Administration

Set Up an Enterprise Certificate Authority
If you do not already have a certicate authority set up, you must add the Active Directory Certicate
Services (AD CS) role to a Windows server and congure the server to be an enterprise CA.
If you do already have an enterprise CA set up, verify that you are using the seings described in this
procedure.
You must have at least one enterprise CA, and VMware recommends that you have two for purposes of
failover and load balancing. The enrollment server you will create for True SSO communicates with the
enterprise CA. If you congure the enrollment server to use multiple enterprise CAs, the enrollment server
will alternate between the CAs available. If you install the enrollment server on the same machine that hosts
the enterprise CA, you can congure the enrollment server to prefer using the local CA. This conguration
is recommended for best performance.
Part of this procedure involves enabling non-persistent certicate processing. By default, certicate
processing includes storing a record of each certicate request and issued certicate in the CA database. A
sustained high volume of requests increases the CA database growth rate and could consume all available
disk space if not monitored. Enabling non-persistent certicate processing and can help reduce the CA
database growth rate and frequency of database management tasks.
Prerequisites
n
Create a Windows Server 2008 R2 or Windows Server 2012 R2 virtual machine.
n
Verify that the virtual machine is part of the Active Directory domain for the Horizon 7 deployment.
n
Verify that you are using an IPv4 environment. This feature is currently not supported in an IPv6
environment.
n
Verify that the system has a static IP address.
Procedure
1 Log in to the virtual machine operating system as an administrator and start Server Manager.
2 Select the seings for adding roles.
Operating System Selections
Windows Server 2012 R2
a Select Add roles and features.
b On the Select Installation Type page, select Role-based or feature-
based installation.
c On the Select Destination Server page, select a server.
Windows Server 2008 R2
a Select Roles in the navigation tree.
b Click Add Roles to start the Add Role wizard.
3 On the Select Server Roles page, select Active Directory  Services.
4 In the Add Roles and Features wizard, click Add Features, and leave the Include management tools
check box selected.
5 On the Select Features page, accept the defaults.
6 On the Select Role Services page, select  Authority.
7 Follow the prompts and nish the installation.
8 When installation is complete, on the Installation Progress page, click the  Active Directory
 Services on destination server link to open the AD CS Conguration wizard.
View Administration
70 VMware, Inc.