Specifications

Table Of Contents
View Manager Administration Guide
106 VMware, Inc.
Thecertificateisexportedtothespecifiedlocation.Youmustnowcarryoutthe
proceduredescribedin“ToconfiguretheViewConnectionServertousethenew
certificate”onpage 104.Ensurethatthekeypassentryinthelocked.propertiesfile
correspondstothepasswordyouusedwhenexportingthecertificate.
Smart Card Authentication
Someorganizationsrequirepersonneltopassmultiplestagesofauthenticationbefore
allowingthemtoconnecttotheirsystems.Viewprovidessupportforhighsecurity
environmentsbyofferingsmartcardauthenticationofclientsessions.
Smartcardauthenticationworksbypresentingatrustedsetofclientcredentials—a
usercertificate—toViewConnectionServer.A
usercertificateisanencryptedsetof
authenticationcredentialsthatincludesthedigitalsignatureofthetrustedroot
CertificateAuthority(CA)thatissuedthecertificate.
Theusercertificateisstoredonthesmartcardandcanonlyberetrievedandpassedto
theserveraftertheuserhasverifiedtheirownership
byenteringapersonal
identificationnumber(PIN).Certificatesarethenauthenticatedbyusingapublickey
toverifytheincludeddigitalsignature;theexpecteddigitalsignatureiscontainedina
trustedCAcertificatethatisstoredonViewConnectionServer.
Thisfollowingsectionsdescribehowtoconfigureandenablethisfeature
onView
ConnectionServer.
Smart Card Hardware
EachclientsystemusingsmartcardauthenticationwillrequireViewClientanda
Windowscompatiblesmartcardreadertobeinstalled.
Inordertorecognizeandusethesmartcardhardware,productspecificapplication
driversmustbeinstalledonboththeclientsystemsandremotedesktops.Smartcard
profilescanvary
betweenvendors;refertothedocumentationthataccompaniesthe
smartcardreaderformoreinformationabouthowtodothis.
NOTESmartcardauthenticationisonlysupportedbyViewClient;itisnotsupported
byViewAdministrator,ViewPortal,orbyofflinedesktopinstancesaccessedthrough
ViewClientwithOfflineDesktop.