Administration

5 When you are prompted to name the le, type a le name such as EnrollClient, for Enrollment Service
Client certicate, and follow the prompts to nish exporting the certicate.
What to do next
Import the certicate into the enrollment server. See “Import the Enrollment Service Client Certicate on the
Enrollment Server,” on page 84.
Import the Enrollment Service Client Certificate on the Enrollment Server
To complete the pairing process, you use the MMC Certicates snap-in to import the Enrollment Service
Client certicate into the enrollment server. You must perform this procedure on every enrollment server.
Prerequisites
n
Verify that you have a Horizon 7 or later enrollment server. See “Install and Set Up an Enrollment
Server,” on page 81.
n
Verify that you have the correct certicate to import. You can use either your own certicate or the
automatically generated, self-signed Enrollment Service Client certicate from one connection server in
the cluster, as described in “Export the Enrollment Service Client Certicate,” on page 83.
I To use your own certicates for pairing, place the preferred certicate (and the associated
private key) in the custom container (VMware Horizon View Certificates\Certificates) in the
Windows Certicate Store on the connection server machine. You must then set the friendly name of the
certicate to vdm.ec.new, and restart the server. The other servers in the cluster will fetch this certicate
from LDAP. You can then perform the steps in this procedure.
If you have your own client certicate, the certicate that you must copy to the enrollment server is the
root certicate used to generate the client certicate.
Procedure
1 Copy the appropriate certicate le to the enrollment server machine.
To use the automatically generated certicate, copy the Enrollment Service Client certicate from the
connection server. To use your own certicate, copy the root certicate that was used to generate the
client certicate.
2 On the enrollment server, add the Certicates snap-in to MMC:
a Open the MMC console and select File > Add/Remove Snap-in
b Under Available snap-ins, select  and click Add.
c In the Certicates snap-in window, select Computer account, click Next, and click Finish.
d In the Add or Remove Snap-in window, click OK.
3 In the MMC console, in the left pane, right-click the VMware Horizon View Enrollment Server Trusted
Roots folder and select All Tasks > Import.
4 In the Certicate Import wizard, follow the prompts to browse to and open the EnrollClient certicate
le.
5 Follow the prompts and accept the defaults to nish importing the certicate.
6 Right-click the imported certicate and add a friendly name such as vdm.ec (for Enrollment Client
certicate).
VMware recommends you use a friendly name that identies the View cluster, but you can use any
name that helps you easily identify the client certicate.
View Administration
84 VMware, Inc.