function in the DNS Manager,and add the first subnet segment that is selected in the subnet list during Workspaceapplication to the IP address segment for reverse lookup.

----End



Verification

Step 1 Check the firewall or security group settings of the AD server and ensure that ports 49,152 to65,535 have been enabled.

NOTE

For details about the requirements on AD server ports, see Active Directory and Active DirectoryDomain Services Port Requirements.

Step 2 Create a Windows OS instance in the VPC where the user desktop resides using the ECSservice and add the instance to the existing domain.

NOTE

For details about how to configure and operate ECS, see the Elastic Cloud Server User Guide.

Step 3 Log in to the Windows instance using the RDP client tool (such as mstsc) or VNC.

The remaining steps are performed on this Windows instance.

Step 4 Download ADTest.zip and unzip the test application.

Step 5 In the blank area of the directory where ADTest.exe resides, hold down Shift, right-click, andchoose Open command windows here.

Step 6 In Command Prompt, enter the following command to check the AD server connectivity:

ADTest.exe -file ADTest.cfg -ip AD IP address -domain AD domain name -user domainadministrator account

Command example:

ADTest.exe -file ADTest.cfg -ip 192.168.161.78 -domain abc.com -user vdsadmin

Step 7 Check whether SUCCEED is displayed in all test results. If FAILED is displayed, check theAD server configuration or firewall ports following the instructions.

----End

Configure DNS forwarding.NOTE

The following uses Windows Server 2012 as an example.

Step 1 Log in to the DNS server as the administrator.

Step 2 On the task bar, click .

The Server Manager window is displayed.

Step 3 In the navigation pane on the left, click DNS.

Step 4 In the SERVER area, right-click server name and choose DNS Manager.

The DNS Manager window is displayed.

Step 5 Unfold DNS, right-click computer name, and choose Properties from the shortcut menu.

Step 6 On the Advanced tab page, deselect Disable recursion (also disable forwarders), and clickApply.



https://technet.microsoft.com/en-us/library/dd772723(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/dd772723(v=ws.10).aspx

https://support.huaweicloud.com/en-us/ecs_dld/index.html

https://obs.myhwclouds.com/obs-workspace-share/ADTest.zip

Step 7 On the Forwarders tab page, click Edit, enter the IP address of the default DNS server ofHUAWEI CLOUD, and click OK.

NOTE

You can view the IP address of the default DNS server of HUAWEI CLOUD on the page for creatingthe VPC.

----End

5.13 What Should I Do If I Fail to Apply for Workspace byInterconnecting with Microsoft AD?

Scenario

If you fail to apply for Workspace by interconnecting with Microsoft AD and a message isdisplayed stating "Failed to configure an infrastructure component(85%)", you can rectifythe fault as follows:

Procedure

Step 1 In the AD Domain area of the Dashboard page, check whether the domain information iscorrect. Click Modify to modify incorrect domain configurations.

Step 2 Click Retry to reapply for the service.

Step 3 If you use Scenario 1: Microsoft AD is deployed in the intranet of the customer's DC insection How Do I Interconnect Workspace with Microsoft AD? and use DirectConnect forconnections, log in to the AD server and ping the IP address of DirectConnect. If the pingfails, check whether the network where the AD server resides as well as the VPC network andsubnet ports used for applying for Workspace are normal.

Step 4 Check the AD server connectivity. For details, see the Verification area in section How Do IInterconnect Workspace with Microsoft AD?.

Step 5 Click Retry to reapply for the service.

Step 6 If the fault persists, contact technical support engineers.

----End

5.14 How Do I Check the Network Status of Desktops?Perform the following operations to check the network status of desktops and determine thenetwork segment where the fault occurs.

Procedure

Step 1 Log in to the desktop.

Step 2 Move the cursor to the upper area of the desktop.

The floating window is displayed, as shown in Figure 5-7.



Figure 5-7 Floating window

Step 3 Click Network.

The Connection Status dialog box is displayed.

NOTE

When the network connection is good, the network indicator is steady green. When the networkconnection is poor, the network indicator is steady yellow. When the network connection is bad, thenetwork indicator is steady red.

Step 4 On the Connection Status page, check Round-Trip Time. Figure 5-8 shows the networkconnection status.

Figure 5-8 Network connection status

Step 5 Click Start. In the Search programs and files text box, type cmd, and press Enter.

