User`s guide

This feature is available for View Client 1.5 and later connecting to remote desktops through View
Connection Server 5.1 or later . Users can save their passwords if the policy is configured to allow it and
if Horizon View Client can fully verify the server certificate that View Connection Server presents. For
instructions about configuring this policy, see the topic called "Allow Users to Save Credentials" in the
chapter called "Setting Up User Authentication," in the VMware Horizon View Administration
documentation.
n
Verify that the desktop pool is set to use the PCoIP display protocol. See the VMware Horizon View
Administration documentation.
Smart Card Authentication Requirements
Client systems that use a smart card for user authentication must meet certain requirements.
NOTE Horizon View Client for Android 2.1 and later supports using smart cards with desktops that have
Windows XP, Windows Vista, or Windows 7 guest operating systems. VMware recommends using an
Android 4.0 or later operating system. The CPU architecture must be ARM. The following cards and reader
were tested: baiMobile Bluetooth Smart Card Reader and the following smart cards: CAC (Common Access
Card) Smart Card, ActivIdentity 64K V2C Java Card, Gemalto ID Prime .NET (formerly .NET V2+ Orange) .
Each client system that uses a smart card for user authentication must have the following software and
hardware:
n
Horizon View Client
n
A Windows-compatible smart card reader
n
Smart card middleware
For example, the app on the Android device must support the baiMobile 3000MP reader. One such app
is Android PC/SC-Lite Service, whose tile name on Android devices is baiMobile PC/SC. Otherwise,
although you will be able to pair the Bluetooth card reader with the Android device, you will not be
able to connect them. To make a connection, the app sends a connection request to the reader, and you
must tap the OK button on the reader to establish the Bluetooth connection.
n
Product-specific application drivers
You must also install product-specific application drivers on the remote desktops. For example, the
following drivers were tested: ActiveClient6.2.0.50, ActivClient_7.0.1, and Gemalto.MiniDriver.NET.inf.
Horizon View supports smart cards and smart card readers that use a PKCS#11 or Microsoft CryptoAPI
provider. You can optionally install the ActivIdentity ActivClient software suite, which provides tools for
interacting with smart cards.
Users that authenticate with smart cards must have a smart card, and each smart card must contain a user
certificate.
To install certificates on a smart card, you must set up a computer to act as an enrollment station. This
computer must have the authority to issue smart card certificates for users, and it must be a member of the
domain you are issuing certificates for.
IMPORTANT When you enroll a smart card, you can choose the key size of the resulting certificate. To use
smart cards with local desktops, you must select a 1024-bit or 2048-bit key size during smart card
enrollment. Certificates with 512-bit keys are not supported.
The Microsoft TechNet Web site includes detailed information on planning and implementing smart card
authentication for Windows systems.
Chapter 1 Setup and Installation
VMware, Inc. 9