Administration

The Enrollment Service Client certicate is automatically created when a Horizon 7 or later connection
server is installed and the VMware Horizon View Connection Server service starts. The certicate is
distributed through View LDAP to other Horizon 7 connection servers that get added to the cluster later.
The certicate is then stored in a custom container (VMware Horizon View Certificates\Certificates) in
the Windows Certicate Store on the computer.
Prerequisites
Verify that you have a Horizon 7 or later connection server. For installation instructions, see View Installation.
For upgrade instructions, see View Upgrades.
I Customers can use their own certicates for pairing, rather than using the self-generated
certicate created by the connection server. To do so, place the preferred certicate (and the associated
private key) in the custom container (VMware Horizon View Certificates\Certificates) in the Windows
Certicate Store on the connection server machine. You must then set the friendly name of the certicate to
vdm.ec.new, and restart the server. The other servers in the cluster will fetch this certicate from LDAP. You
can then perform the steps in this procedure.
Procedure
1 On one of the connection server machines in the cluster, add the Certicates snap-in to MMC:
a Open the MMC console and select File > Add/Remove Snap-in
b Under Available snap-ins, select  and click Add.
c In the Certicates snap-in window, select Computer account, click Next, and click Finish.
d In the Add or Remove Snap-in window, click OK.
2 In the MMC console, in the left pane, expand the VMware Horizon View  folder and select
the  folder.
3 In the right pane, right-click the certicate le with the friendly name vdm.ec, and select All Tasks >
Export.
4 In the Certicate Export wizard, accept the defaults, including leaving the No, do not export the private
key radio buon selected.
5 When you are prompted to name the le, type a le name such as EnrollClient, for Enrollment Service
Client certicate, and follow the prompts to nish exporting the certicate.
What to do next
Import the certicate into the enrollment server. See “Import the Enrollment Service Client Certicate on the
Enrollment Server,” on page 75.
Import the Enrollment Service Client Certificate on the Enrollment Server
To complete the pairing process, you use the MMC Certicates snap-in to import the Enrollment Service
Client certicate into the enrollment server. You must perform this procedure on every enrollment server.
Prerequisites
n
Verify that you have a Horizon 7 or later enrollment server. See “Install and Set Up an Enrollment
Server,” on page 73.
Chapter 5 Authenticating Users Without Requiring Credentials
VMware, Inc. 75