Step 6 In the command-line interface, run the following command to check the network connectivitybetween the desktop and the terminal:

ping Internet access address of the desktop

NOTE

The Internet access address of the desktop can be found in the desktop provisioning notification email.

Information similar to the following is displayed:



Step 7 Determine the network segment where the fault occurs based on the results in Step 4 and Step6.l If the network latency in Step 4 and Step 6 is large, the public network is faulty.l If the network latency in Step 4 is large but that in Step 6 is small, the internal network

of Workspace is faulty.

----End

5.15 What Are the Network Requirements for Accessingthe Desktop?

Table 5-4 lists the network requirements for accessing the desktop. If the networkrequirements cannot be met, you are advised to use DirectConnect access.

Table 5-4 Network requirements

Desktop Type Network Requirement

Common desktop l Average bandwidth: 300 kbps/ instance; Peak 5 Mbps/instance.

l Packet loss rate ≤ 0.01%l Round -trip delay ≤ 30 msl Jitter ≤ 10 ms

GPU desktop l Average bandwidth: 20 Mbps/ instance.l Packet loss rate ≤ 0.01%l Round -trip delay ≤ 30 msl Jitter ≤ 10 msl These values are for reference only and may be more

stringent depending on the application scenario.l Must be used in conjunction with the Direct Connect

service.



6 FAQs (End Users)

6.1 What Devices Can Be Used to Log In to Workspace?You can log in to Workspace using TCs, SCs, browsers, Android terminals, and iOSterminals.

6.2 What Are the Precautions for Using Workspace?Workspace desktops provide on-demand services based on network resources and workdepending on OSs and network configurations in desktops. This section describes some riskyoperations on desktops.

These operations do not need to be adjusted. If special modification is required, contact theadministrator for confirmation.

Risky Operations (Processes and Services)1. Change the default service and startup options in the system configuration. Figure 6-1

shows the Services and Startup options.

WorkspaceUser Guide (Administrators) 6 FAQs (End Users)


Figure 6-1 Services and startup

2. Disable HDP services shown in Figure 6-2.

Figure 6-2 HDP services

3. Uninstall programs shown in Figure 6-3.



Figure 6-3 Programs

4. End the LOCAL SERVICE, NETWORK SERVICE, or SYSTEM processes in TaskManager. Figure 6-4 shows the processes that cannot be ended.

Figure 6-4 Task Manager

Risky Operations (Network)1. Disable NICs, and disable or modify network configurations, as shown in Figure 6-5.



Figure 6-5 Local connection

2. Run the script or command for modifying a route, such as route DELETE *.3. Delete ports 28511, 28512, 28521, and 28522 from Windows firewall exception options.4. Enable software or tools, such as the IPsec, that can restrict network traffic.

Risky Operations (Others)1. Delete files or folders in C:\Program Files\Huawei listed in Figure 6-6.

Figure 6-6 Folders

2. Enable the sleep function on desktops. The sleep function is disabled for desktops bydefault, as shown in Figure 6-7.

Figure 6-7 Sleep function

3. Modify the configuration file of the HDP client (AccessAgent).4. Run Rabbit Magic or Wopti Utilities to clean or optimize the registry.



5. Install a customized screensaver with complex transformation functions, whichconsumes system resources and causes a delay in desktop access.

6.3 What OSs Can Run on Workspace?Workspace runs Windows Server 2008 R2 or Windows Server 2016 and delivers theWindows 7 or Windows 10 desktop environment.

6.4 Can I Upgrade OSs by Myself?Workspace must use OSs provided by HUAWEI CLOUD or OSs made based on the OSsprovided by HUAWEI CLOUD. You are not allowed to upgrade an OS but can install OSpatches.

6.5 How Do I Install Applications on the Desktop?By default, end users are configured as local administrators and can install applications.Administrators can modify the settings to prevent end users from installing applications.

An end user can install applications on the desktop using the following methods:

NOTE

The administrator must enable necessary policies and perform required configurations before thefollowing methods are used.

Method 1: using file copy

1. Download required applications to the local PC.

2. Copy the applications from the local PC to the desktop and install them.

Method 2: using USB flash drive copy

Copy the applications from the USB flash drive to the desktop and install them.

Method 3: using the Internet

Download the applications from the Internet to the desktop and install them.

Method 4: using private images

Contact the administrator to create the required desktop.

