User manual

Table Of Contents
n
Does the common name on the certicate match the host name of the server that sends it? A mismatch
can occur if a load balancer redirects Horizon Client to a server that has a certicate that does not match
the host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IP
address rather than a host name in the client.
n
Is the certicate signed by an unknown or untrusted certicate authority (CA)? Self-signed certicates
are one type of untrusted CA.
To pass this check, the certicate's chain of trust must be rooted in the device's local certicate store.
N For information about distributing a self-signed root certicate and installing it on Mac OS X client
systems, see the Advanced Server Administration document for the Mac OS X Server that you are using, which
is available from the Apple Web site.
In addition to presenting a server certicate, Connection Server also sends a certicate thumbprint to
Horizon Client. The thumbprint is a hash of the certicate public key and is used as an abbreviation of the
public key. If Connection Server does not send a thumbprint, you see a warning that the connection is
untrusted.
If your administrator has allowed it, you can set the certicate checking mode. Select VMware Horizon
Client > Preferences from the menu bar. You have three choices:
n
Never connect to untrusted servers. If any of the certicate checks fails, the client cannot connect to the
server. An error message lists the checks that failed.
n
Warn before connecting to untrusted servers. If a certicate check fails because the server uses a self-
signed certicate, you can click Continue to ignore the warning. For self-signed certicates, the
certicate name is not required to match the server name you entered in Horizon Client.
n
Do not verify server identity . This seing means that no certicate checking occurs.
If the certicate checking mode is set to Warn, you can still connect to a Connection Server instance that uses
a self-signed certicate.
If an administrator later installs a security certicate from a trusted certicate authority, so that all certicate
checks pass when you connect, this trusted connection is remembered for that specic server. In the future,
if that server ever presents a self-signed certicate again, the connection fails. After a particular server
presents a fully veriable certicate, it must always do so.
Searching for Desktops or Applications
After you connect to a View server, the available desktops and applications on that server appear on the
desktop and application selection window. You can search for a particular desktop or application by typing
in the window.
When you begin to type, Horizon Client highlights the rst matching desktop or application name. To
connect to a highlighted desktop or application, press the Enter key. If you continue to type after the rst
match is found, Horizon Client continues to search for matching desktops and applications. If
Horizon Client nds multiple matching desktops or applications, you can press the Tab key to switch to the
next match. If you stop typing for two seconds and then begin to type again, Horizon Client assumes that
you are starting a new search.
Chapter 3 Managing Remote Desktop and Application Connections
VMware, Inc. 35