USB Permissions

The USB Permissions component lets you allow specific USB devices or device classes.

Configuration

Device Settings

Setting	Value	Explanation
USB Input Devices	Allow Allow	Permissions for all USB HID devices (e.g., keyboards or mice) Override settings for specific devices.
USB storage devices	Allow Deny	Permissions for all USB mass storage devices (e.g., USB flash drives or external hard drives) Override settings under Specific Devices...
Allow specific devices	Comma-separated list	Comma-separated list of USB IDs and/or serial numbers. It'll take precedence over previous settings.
Allow specific devices	Comma-separated list	Comma-separated list of USB IDs and/or serial numbers. It'll take precedence over previous settings.
Other USB devices	Allow Allow	Set permissions for USB devices unaffected by previous settings.
Show error messages	Yes No	Display information about blocked devices in a pop-up.

Information about blocked devices

If a device is blocked after connection, the system writes an error message to the syslog. Use the log viewer for the affected thin client in openthinclient Management to view this message.

If the "Show error messages" setting is enabled, the client also displays a pop-up message.

The message contains the USB ID and the device serial number. Use one of these values to configure authorization for the specific device.

Determining the USB ID

There are two options for determining the USB ID of a device connected to a thin client:

1. System Information

Open System Information from the System menu
Open the "USB Devices" tab
Search for the device by device class and name, and copy the USB ID using the Copy button

2. `lsusb` At the command line

Open a terminal on the ThinClientCTRL+ALT+T.
Execute the command
```
lsusb
```
Find the correct USB ID based on the device name.

3. Confirmation message for restricted devices

Configure the system to allow only the desired device or its class, then generate an error message with the USB ID for that device.