Method 5: using application pushing

Contact the administrator to push the required applications to your desktop and install them.

6.6 What Software Is Compatible with Workspace?Software that works with Workspace must be compatible with Windows Server 2008 R2 orWindows Server 2016.



6.7 How Does Workspace Manage Peripherals?If you encounter peripheral configuration problems when using Workspace, you can useHDPDeviceHelper.

Choose Start > Huawei vDesk. Start HDPDeviceHelper and configure peripherals followingthe instructions.

Figure 6-8 vDesk

6.8 Does Workspace Support Personalized Settings?By default, after logging in to Workspace, end users can personalize items, such aswallpapers, icons, and shortcuts for OSs. The settings will be retained until the nextmodification.

Administrators can use policies, such as USB Redirection, Printer Redirection, FileRedirection, and Clipboard Redirection to control data transmission and peripheral accesspermission between end users and Workspace.

NOTICEInstalling a customized screensaver with complex transformation functions consumes systemresources and causes a delay in desktop access.



6.9 Can Data in Workspace Be Saved for a Long Time?Yes. End users use Workspace desktops separated from other end users. Applications,documents, settings, and other data can be saved for a long time.

6.10 How Do I Use a Local Printer for Printing?If you have configured a local printer, the printer will be selected by default. If no printer isconfigured, you need to configure one. Then select the local printer from the printing menuand click Print.

6.11 How Do I Use a Network Printer for Printing?Any printer that resides in the same network as Workspace and is supported by Windows canbe added as a network printer. After a network printer is added, you can select the printer inapplications for printing.

6.12 What Should I Do If the Desktop Cannot BeConnected?

During the use of Workspace desktops, desktops may fail to be connected due to

misoperations. If this happens, you can click to restart the desktops to resolve theproblem.

NOTE

If desktops cannot be restarted or you cannot log in to the desktops after they are restarted, click toforcibly restart the desktops. Data that is not saved may be lost after the desktops are forcibly restarted.Therefore, exercise caution when forcibly restarting desktops.

6.13 How Do I Log In to the Desktop for MaintenanceUsing VNC?

If you cannot log in to your desktop normally, you can log in to the desktop for maintenanceusing VNC.

NOTE

This function does not apply to scenarios where DirectConnect is used to access desktops.

The procedure is as follows:

1. Log in to the desktop and enter the desktop list page.

2. Click , as shown in Figure 6-9.

The VNC self-help console is displayed.



NOTE

If a black screen occurs, click Send CtrlAltDel in the upper-right corner of the window.

Figure 6-9 Self-help console

6.14 What Should I Do If the Desktop Freezes When UsingWorkspace?

If a fault such as desktop freezing or slow response occurs when you use a Workspacedesktop, rectify the fault by performing operations provided in this section.



Figure 6-10 Fault locating

Method 1: Stopping Unnecessary Processes1. On the desktop, open Task Manager. The following figure shows the Task Manager

window.



Figure 6-11 Windows Task Manager

2. View the processes that consume massive CPU and memory resources.3. Save user documents.4. Stop the processes that consume massive CPU and memory resources.

NOTICEDo not stop the processes mandatory for desktop operating. For details, see What Arethe Precautions for Using Workspace?.

Method 2: Restarting the Desktop1. Save user documents.

2. Choose Start > Restart or click to restart the desktop, as shown in the followingfigure.

NOTE

If desktops cannot be restarted or you cannot log in to the desktops after they are restarted, click

to forcibly restart the desktops. Data that is not saved may be lost after the desktops areforcibly restarted. Therefore, exercise caution when forcibly restarting desktops.



Figure 6-12 Self-help console

3. On the login page that is displayed, enter the user domain account and password.

4. In the desktop list, click to go to the desktop.

6.15 How Do I Check the Network Status of Desktops?Perform the following operations to check the network status of desktops and determine thenetwork segment where the fault occurs.

Procedure

Step 1 Log in to the desktop.

Step 2 Move the cursor to the upper area of the desktop.

The floating window is displayed, as shown in Figure 6-13.

Figure 6-13 Floating window

Step 3 Click Network.

The Connection Status dialog box is displayed.

NOTE

When the network connection is good, the network indicator is steady green. When the networkconnection is poor, the network indicator is steady yellow. When the network connection is bad, thenetwork indicator is steady red.

Step 4 On the Connection Status page, check Round-Trip Time. Figure 6-14 shows the networkconnection status.



