Skip to content

Requesting a KIOSK

Windows based Kiosk Service

Getting help about kiosks

  • Activities: Installation, maintenance and support for Windows based kiosks
  • Provided Goods and Products: kiosks can be used publicly (such as the devices in the CERN library) but also privately for experiments or specific events
  • This service offers
    • The service create kiosks on request
    • Initial configuration of the device as a kiosk
    • Support for kiosks
  • Service limitations:
    • MS Edge is the only supported browser for kiosks
    • Timeout is only available in public-browsing mode
    • Kerneros is not available in public-browsing mode
    • Kiosks are single application only (no multiple browser tabs, no multiple application support)
    • We are not responsible for the content displayed by the kiosk device
    • We are not responsible for the physical security of the kiosk device

Prerequirements

  • Dedicated device running Windows 11 ENTERPRISE (Professional licence doesn't include the KIOSK mode)
    • Windows Professional licence can be upgraded to Windows Enterprise on request (to be specified in the ticket)
  • URL of the website that will run into the kiosk
  • White-list / Black-list of URLs / Domain which should be available to the kiosk
  • Kerberos: yes/no
  • Autologin: yes/no
  • Dedicated CERN account to run the kiosk (can be a local account, service account, secondary account)

How to check if my device run Windows 11 Enterprise ?

Open a command prompt and type the command winver.exe, a pop-up will appear showing which Windows version is running on the device.

How to request a dedicated account for the kiosk ?

For security reason, kiosks must run with a low privileges dedicated account. It can be a local account or a CERN service/secondary account which can be requested on the CERN account website

How to enable Autologin on the kiosk ?

First you need to download a collection of tools from Microsoft called "sysinternals-suite". This .zip archive contains a lot of tools very useful to power users, including one called "autologon.exe" - Save the .zip archive on a conveninent location of your hard-drive, and unpack it. - Locate autologon.exe and double-click on it to execute it - Enter the username of the account requested previously - Enter the domain cern if this is a CERN account or the hostname of your device if this is a local account - Enter the password of the corresponding account

How to request the conversion of my device to a kiosk?

Prior to request the conversion of your device to a kiosk, please take some time to analyse the limit of your future kiosk. - What is the URL the kiosk will open automatically ? - Should the address bar be locked or not ? - Should I need users to be logged-in with their CERN account to access my resources ? - Should I need users to authenticate automatically using Kerberos ticket delegation ? - Should I need to specify a white-list or a black-list of website which should be limited?

Once you have answered those questions and are ready to provide an answer: Easiest way to request a kiosk is to open a ticket at service-desk@cern.ch