Administration

2 On the Security Servers tab, select a security server, select Prepare for Upgrade or Reinstallation from
the More Commands drop-down menu, and click OK.
3 On the Connection Servers tab, select the Connection Server instance that you want to pair with the
security server, select Specify Security Server Pairing Password from the More Commands drop-
down menu, type a password, and click OK.
4 Install the security server again.
If you intend to remove the security server entry from your Horizon 7 environment, run the vdmadmin -S
command.
For example: vdmadmin -S -r -s security_server_name
Troubleshooting View Server Certificate Revocation Checking
A security server or a View Connection Server instance that is used for secure Horizon Client connections
might show as red in View Administrator if certicate revocation checking cannot be performed on the
server's SSL certicate.
Problem
A security server or View Connection Server icon is red on the View Administrator dashboard. The View
server's status shows the following message: Server's certificate cannot be checked.
Cause
Certicate revocation checking might fail if your organization uses a proxy server for Internet access, or if a
View Connection Server instance cannot reach the servers that provide revocation checking because of
rewalls or other controls.
A View Connection Server instance performs certicate revocation checking on its own certicate and on
those of the security servers paired to it. By default, the VMware Horizon View Connection Server service is
started with the LocalSystem account. When it runs under LocalSystem, a View Connection Server instance
cannot use the proxy seings congured in Internet Explorer to access the CRL DP URL or OCSP responder
to determine the revocation status of the certicate.
You can use Microsoft Netshell commands to import the proxy seings to the View Connection Server
instance so that the server can access the certicate revocation checking sites on the Internet.
Solution
1 On the View Connection Server computer, open a command-line window with the Run as
administrator seing.
For example, click Start, type cmd, right-click the cmd.exe icon, and select Run as administrator.
2 Type netsh and press Enter.
3 Type winhttp and press Enter.
4 Type show proxy and press Enter.
Netshell shows that the proxy was set to DIRECT connection. With this seing, the View Connection
Server computer cannot connect to the Internet if a proxy is in use in your organization.
5 Congure the proxy seings.
For example, at the netsh winhttp> prompt, type import proxy source=ie.
The proxy seings are imported to the View Connection Server computer.
6 Verify the proxy seings by typing show proxy.
7 Restart the VMware Horizon View Connection Server service.
View Administration
204 VMware, Inc.