Figure 6-14 Network connection status

Step 5 Click Start. In the Search programs and files text box, type cmd, and press Enter.

Step 6 In the command-line interface, run the following command to check the network connectivitybetween the desktop and the terminal:

ping Internet access address of the desktop

NOTE

The Internet access address of the desktop can be found in the desktop provisioning notification email.

Information similar to the following is displayed:

Step 7 Determine the network segment where the fault occurs based on the results in Step 4 and Step6.l If the network latency in Step 4 and Step 6 is large, the public network is faulty.l If the network latency in Step 4 is large but that in Step 6 is small, the internal network

of Workspace is faulty.

----End

6.16 How Do I Change the Login Password?The passwords of accounts in the system must be changed periodically. The recommendedinterval is three months. The minimum validity period of a password is two days.



You can perform the following steps to change the login password on the WI (desktop loginpage).

Step 1 Use the original domain account and password to log in. The desktop list page is displayed.

Step 2 On the desktop list page, click . Then click .

Step 3 Enter Old Password, New Password, and Confirm Password.

Step 4 Click OK.

----End

6.17 How Do I Change the Login Password (MobileClient)?

The passwords of accounts in the system must be changed periodically. The recommendedinterval is three months. The minimum validity period of a password is two days.

You can perform the following steps to change the login password on the WI (desktop loginpage) through the FusionAccess client on a mobile terminal.

Step 1 Open the FusionAccess client on the mobile terminal to go to the desktop login page.

NOTE

You must configure the desktop login address upon your initial login.

Step 2 Enter the username and password, and click Login.

Step 3 The VM list is displayed.

Step 4 Click in the upper right corner and click Change Password.

Step 5 The Change Password page is displayed.

Step 6 Enter Old Password, New Password, and Confirm Password, as shown in Figure 6-15.



Figure 6-15 Change Password

Step 7 Choose Modify Password.

Step 8 The password is changed successfully.

----End

6.18 What Should I Do If I Forget the Password?If you lose or forget the login password, contact the administrator. After the administratorprocessing, the password resetting link will be sent to your email address by the system. Youcan click the link to reset the password.

NOTICEThe validity period of the password resetting link in the email is 24 hours. Reset the passwordin a timely manner.

6.19 What Should I Do If the Account Is Locked?Your account will be locked if you enter an incorrect password consecutively. If this happens,contact the administrator to unlock the account.



6.20 Does Workspace Support Dual-Screen Display?When accessing Workspace desktops using TCs, perform the following operations toconfigure dual-screen display.

PrerequisitesTable 6-1 lists the materials required for configuring dual-screen display.

Table 6-1 Materials required for configuring dual-screen display

Item Quantity Image (Example) Description

TC 1 -

Monitor/Converter 2 Typically, a monitorprovides a DVI-D port anda VGA port. If twomonitors have only VGAports in some special cases,a DVI-D-to-VGAconverter is required.

DVI-I one-to-twocable

1 Converts DVI-I signals toDVI-D and VGA signals.

DVI-D-to-DVI-Dcable

1 -

VGA-to-VGA cable 1 -



Procedure

Dual-Screen Connection

Step 1 Connect a TC to monitors based on the monitor type.

l If the monitors provide DVI and VGA ports, go to Step 2.

l If the monitors provide VGA ports only, go to Step 3.





----End

TC Setting

Step 1 Power on the TC.



Step 2 Perform the following operation based on the TC type.l Linux TC: Perform Step 3 to Step 7.l Windows TC: Perform Step 8 to Step 10


Step 4 Double-click Display.

Step 5 Select Optimum settings.

Step 6 Select the display mode based on site requirements.l Duplicatel Extend

Step 7 Select the main monitor based on site requirements.l DVIl VGA


Step 8 Right-click on the desktop and choose Screen Resolution.

Step 9 Set Multiple displays based on site requirements.l Duplicate these displaysl Extend these displays

NOTE

Only Extend these displays can be selected when two desktops and dual-screen display are used.

Step 10 Click OK.

----End

Client Setting

Step 1 Perform the following operation based on the dual-screen display scenario.l If a desktop and two screens are used, go to Step 2.l If two desktops and two screens are used, go to Step 6.

Step 2 Log in to the desktop using the client.


Step 4 Select Open Multiple Monitor (The configuration will take effect after reconnect).

