General prerequisites-Alibaba Cloud Workspace Terminal(Alibaba Cloud Workspace Terminal)-阿里云帮助中心

To use peripherals with a cloud computer, certain prerequisites must be met by the administrator or end user. This topic describes the general prerequisites. For prerequisites specific to a peripheral type or terminal type, see the configuration topic for that peripheral.

Obtain peripheral information

Specific peripheral information, such as the VID and PID of a USB peripheral or the IP address and port of a network printer, is essential for subsequent peripheral management and usage. You must obtain this information first.

Obtain USB peripheral information

For USB peripherals, you need the VID (Vendor ID) and PID (Product ID), which are required when you configure peripheral policies. Both VID and PID are hexadecimal values, such as 0xa12c, where the 0x prefix is typically optional. You can look up the VID and PID of a connected USB peripheral in several ways.

Important

The availability of peripheral devices on a cloud computer depends on multiple factors, including the type and version of the Alibaba Cloud Workspace terminal, the cloud computer image type and version, the type and version of the local device running the Alibaba Cloud Workspace client, and the brand and model of the peripheral device. You can visit the peripheral compatibility page to check whether a specific peripheral is compatible with a cloud computer. The data on this page was obtained under laboratory conditions and may differ from actual results.

From the Alibaba Cloud Workspace terminal

Open and log on to the Alibaba Cloud Workspace client.
In the upper-right corner of the client, click the icon, and then select Settings.
In the left-side navigation pane of the Settings window, click Peripherals, and then view the VID and PID of the USB peripheral on the Local USB Peripherals panel.

From the computer's device manager

You can find the VID and PID of a peripheral in the device management information on your computer.

Windows

In the Start menu, search for and open Device Manager.
In the Device Manager window, navigate to , and then double-click the USB device you want to look up.
On the Details tab of the properties dialog box, select Hardware Ids from the Property drop-down list. The VID and PID are displayed in the text box below.

macOS

In the system menu bar, choose , and then click More Info in the dialog box.
At the bottom of the About This Mac panel, click System Report.
In the left-side navigation pane of the new window, choose Hardware > USB, select the USB device you want to look up in the right-side panel, and then view the VID and PID below.

From the floating menu

Click the floating menu and select Peripherals & Printers.
On the Advanced Management tab, view the VID and PID of the USB peripheral in the device list.

Use a third-party tool

You can use the USB Device Tree Viewer tool to view peripheral information. This tool supports only Windows.

Download the tool: https://www.uwe-sieber.de/usbtreeview_e.html#download.
Extract the downloaded package, and then double-click UsbTreeView.exe to open it.
In the left-side directory of the tool, select the USB device you want to look up, and then view the VID and PID in the Device ID section of the right-side panel.

Obtain network printer information

For network printers, you need the IP address and port number of the printer. Refer to the printer manual to find the IP address and port number, which are typically available by default.

Administrator: configure peripheral policies

Peripheral access and behavior on cloud computers are governed by policies at multiple levels, including the cloud computer policy configured by the administrator, custom settings configured by the end user in the client, and recommended configurations from the best practice library. These policies differ in priority and scope.

Policy priority

Policy level	Priority	Scope	Configuration method	Configured by	Requirements
Custom peripheral rules in the cloud computer policy	Highest	All cloud computers associated with this policy	Console	Administrator	Client version V7.10 or later
Custom settings by the end user	Medium	The current client in use	Client	End user	N/A
Recommended configuration from the best practice library	Lowest	Global (default configuration)	No configuration required	N/A	N/A

Configure peripheral policies in the console

Peripheral management policies are part of the cloud computer policy, and must be created and maintained by an administrator in the console.

Note

The following examples use the EDS Enterprise Edition console. For the Business Edition procedure, see Manage policies.

General procedure for creating or modifying peripheral policies

Create a custom policy and associate it with a cloud computer

By default, a newly created cloud computer is associated with the system-generated default policy. Because the default policy cannot be modified, the administrator must create a custom cloud computer policy in the console and associate it with the cloud computer.

Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M > Policies.
On the Policies page, click Create Policy.
On the Create Policy page, enter a Policy Name as prompted, modify the policy settings as needed, and then click OK.
After the policy is created, you can view it in the list on the Policies page.
In the left-side navigation pane, choose Resource Management > EDS Enterprise.
On the EDS Enterprise page, perform one of the following operations as needed:
- Single operation: Find the target cloud computer, click More in the Actions column, and then select Change Policy.
- Batch operation: Select one or more cloud computers, and then choose More > Change Policy at the bottom of the page.
On the Required Policy tab of the Change Policy panel, click Change Policy, select the custom policy you created, and then click OK.
Note
If the resource group to which the cloud computer belongs already has an associated policy, you cannot directly change the policy for the cloud computer here. You can either change the policy associated with the resource group, or first remove the cloud computer from the resource group and then change its policy.
At the bottom of the Change Policy panel, click OK, and then click Confirm Policy Change.

Modify a custom policy already associated with a cloud computer

If the cloud computer is already associated with a custom policy, the administrator can directly modify the policy in the console without re-associating it.

Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M > Policies.
On the Policies page, find the custom policy you want to modify, and then click Modify Policy in the Actions column.
On the Modify Policy page, modify the policy settings as needed, and then click OK.

