User manual

3 Configure the default shortcuts.
Option Action
Enable a shortcut
Select the On check box next to the shortcut. When you enable a shortcut,
Horizon Client does not send the shortcut to the remote desktop or
application.
Disable a shortcut
Deselect the On check box next to the shortcut. When you disable a
shortcut, Horizon Client sends the shortcut to the remote desktop or
application.
NOTE The behavior of the shortcut on the remote desktop or application
can be unpredictable.
Restore the default settings
Click Restore Defaults. Any changes that you made are deleted and the
default settings are restored.
4 Close the Preferences dialog box.
Your changes take effect immediately. You do not need to restart open remote desktops or applications
to see the changes take effect.
Certificate Checking Modes for Horizon Client
Administrators and sometimes end users can configure whether client connections are rejected if any or
some server certificate checks fail.
Certificate checking occurs for SSL connections between Connection Server and Horizon Client. Certificate
verification includes the following checks:
n
Is the certificate intended for a purpose other than verifying the identity of the sender and encrypting
server communications? That is, is it the correct type of certificate?
n
Has the certificate expired, or is it valid only in the future? That is, is the certificate valid according to
the computer clock?
n
Does the common name on the certificate match the host name of the server that sends it? A mismatch
can occur if a load balancer redirects Horizon Client to a server that has a certificate that does not match
the host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IP
address rather than a host name in the client.
n
Is the certificate signed by an unknown or untrusted certificate authority (CA)? Self-signed certificates
are one type of untrusted CA.
To pass this check, the certificate's chain of trust must be rooted in the device's local certificate store.
NOTE For instructions about distributing a self-signed root certificate and installing it on Mac OS X client
systems, see the Advanced Server Administration document for the Mac OS X Server you are using, available
from the Apple Web site.
In addition to presenting a server certificate, Connection Server also sends a certificate thumbprint to
Horizon Client. The thumbprint is a hash of the certificate public key and is used as an abbreviation of the
public key. If Connection Server does not send a thumbprint, you see a warning that the connection is
untrusted.
If your administrator has allowed it, you can set the certificate checking mode. Select VMware Horizon
Client > Preferences from the menu bar. You have three choices:
n
Never connect to untrusted servers. If any of the certificate checks fails, the client cannot connect to the
server. An error message lists the checks that failed.
n
Warn before connecting to untrusted servers. If a certificate check fails because the server uses a self-
signed certificate, you can click Continue to ignore the warning. For self-signed certificates, the
certificate name is not required to match the server name you entered in Horizon Client.
Using VMware Horizon Client for Mac OS X
32 VMware, Inc.