Refer to the following screenshot.
Start Page URL
Homepage URL to load when KioWare starts (Required)
Browsing Access
Using the browsing access list vastly improves security because it limits where the user can navigate to. This is so important because some websites online are dedicated to hacking kiosks. By using the access list properly, you will prevent hackers from utilizing potentially the only tools they have available.
Access Type
No Restrictions
If selected, the user is able to link to any domain without restriction.
Allow List
If selected, a list of domains to which the user is allowed to link; ie, a white list.
Deny List
If selected, a list of domains to which the user is not allowed to link; ie, a black list.
Add Domain
Click this button to add a new domain entry to the domain list.
Add Page
Click this button to add a new page entry to the selected domain. By default, pages added to a domain are defined as a revoke page list (ie, black list). To change the page filter type, edit the domain.
Edit
To edit a domain, highlight the domain and click the Edit button. You can change the domain name. You can also change the page filter type.
To edit a page, highlight the page and click the Edit button. The page will become editable.
General Rule of Thumb
Matches are contains matches:
- The longer the entry in a domain or page rule, the more strict a match.
- If you have domains that are the same except that one is longer than the other, you should always put the longer one above it because when KioWare finds a matching domain in the list, it does not continue to look for more.
For example, do not put
'foo.com'
above
'svr2.foo.com'
because foo.com will always be the match.
Domain Rules
The domain you enter should not have a 'http://' preceding the name, and you can enter any portion of the domain name depending on how restrictive you wish to be. For example:
'foo' will match
www.foo.com
www2.foo.com
www.foo.net
www.foodeat.com
'foo.com' will match
www.foo.com
www2.foo.com
www.twofoo.com
'.foo.com' will match
www.foo.com
www2.foo.com
but NOT
foo.com
'www.foo.com' will match
www.foo.com
'.com' will match
any domain that ends with '.com'
Local "C: Path" Content
If you do not have a web server installed on your kiosk and you need to reference a page on the kiosk, you can. However it can be tricky setting up the access list properly. If the path uses backslashes (\) instead of slashes (/), the entire URL is the domain. For example:
'C:\' will match
anything on the C drive
'C:\main\page.htm' will match
'C:\main\page.htm'
Note: Sometimes the Internet Explorer browser control that KioWare uses will convert your path that has backslashes in it to one that has slashes and put "file://" on the front. To see if this is happening or not, you may need to put an addressbar textbox on a KioWare toolbar so that you can see what the path is being translated to in KioWare.
For instance
"C:\foo\page.htm"
may be converted to
"file:///C:/foo/page.htm"
In that case, normal access list rules apply because slashes were used instead of backslashes. Your domain would be "C:" and the page would be "foo/page.htm".
Page Rules
The path/filename you enter should not have any domain information (ex, http://www.foo.com), and you can enter any portion of the path/filename depending on how restrictive you wish to be. For example:
'foo' will match
main/foo.html
product/foo.html
main/foo.asp
foo/default.asp
anything with a 'foo' in it
'foo.html' will match
main/foo.html
product/foo.html
'ads/foo.html' will match
english/ads/foo.html
spanish/ads/foo.html
'/ads/' is complicated. It will match any page in any directory that has '/ads/' in the path such as
english/ads/active/
but the page CANNOT be the first page after the domain! In that case, drop the beginning slash.
Note: Pages that are part of a Revoke List will have a red X through their page icon.
Default Page
$$$Default$$$
For circumstances where you wish to block or allow the home page of a domain, there is a special placeholder: $$$Default$$$. Some sites bring in their home page to other pages on the site. In these cases, it may be very confusing seeing blocked pages saying that TheDomain.com is being blocked. Adding $$$Default$$$ may be the solution.
Restriction Messages
Domain Restrictions
Display Domain Restricted Message
If checked, when domains are being restricted and a user tries to navigate to a restricted domain, a message can be displayed explaining why the user can't navigate to that domain.
Domain Restricted Message
The message to display when a user tries to navigate to a domain that has been restricted. This information is particularly useful when testing domain access lists to see which domain is being blocked.
Page Restrictions
Display Page Restricted Message
If checked, when Pages are being restricted and a user tries to navigate to a restricted page, a message can be displayed explaining why the user can't navigate to that page.
Page Restricted Message
The message to display when a user tries to navigate to a page that has been restricted.
Access List Logging
This is the recommended way to both set up and deploy your kiosk in regard to the browsing access list. This feature is used to write blocked URLs to the Application event log.
Don't Log Matches but Block Pages
Default - no logging.
Log Matches and Block Pages
Recommended deployment setting - Logs to the event log and blocks the pages.
Log Matches but DON'T Block Pages
Recommended testing setting - Logs to the event log but does not block pages.
Redirect on Domain/Page Block
If checked, KioWare will navigate to the URL in the textbox when a page is blocked.
Scripting Access
Using the scripting access list vastly improves security because it limits which domains and pages can execute KioWare commands. This is so important because some websites online are dedicated to hacking kiosks. By using the access list properly, you will prevent hackers from utilizing potentially the only tools they have available.
