Specifications

Table Of Contents
View Manager Administration Guide
110 VMware, Inc.
Using keytool to Create a Truststore
Fromacommandprompt,enterthefollowing:
keytool -import -alias <alias> -file <certificate>
-keystore <truststore_filename>
Inthiscommand,<alias>isaunique(caseinsensiti v e)nameforanewentityentryinthe
truststore(inthiscase,th ecertificateyouareabouttoimport), <certificate>isthe
nameoftherootCA certificateyoupreviouslyobtainedorexported,and<truststore
filename>isthenameofthetruststore
outputfile.
Enabling Smart Card Authentication on the Server
AlltypesofViewConnectionServersupportsmartcardauthenticationbutitis
recommendedthatonlysecurityserversareconfiguredtoallowsmartcardaccess.
If youaddsmartcardsupporttostandardorreplicaserversyouwillbepromptedto
selectacertificateeverytimeyouconnecttoViewAdministratoron
thosesystems.
To add smart card authentication to View Connection Server
1Copythetruststorefileyoupreviouslycreated(<truststore_filename>)tothe
followinglocationonViewConnectionServer:
C:\Program Files\VMware\VMware View\Server\sslgateway\conf\
2 Createatextfilecalledlocked.propertiesthatcontainsthefollowingentries:
trustKeyfile=<truststore filename>
trustStoretype=JKS
useCertAuth=true
ThevaluefortrustKeyfilemustcorrespondtothatof
<truststore filename>.
YoumustrestarttheViewConnectionServerserviceforthesechangestotakeeffect.
N
OTEYoumaybeaskedtocreateapasswordforthekeystore—thisisnotrequiredfor
futureprocedures,butyoushouldrememberitifyouwanttoaddadditional
certificatestothetruststoreatalaterdate.
NOTEInenvironmentswherenotalluserswillauthenticateusingasmartcarditis
alsorecommendedthatyouconfigureanew(oranadditional)securityserver
specificallyforthepurposeofclientsmartcardauthentication.
N
OTEOnceastandardorreplicaViewConnectionServerhasbeenconfigured,you
willbepromptedtochooseacertificatewhenloggingintoViewPortalortoView
Administratoronthatserver.