Administration

Table 2‑2. General Global Settings for Client Sessions (Continued)
Setting Description
Hide server information in client
user interface
Enable this security seing to hide server URL information in Horizon Client 4.4
or later.
Hide domain list in client user
interface
Enable this security seing to hide the Domain drop-down menu in Horizon
Client 4.4 or later.
When users log in to a Connection Server instance for which the Hide domain
list in client user interface global seing is enabled, the Domain drop-down
menu is hidden in Horizon Client and users provide domain information in the
Horizon Client User name text box. For example, users must enter their user
name in the format domain\username or username@domain.
I If you enable the Hide server information in client user interface
and Hide domain list in client user interface seings and select two-factor
authentication (RSA SecureID or RADIUS) for the Connection Server instance, do
not enforce Windows user name matching. Enforcing Windows user name
matching will prevent users from being able to enter domain information in the
user name text box and login will always fail. For more information, see the
topics about two-factor authentication in the View Administration document.
Global Security Settings for Client Sessions and Connections
Global security seings determine whether clients are reauthenticated after interruptions, message security
mode is enabled, and IPSec is used for security server connections.
SSL is required for all Horizon Client connections and View Administrator connections to View. If your
View deployment uses load balancers or other client-facing, intermediate servers, you can o-load SSL to
them and then congure non-SSL connections on individual View Connection Server instances and security
servers. See “O-load SSL Connections to Intermediate Servers,” on page 35.
Table 2‑3. Global Security Settings for Client Sessions and Connections
Setting Description
Reauthenticate secure tunnel
connections after network
interruption
Determines if user credentials must be reauthenticated after a network interruption
when Horizon clients use secure tunnel connections to remote desktops.
When you select this seing, if a secure tunnel connection is interrupted,
Horizon Client requires the user to reauthenticate before reconnecting.
This seing oers increased security. For example, if a laptop is stolen and moved
to a dierent network, the user cannot automatically gain access to the remote
desktop without entering credentials.
When this seing is not selected, the client reconnects to the remote desktop
without requiring the user to reauthenticate.
This seing has no eect when the secure tunnel is not used.
Message security mode Determines the security mechanism used for sending JMS messages between
components
n
When the mode is set to Enabled, signing and verication of the JMS messages
passed between View components takes place.
n
When the mode is set to Enhanced, security is provided by mutually
authenticated SSL JMS connections and access control on JMS topics.
For details, see “Message Security Mode for View Components,” on page 30.
For new installations, by default, message security mode is set to Enhanced. If you
upgrade from a previous version, the seing used in the previous version is
retained.
Chapter 2 Configuring View Connection Server
VMware, Inc. 29