Peripheral-related rules in the cloud computer policy

Parameter	Description	Requirements and limits
Local disk redirection
Local disk mapping	Maps the local device disk as a cloud computer disk so that you can access local disk data from the cloud computer. Options include: Read-only: You can view and copy local disk data from the cloud computer, but cannot modify it. Disabled: Local disk data cannot be accessed from the cloud computer. Read-write: You can view, copy, and modify local disk data from the cloud computer.	Supported only on the Windows client and macOS client. Local disk mapping is intended for file data access only, not for running programs. Even with local disk mapping enabled, you cannot run applications installed on the local device from the cloud computer. You can run portable (installation-free) applications from the local disk in the cloud computer, but this consumes bandwidth and may degrade the cloud computer experience. Proceed with caution.
External disk mapping	Maps an externally connected disk device (such as a USB flash drive) as a cloud computer disk so that you can access the external disk data from the cloud computer. Options include: Read-only: You can view and copy external disk data from the cloud computer, but cannot modify it. Disabled: External disk data cannot be accessed from the cloud computer. Read-write: You can view, copy, and modify external disk data from the cloud computer.	Supported on the Windows client, macOS client, and Alibaba Cloud Workspace hardware terminal platforms. External disk mapping is intended for file data access only, not for running programs. Even with external disk mapping enabled, you cannot run applications installed on the device from the cloud computer. You can run portable (installation-free) applications from the disk in the cloud computer, but this consumes bandwidth and may degrade the cloud computer experience. Proceed with caution.
Peripheral redirection
USB redirection switch	When enabled, USB devices connected to the local terminal can be used on the cloud computer. You can restrict access by using an allowlist and blocklist or by device category. When disabled, peripheral devices configured for USB redirection are automatically switched to Prohibited.	The web client does not support USB devices and therefore does not support USB redirection.
Camera	Select a redirection rule for each peripheral type. Options include: USB redirection: Redirects the local USB peripheral device to the cloud computer. The corresponding driver must be installed on the cloud computer before you can use the device. Note You must enable the USB redirection switch before you can select USB redirection. Device redirection: Redirects the local USB peripheral device to the cloud computer. No driver is required on the cloud computer, but the driver must be installed on the local terminal device. Prohibited: Peripheral redirection is not performed, and the peripheral cannot be used on the cloud computer.	Supported on Windows cloud computers that use the ASP protocol and Linux cloud computers running version 3.0.0 or later. Only device redirection is supported.
Scanner		Only USB redirection is supported.
ADB		No restrictions.
Printer		Only cloud computers connected through Windows client, macOS client, or Web client support printer redirection for using a printer connected to the local device on the cloud computer. If you connect to a cloud computer through an Alibaba Cloud Workspace hardware terminal, you must configure USB redirection instead. For details about how end users configure peripherals, see Configure USB printers. If the end user uses an AD domain account, you must set both the AD domain group policy and printer redirection to Allow before the end user can use a printer on the cloud computer.
Serial port device		No restrictions.
Peripheral allowlist and blocklist
Peripheral allowlist and blocklist	After you configure USB redirection rules by peripheral category, you can use the peripheral allowlist and blocklist to set exceptions for specific peripherals. The allowlist and blocklist take priority over USB redirection rules configured by peripheral category. If a USB peripheral is added to the blocklist, the peripheral is still accessible even if USB redirection is disabled for that peripheral category. If a USB peripheral is added to the allowlist, access to the peripheral is still prohibited even if USB redirection is enabled for that peripheral category.	You can configure up to 100 allowlist and blocklist rules. Rules higher in the list have higher priority. You can adjust the order. The VID (Vendor ID) and PID (Product ID) must be 4-digit hexadecimal values, such as a12c. Changes take effect the next time the end user connects to the cloud computer.
Peripheral management rules
Custom rules	You can create custom rules to manage redirection at the individual peripheral level, identified by Vendor ID (VID) and Product ID (PID).	You can configure up to 100 custom rules. The VID (Vendor ID) and PID (Product ID) must be 4-digit hexadecimal values, such as a12c. Supported only on Alibaba Cloud Workspace terminal V6.4.0 or later.
Best practice recommended rules	Best practice recommended rules provided by EDS.	These rules cannot be modified, but they have lower priority than your custom rules. Supported only on Alibaba Cloud Workspace terminal V6.4.0 or later.

End user: install UsbDk (conditional)

Note

You need to install UsbDk on the local Windows computer only when you use Windows client and access peripherals through USB redirection. UsbDk is not required in other scenarios.

UsbDk (USB Development Kit) is an open-source driver library for Windows that provides applications with direct and exclusive access to USB devices. It is essential for USB peripherals to function properly on a cloud computer. The Windows client installer includes UsbDk installation. If you skipped this step during installation, peripheral issues may occur. Follow these steps to reinstall UsbDk.

Open the Alibaba Cloud Workspace client download page and download the latest version of Windows client.
Double-click the installer to run it. On the Select Components screen, make sure to select UsbDk Runtime Libraries, and then follow the prompts to complete the installation.
Restart your computer after installing UsbDk Runtime Libraries.