User manual

Table 2‑2. Horizon Client Command-Line Options and Configuration File Keys (Continued)
Configuration Key Command-Line Option Description
view.sslCipherString --sslCipherString=
Congures the cipher list to restrict the use of certain
cryptographic algorithms before establishing an
encrypted SSL connection.
For a list of cipher strings, see
hp://www.openssl.org/docs/apps/ciphers.html .
The default for Horizon Client is "!aNULL:kECDH
+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH
+AES:ECDH+AES:RSA+AES".
view.sslProtocolString --sslProtocolString=
Congures the cipher list to restrict the use of certain
cryptographic protocols before establishing an
encrypted SSL connection.
The supported protocols are SSLv3/SSLv3.0,
TLSv1.0/TLSv1, TLSv1.1, and TLSv1.2. The cipher list
consists of one or more protocol strings separated by
colons. The strings are not case-sensitive.
The default is "TLSv1.0:TLSv1.1:TLSv1.2".
view.sslVerificationMode
None Sets the server certicate verication mode.
Specify "1" to reject connections when the certicate
fails any of the verication checks, "2" to warn but
allow connections that use a self-signed certicate, or
"3" to allow unveriable connections. If you specify
"3" no verication checks are performed. Default is "2".
view.usbAutoConnectAtStartup —-usbAutoConnectAtStartUp=
Automatically connects USB devices when
Horizon Client starts.
Specify "TRUE" or "FALSE". Default is "TRUE".
view.usbAutoConnectOnInsert -—usbAutoConnectOnInsert=
Automatically connects USB devices when a USB
device is inserted.
Specify "TRUE" or "FALSE". Default is "TRUE".
view.xfreerdpOptions --xfreerdpOptions=
(Available if you use the Microsoft RDP display
protocol) Species command-line options to forward to
the xfreerdp program. For information about
xfreerdp options, see the xfreerdp documentation.
N To use FreeRDP, you must have the correct
version of FreeRDP installed, along with any applicable
patches. For more information, see “Install and
Congure FreeRDP,” on page 44.
None
--enableNla
(Applies if you are using FreeRDP for RDP
connections) Enables network-level authentication
(NLA). You must use this option in conjunction with
the --ignore-certificate option. For more
information, see “Using FreeRDP for RDP
Connections,” on page 42.
NLA is turned o by default if you are using FreeRDP.
You must have the correct version of FreeRDP installed,
along with any applicable patches. For more
information, see “Install and Congure FreeRDP,” on
page 44.
N The rdesktop program does not support NLA.
Chapter 2 Configuring Horizon Client for End Users
VMware, Inc. 33