Specifications

Table Of Contents
VMware, Inc. 109
Chapter 5 Client Management
5Intheleftpane,expandComputerConfiguration>WindowsSettings>Security
Settings>PublicKeyPolicy.
6RightclickTrustedRootCertificationAuthoritiesandselectImport.
7Followtheinstructionsinthewizardtoimportthecertificate.ClickOK.
8ClosetheGroupPolicywindow.
Byaddingthecertificatetothelistof
trustedroots,youareensuringthatallsystemsin
thedomainhaveacopyofthecertificateintheirtrustedrootstore.
To add the third-party root CA to the NTAuth store in Active Directory
FromthecommandpromptontheActiveDirectoryserver,enterthefollowing:
certutil –dspublish –f <certificate> NTAuthCA
Inthiscommand,<certificate>isthepathtothethirdpartyrootCAcertificate.
BypublishingthecertificatetotheEnterpriseNTAuthstore,youareconfirmingthat
theCAistrustedtoissuecertificatesofthistype.
Creating a Truststore
AtruststoreisakeystorethatisusedbyViewwhenmakingdecisionsaboutwhich
clientstotrust.InorderforViewConnectionServertoauthenticatesmartcardusers
andconnectthemtotheirdesktops,therootcertificateforalltrustedusersmustfirstbe
addedtotheservertruststore.
A
truststorecanbecreatedbyusingthekeytoolutilityprovidedwiththeJava
RuntimeEnvironment(JRE)instancethataccompaniesViewConnectionServer.
To add the JRE utilities to your command path
1PresstheWindowskey+BreaktodisplaytheWindowsSystemPropertiesdialog
box.
2UndertheAdvancedtab,clickonEnvironmentVariables.
3IntheSystemvariablesgroup,selectPATHandthen
clickEdit.
4IntheVariablevaluefieldaddthepathtotheJREinstallationdirectory:
%ProgramFiles%\VMware\VMware View\Server\jre\bin
Ensurethatthisentryisdelimitedwithasemicolon(;)fromanyotherentries
presentinthefield.
5ClickOK>OK>OKtoclosetheWindowsSystemPropertiesdialogbox.