ClearCube PCoIP System User's Guide - Manual (Page 103)

Chapter 8. Mass Storage Lockout (MSL)
96 PCoIP System User’s Guide

R-series blades and peers
When MSL is enabled on R-series blades using the motherboard jumper, MSL settings apply
to the peer zero client. Blade settings cannot be overridden by any MSL settings on a
connected zero client (note that you can set MSL on zero clients using a Web interface).
Changes to blade MSL settings are possible only with physical access to the R-series blade.

A-series blades and peers
MSL is enabled differently depending on the A-series model:

A6106D and above: Enable MSL on A-series blades A6106D and above using PCoIP
device firmware as described below.

A6105D and lower: Enable MSL on A-series blades using the V5320 host card DIP
switch (or MSL jumper on V5120 host cards). MSL is always enabled using the V5320
card, including when an A-series blade contains both V5320 and V5340 host cards (that
is, in a TERA1-based quad system).

Firmware-based MSL scenarios
Setting MSL using the PCoIP Web interface can be helpful when physical access to blades is
not possible, when deploying VMs, or for other business reasons. Note that you must use the
Web interface to set MSL permissions; you cannot change MSL settings from the zero client
OSD. When using firmware-based MSL, ClearCube recommends setting permissions using
the host card’s Web interface, because host card settings takes priority over any MSL settings
on zero clients. See the
NOTE on page 101 for an explanation about the priority of settings on
host cards and zero clients. Firmware-based MSL is granular, enabling administrators to
restrict and permit access to a wide range of USB devices. Administrators can permit access
to USB devices based on device vendor, devices classes, and more.
NOTE: When firmware-based MSL is enabled on physical blades, USB access is possible
through blade USB ports, including a ClearCube C/Port connected to the blade.
8.2
Setting MSL on R-Series Blades
MSL is disabled by default. To enable MSL on an R-series blade, move the jumper on MSL
header JP6 on the motherboard. Note the following:

Setting MSL from the R-series motherboard enables MSL on any connected administrative
C/Port and on connected PCoIP devices.

When the MSL jumper is physically set to lock out mass storage devices, software MSL
(through a zero client or host card Web interface) cannot override this hardware-based setting.