Specifications

Table Of Contents
View Manager Administration Guide
100 VMware, Inc.
Bydefault,inViewConnectionServerwhenaclientvisitsasecurepagesuchas
View Administratortheyarepresentedwiththeselfsignedcertificateprovidedwith
theapplication.Byreadingtheservercertificatetheusercandecideiftheserverisa
trustedsource,andthenaccept(orreject)theconnection.
ThecertificatecanbesignedbyaCertificateAuthority(CA)—atrustedthirdpartywho
guaranteestheidentityofthecertificateanditscreator.
TocreateyourowncertificateforViewConnectionServerdooneofthefollowing:
Createaselfsignedcertificateforyoursystemusingthekeytoolutilityprovided
withtheJavaRuntimeEnvironment(JRE)instancethataccompaniesView
ConnectionServer.Selfsignedcertificatesareusergeneratedcertificatesthathave
notbeenofficiallyregisteredwithanytrustedCA,andarethereforenot
guaranteedtobeauthentic.
Createacertificateandthensendacertificatesigningrequest(CSR)thatcontains
yourcertificatedetailstoaCA.Afterconductingsomechecksonthecompanyor
individualmakingtheapplication,theCAsignstherequestandencryptsitwith
theirprivatekey.Thevalidcertificateisreturnedandisthen
insertedintoa
keystoreonViewConnectionServer.
ClientsconnectingtoViewConnectionServerarepresentedwithyourcertificate.Ifthe
certificateisselfsignedbutacceptedbytheuser,orsignedbyaCAthatistrustedby
theclientbrowser,theclientusesthepublickeycontainedwithinthe
certificateto
encryptthedataitsendstoViewConnectionServer.Typically ,thecertificatefortheCA
itselfisembeddedinthebrowserorislocatedinatrusteddatabasethatisaccessibleby
theclient.
Afteracceptingthecertificate,theclientrespondsbysendingasecretkey,whichis
encrypted
withtheserverspublickey.Thiskeyisusedtoencrypttrafficbetweenthe
clientandtheViewConnectionServerinstanceorsecurityserver.
Bydefault,ViewConnectionServerincludesaselfsignedSSLcertificatethatclients
canusetocreatesecuresessionswhentheyconnect.Thiscertificateisnot
trustedby
clientsanddoesnothavethecorrectnamefortheservice,butitdoesallowconnectivity.
N
OTEItisstronglyrecommendedthatyoucontinuetousethedefaultcertificate
providedwithViewConnectionServeruntilyouarereadytocreateyourown
certificateandgetitsignedbyaCA.
N
OTECertificatesareonlyrequiredforstandard,replica,orsecurityserversthat
receivedirectconnectionsfromtheirclients.Ifyouareusingasecurityserverasyour
clientfacingsystem,onlythisserverwillrequireacertificate.