Step 5 Click Close.


Step 6 Log in to a desktop using the client.


Step 8 Deselect Open Multiple Monitor (The configuration will take effect after reconnect).

Step 9 Click Close.

Step 10 Log in to the other desktop and repeat Step 6 to Step 9.



Step 11 Drag the two desktops to different screens to achieve dual-screen display.

----End

Others

6.21 What Should I Do If I Fail to Log In to the GPUDesktop Using an SC?

If your PC desktop is configured with a non-standard screen resolution, login to the GPUdesktop using an SC may fail. You can perform the following steps to solve the problem.

NOTE

Examples of standard screen resolutions: 1920 x 1080 and 1680 x 1050

Procedure

Step 1 Set a standard screen resolution, such as 1920 x 1080 or 1680 x 1050, for your PC desktop.

Step 2 Delete the SetCLientToTop.txt file in C:\PermanenceDataPath.

Step 3 Log in to the GPU desktop again using an SC.

----End



A Change History

Changes between document issues are cumulative. The latest document issue contains all thechanges made in earlier issues.

Release Date What's New

2018-08-17 This issue is the 18th official release.Modified the following contents:Updated the hyperlink to Tag Management Service User Guide inPurchasing Workspace Desktops.

2018-07-10 This issue is the 17th official release.Modified the following contents:Added SC types and description in Logging In to a Desktop Usingan SC and Logging In to a Desktop Using an SC (Using a Proxyfor Internet Access).

2018-06-12 This issue is the 16th official release.Added the following contents:l Monitoringl Setting Alarm Rulesl Viewing Monitoring Metricsl Recording Workspace Operationsl Key Operations Recorded by CTSl CTS TracesModified the following contents:l Added the description of CTS and Cloud Eye in Related

Services.l Adjusted the location of section Workspace Monitoring

Metrics.

WorkspaceUser Guide (Administrators) A Change History



2018-05-28 This issue is the 15th official release.Modified the following contents:l Added the description of NAT gateway in Related Services.l Added the description of accessing the Internet in NAT mode in

How Do End Users Access the Internet?.l Modified the network requirements for accessing the GPU

desktop in What Are the Network Requirements forAccessing the Desktop?.

l Optimized the description of adding disks in ManagingDesktops.

2018-05-08 This issue is the 14th official release.Added the following contents:How Do I Change the Login Password (Mobile Client)?Modified the following contents:l Deleted the description that mobile terminals do not support

password change from Logging In to a Desktop Using aMobile Terminal (Android) and Logging In to a DesktopUsing a Mobile Terminal (iOS).

l Optimized the description of TC purchasement in Do I Need toPurchase TCs?.

2018-04-10 This issue is the 13th official release.Added the following contents:What Are the Network Requirements for Accessing theDesktop?Modified the following contents:l Added the support for Windows Server 2016 in Service Process

and Function Overview, What OSs Can Run on Workspace?and What Software Is Compatible with Workspace?.

l Added the description of Tag Management Service in RelatedServices.

l Optimized the procedure for selecting the network access modein Applying for the Workspace Service.

l Optimized the procedure for selecting the AZ and addingediting tags in Purchasing Workspace Desktops.

l Added the description of how to manage tags in ManagingDesktops.

2018-03-30 This issue is the 12th official release.Modified the following content:Optimized the procedure of purchasing Workspace desktopsPurchasing Workspace Desktops.




2018-03-12 This issue is the 11th official release.Modified the following contents:l Deleted the support for Windows Server 2016 in Service

Process and Function Overview, What OSs Can Run onWorkspace? and What Software Is Compatible withWorkspace?.

l Optimized the procedure of purchasing Workspace desktopsPurchasing Workspace Desktops.

2018-01-31 This issue is the tenth official release.Added the following contents:How Is Workspace Charged?Modified the following contents:l Deleteed the description of NAT gateway in Related Services.l Optimized the procedure of purchasing Workspace desktops

Purchasing Workspace Desktops.l Updated the icons for enabling policies in Managing Policies.l Updated the icons for enabling and disabling the two-factor

authentication in Configuring Two-Factor Authentication.l Optimized the description of logging in to the Workspace

management console in Logging In to the WorkspaceManagement Console.

l Deleteed the description of accessing the Internet in NAT modein How Do End Users Access the Internet?.

