User manual

Instructions to End Users
When you create a CTFString URL or CT-KIP URL to send to end users, you can generate a URL with or
without a password or activation code. You send this URL to end users in an email that must include the
following information:
n
Instructions for navigating to the Install Software Token dialog box.
Tell end users to tap External Token in the Horizon Client dialog box that prompts them for RSA
SecurID credentials when they connect to a Connection Server instance.
n
CTFString URL or CT-KIP URL in plain text.
If the URL has formaing on it, end users will get an error message when they try to use it in
Horizon Client.
n
Activation code, if the CT-KIP URL that you create does not already include the activation code.
End users must enter this activation code in a text eld of the dialog box.
n
If the CT-KIP URL includes an activation code, tell end users that they need not enter anything in the
Password or Activation Code text box in the Install Software Token dialog box.
Configure Advanced TLS/SSL Options
You can select the security protocols and cryptographic algorithms that are used to encrypt communications
between Horizon Client and Horizon servers and between Horizon Client and the agent in the remote
desktop.
By default, TLSv1.0, TLSv1.1, and TLSv1.2 are enabled. SSL v2.0 and 3.0 are not supported. The default
cipher control string is "!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH
+AES:RSA+AES".
If you congure a security protocol for Horizon Client that is not enabled on the Horizon server to which the
client connects, a TLS/SSL error occurs and the connection fails.
For information about conguring the security protocols that are accepted by Connection Server instances,
see the View Security document.
Procedure
1 Tap the  (gear) icon in the upper-right corner of the Horizon Client window and tap Security
options.
2 Tap Advanced SSL Options.
3 Make sure that Use Default  is unchecked.
4 To enable or disable a security protocol, tap the check box next to the security protocol name.
5 To change the cipher control string, replace the default string.
6 (Optional) If you need to revert to the default seings, tap to select the Use Default  option.
7 Tap OK to save your changes.
Your changes take eect the next time you connect to the server.
Using VMware Horizon Client for Chrome OS
10 VMware, Inc.