Refer to Browsing Access instructions (above) for details on how to add domains and pages to the list properly.
Protocol Access
Click this button to modify which protocols can be used in KioWare. Protocols already allowed and do not apply to the access list include:
http, https, file and res
The mailto protocol also does not apply to the access list because it is blocked or allowed else-where in the Config Tool.
It is highly recommended that you set the protocol access list to "Enabled", even if you do not add any entries to the list. That way all unsafe protocols will be blocked. If you do, keep in mind that any pages that may be using an unusual protocol probably will not work correctly.
Note: Protocol entries must end with either : or ://.
Note: The KioWare toolbar address bar will still always put http:// in front of any address typed that does not begin with http:// or https://.
Restriction Messages
Pressing this button will allow you to specify whether or not to display a message to the user when a protocol is blocked and/or whether to log an event to the event log about the block.
XML Configuration
Configuration settings can be saved in an XML file that makes it easy to copy a configuration to multiple installations.
KioWare can also be configured to automatically attempt to load an XML file upon startup. See below.
Use XML Configuration
If checked, the XML file defined below will attempt to be loaded and read by KioWare. Any configuration changes will be made prior to content being displayed, and if the XML file cannot be successfully downloaded, then the existing settings will be used.
XML File URL/Path Configuration
The URL or UNC path that defines the location of the XML configuration file.
XML Config Note
Note: If you need to edit an XML file by hand (IE. a text editor such as Notepad), keep this in mind. At the top of every XML file you will see something like:
<config type="KioWare" version="6.3.0" guid="{7ACD0729-E09C-427E-B452-95F269B0FA73}">
Inside the quotes of the guid value will need changed each time a change is made to the XML file. If it is not changed KioWare will think that it already has those settings and will not load the XML file. It does not matter what it is changed to, it just needs to be different.
KioWare Shutdown
Passcode
To change the passcode required to exit KioWare, enter the current passcode, then enter the new passcode and re-enter the new passcode. The passcode can consist of any charaters you want, but keep in mind that the current pin pad only supports entering digits.
The default passcode is 3523.
Exit Mode
KioWare can be configured to exit via the following actions:
| Allow Mouse Exit |
Click the four corners of the screen only. However, if the Alt and F4 keys are not blocked, Alt+F4 will also work |
| Allow Alt+F4 Exit |
Type Alt+F4 only |
| Allow Alt+F4/Mouse Exit |
Click the four corners of the screen or type Alt+F4. This is useful when you are blocking the Alt and/or F4 keys |
Keypad Shutdown Button
When the passcode dialog is displayed, a shutdown button can be displayed that perform the following actions:
| Disabled |
No Shutdown button displayed |
| Shutdown w/passcode |
Passcode required to shutdown kiosk |
| Shutdown no passcode |
Passcode not required to shutdown the kiosk |
| Logoff w/passcode |
Passcode required to logoff current user. Use when running a KioWare shell. |
| Logoff no passcode |
Passcode not required to logoff current user |
Scheduled Shutdown/Restart
These options enable KioWare to automatically shut down or restart the computer at scheduled times.
Note: Actual event times may vary between 0 and 15 minutes to avoid every kiosk that you have acting at the same time.
This feature is configured just like other scheduled tasks that KioWare performs. There is the option to perform the operation every so many minutes or at certain times of the day each week.
To enable the feature the Shutdown Mode must be set to something other than Disabled.
| Restart KioWare | KioWare will exit and then the watchdog service will start it again. |
| Reboot Kiosk | Reboots the computer. |
| Shutdown Kiosk | Shuts down the computer. |
Autologon Settings
To configure the computer to autologon on powerup, enter the following information:
Autologon at Boot
If checked, autologon is enabled
Username
The Windows account to logon to
Domain
The domain to logon to. Defaults to the local computer name.
Password
Account password
System Settings
To configure the computer to autologon on powerup, enter the following information:
Start on Boot
If checked, KioWare will autostart on computer startup immediately after autologon.
Allow Display Sleep (Power Options)
If checked, Windows power saving options are available while KioWare is running.
Note: Configure Windows Media Player properly so that power options settings do not get overridden.
Display Schedule
Used to tell KioWare to allow Windows to turn off the monitor at certain times during the week. Keep in mind that KioWare does not turn off the monitor, KioWare simply allows Windows to turn it off. In Windows those settings are usually found in "Control Panel/Power Options".
The sleep schedule has a column of checkboxes on the left used to configure "on" time, and on the right, "off" time. Every on time must have an off time. If no checkboxes are checked, the feature is off.
One of the more complex setups in the display schedule is when off times overlap into the next day. For instance, if you wanted to have the display turn off at midnight on weekdays, and 2:00am on the weekend, it would be set up like so:
| Day | On Time | Off Time |
| Sunday | 8:00am | 2:00am |
| Monday-Friday | 8:00am | 12:00am |
| Saturday | 8:00am | 2:00am |
Notice that Sunday and Saturday are set to 2:00am instead of Friday and Saturday because Friday night at 2:00am is actually Saturday morning.