User manual

6 If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials,
enter the next generated number on the token.
Do not enter your PIN and do not enter the same generated number entered previously. If necessary,
wait until a new number is generated.
If this step is required, it is required only when you mistype the rst passcode or when conguration
seings in the RSA server change.
7 (Optional) If the Enable Touch ID seing is available, turn the seing on to use Touch ID to
authenticate.
The Enable Touch ID seing is available only if biometric authentication is enabled on the server and
you have not previously authenticated with Touch ID.
8 If you are prompted for a user name and password, supply Active Directory credentials.
a Type the user name and password of a user who is entitled to use at least one desktop or
application pool.
b Select a domain.
c (Optional) Tap to toggle the Remember this Password option to on if your administrator has
enabled this feature and if the server certicate can be fully veried.
d Tap Login.
If Touch ID is enabled and you are logging in for the rst time, your Active Directory credentials are
stored securely in the iOS devices's Keychain for future use.
9 If you are prompted for Touch ID authentication, place your nger on the Home buon.
10 (Optional) Tap  at the boom of the Horizon Client screen and tap Preferred Protocol to select
the display protocol to use.
VMware Blast provides beer baery life and is the best protocol for high-end 3D and mobile device
users. The default display protocol is PCoIP.
11 Tap a desktop or application to connect to it.
If you are using smart card authentication, you are not prompted to supply your PIN again, but the
login process takes longer than if you use Active Directory authentication.
If you are connecting to a session-based remote desktop, which is hosted on a Microsoft RDS host, and
if the desktop is already set to use the Microsoft RDP display protocol, you cannot connect immediately.
You are prompted to have the system log you o the remote operating system so that a connection can
be made with the PCoIP display protocol or the VMware Blast display protocol. VMware Blast requires
Horizon Agent 7.0 or later.
After you connect to a desktop or application for the rst time, a shortcut for the desktop or application is
saved to the Recent screen. The next time you want to connect to the remote desktop or application, you can
tap the shortcut instead of typing the server's name.
Setting the Certificate Checking Mode for Horizon Client
Administrators and sometimes end users can congure whether client connections are rejected if any or
some server certicate checks fail.
Certicate checking occurs for SSL connections between Connection Server and Horizon Client. Certicate
verication includes the following checks:
n
Is the certicate intended for a purpose other than verifying the identity of the sender and encrypting
server communications? That is, is it the correct type of certicate?
Chapter 3 Managing Remote Desktop and Application Connections
VMware, Inc. 27