Administration

2 Issue an enrollment agent certicate:
a In the Certicates console, expand the console root tree, right-click the Personal folder, and select
All Tasks > Request New .
b In the Certicate Enrollment wizard, accept the defaults until you get to the Request Certicates
page.
c On the Request Certicates page, select the Enrollment Agent (Computer) check box and click
Enroll.
d Accept the defaults on the other wizard pages, and click Finish on the last page.
In the MMC console, if you expand the Personal folder and select  in the left pane, you will
see a new certicate listed in the right pane.
3 Install the enrollment server:
a Download the View Connection Server installer le from the VMware download site at
hps://my.vmware.com/web/vmware/downloads.
Under Desktop & End-User Computing, select the VMware Horizon 7 download, which includes
View Connection Server.
The installer lename is VMware-viewconnectionserver-x86_64-y.y.y-xxxxxx.exe, where xxxxxx is
the build number and y.y.y is the version number.
b Double-click the installer le to start the wizard, and follow the prompts until you get to the
Installation Options page.
c On the Installation Options page, select Horizon 7 Enrollment Server and click Next.
d Follow the prompts to nish the installation.
You must enable the incoming connections on Port 32111 (TCP) for enrollment server to be functional.
The installer opens the port by default during installation.
What to do next
n
If you installed the enrollment server on the same machine that hosts an enterprise CA, congure the
enrollment server to prefer using the local CA. See “Enrollment Server Conguration Seings,” on
page 84.
n
If you install and set up more than one enrollment server, congure connection servers to enable load
balancing between the enrollment servers. See “Connection Server Conguration Seings,” on
page 85.
n
Pair connection servers with enrollment servers. See “Export the Enrollment Service Client Certicate,”
on page 74.
Export the Enrollment Service Client Certificate
To accomplish pairing, you can use the MMC Certicates snap-in to export automatically generated, self-
signed Enrollment Service Client certicate from one connection server in the cluster. This certicate is
called a client certicate because the connection server is a client of the Enrollment Service provided by the
enrollment server.
Enrollment Service must trust the VMware Horizon View Connection Server when it prompts the
Enrollment Servers to issue the short lived certicates for Active Directory users. Hence, the VMware
Horizon View Connection Server clusters or pods must be paired with Enrollment Servers.
View Administration
74 VMware, Inc.