User manual

Table Of Contents
Table 314. Security Settings
Registry Setting Description and Valid Values
CertCheckMode
Specifies the certificate checking mode.
n
0 implements Do not verify server identity certificates.
n
1 implements Warn before connecting to untrusted servers.
n
2 implements Never connect to untrusted servers.
SSLCipherList
Configures the cipher list to restrict the use of certain cryptographic algorithms and protocols
before establishing an encrypted SSL connection. The cipher list consists of one or more
cipher strings separated by colons.
NOTE All cipher strings are case-sensitive.
If this feature is enabled, the default value for Horizon Client 3.3 and later is
TLSv1:TLSv1.1:AES:!aNULL:@STRENGTH. The value for Horizon Client 3.2 and earlier is
SSLv3:TLSv1:TLSv1.1:AES:!aNULL:@STRENGTH.
That means that In Horizon Client 3.3 and later, TLS v1.0 and TLS v1.1 are enabled. (SSL v2.0
and v3.0, and TLS v1.2 are disabled.) In Horizon Client 3.2 and earlier, SSL v3.0 is also
enabled. (SSL v2.0 and TLS v1.2 are disabled.)
Cipher suites use 128- or 256-bit AES, remove anonymous DH algorithms, and then sort the
current cipher list in order of encryption algorithm key length.
Reference link for the configuration: http://www.openssl.org/docs/apps/ciphers.html
Using VMware Horizon Client for Windows
52 VMware, Inc.