2018-01-15 This issue is the ninth official release.Added the following contents:l Changing the Service Subnetl Configuring Two-Factor AuthenticationModified the following contents:l Added the description of NAT gateway in Related Services.l Added the procedure for selecting a service subnet and setting

subnet management in Applying for the Workspace Service.l Added the procedure for selecting a service subnet in

Purchasing Workspace Desktops.l Added the description of specification changes in Managing

Desktops.l Modified GPU packages in Workspace Packages and What

Are Workspace Packages?.l Added the description of accessing the Internet in NAT mode in

How Do End Users Access the Internet?.




2017-11-06 This issue is the eighth official release.Modified the following contents:l Optimized the description of logging in to the Workspace

management console in Logging In to the WorkspaceManagement Console.

l Optimized the description of logging in to the Workspacemanagement console in Changing the Password of a DomainAdministrator.

l Detailed the procedure in How Do End Users Access theInternet?.

l Optimized the descriptions in How Is Workspace Connectedto Enterprise Intranets?.

l Added the description of configuring DNS forwarding in HowDo I Interconnect Workspace with Microsoft AD?.

2017-08-08 This issue is the seventh official release.Added the following contents:l Regions and AZsl Service Process and Function OverviewModified the following contents:l Added contents about disk encryption in Purchasing

Workspace Desktops.l Revised the description of accessing the Internet using SNAT in

How Do End Users Access the Internet?.

2017-06-30 This issue is the sixth official release.Modified the following contents:l Added the step of selecting an AZ in Applying for the

Workspace Service.l Detailed the procedure in How Do End Users Access the

Internet?.

2017-05-27 This issue is the fifth official release.Modified the following contents:l Added how to implement real-name authentication in Applying

for the Workspace Service.l Added the description of selecting the restoration time point in

Restoring Infrastructure Server Data.l Added the description of deleting a desktop in Managing

Desktops.l Added the description of configuring DNS reverse lookup in

How Do I Interconnect Workspace with Microsoft AD?.




2017-04-28 This issue is the fourth official release.Modified the following contents:Added the description of viewing the number of desktops owned bya user in Managing Users.

2017-04-17 This issue is the third official release.Added the following contents:Workspace Monitoring MetricsModified the following contents:l Added the description of the relationships between Workspace

and other services in Related Services.l Added the description of using private images to create desktops

in Purchasing Workspace Desktops.l Added the description of assigning user group permissions in

Purchasing Workspace Desktops.l Added the procedure for changing an email address in

Managing Users.




2017-02-20 This issue is the second official release.Added the following contents:l Infrastructure Serverl Logging In to a Desktop Using an SC (Using a Proxy for

Internet Access)l Changing the Internet Access Portl How Do End Users Access the Internet?l How Do I Install Applications on the Desktop?l What Resources Do I Need to Prepare Before Applying for

Workspace?l What Should I Do If I Fail to Apply for Workspace?l What Should I Do If I Fail to Apply for Workspace by

Interconnecting with Microsoft AD?l How Do I Check the Network Status of Desktops?l How Do I Log In to the Desktop for Maintenance Using

VNC?l How Do I Check the Network Status of Desktops?l How Do I Change the Login Password?l What Should I Do If I Fail to Log In to the GPU Desktop

Using an SC?Modified the following contents:l Optimized the description in Workspace.l Added the data that needs to be prepared when interconnecting

Workspace with an existing AD in Applying for theWorkspace Service.

l Changed the method of obtaining SCs in Logging In to aDesktop Using an SC.

l Added the description of Internet access using a proxy andbrowser types and versions in Logging In to a Desktop Using aBrowser.

l Added the solution to the desktop restart failure in FailureWhen Connecting to Desktops.

l Optimized the method of interconnecting Workspace withMicrosoft AD in How Do I Interconnect Workspace withMicrosoft AD?.

l Added the solution to the desktop restart failure in WhatShould I Do If the Desktop Cannot Be Connected?.

l Added the solution to the desktop restart failure in WhatShould I Do If the Desktop Freezes When UsingWorkspace?.

l Added the precautions for password resetting in What Should IDo If I Forget the Password?.




2016-08-15 This issue is the first official release.



Documents

User Guide (Administrators) - static.huaweicloud.com · HUAWEI TECHNOLOGIES CO., ... Different from the conventional local VDI solution, ... Client, Thin Client, and Mobile Terminal)