User manual

Enabling the Username Hint Field in Horizon Client
In some environments, smart card users can use a single smart card certicate to authenticate to multiple
user accounts. Users enter their user name in the Username hint eld during smart card sign-in.
To make the Username hint eld appear on the Horizon Client login dialog box, you must enable the smart
card user name hints feature for the Connection Server instance in Horizon Administrator. The smart card
user name hints feature is supported only with Horizon 7 version 7.0.2 and later servers and agents. For
information about enabling the smart card user name hints feature, see the View Administration document.
If your environment uses an Unied Access Gateway appliance rather than a security server for secure
external access, you must congure the Unied Access Gateway appliance to support the smart card user
name hints feature. The smart card user name hints feature is supported only with Unied Access Gateway
2.7.2 and later. For information about enabling the smart card user name hints feature in
Unied Access Gateway, see the Deploying and Conguring Unied Access Gateway document.
N Horizon Client still supports single-account smart card certicates when the smart card user name
hints feature is enabled.
Touch ID Authentication Requirements
To use Touch ID for user authentication in Horizon Client, you must meet certain requirements.
Mac models
Any Mac model that supports Touch ID, for example, MacBook Pro.
Operating system
requirements
Add at least one ngerprint in the Touch ID seing.
Connection Server
requirements
n
Horizon 6 version 6.2 or a later release.
n
Enable biometric authentication in Connection Server. For information,
see the View Administration document.
n
The Connection Server instance must present a valid root-signed
certicate to Horizon Client.
Horizon Client
requirements
n
Set the certicate checking mode to Never connect to untrusted servers
or Warn before connecting to untrusted servers. For information about
seing the certicate checking mode, see “Seing the Certicate
Checking Mode for Horizon Client,” on page 26.
n
Enable Touch ID when you connect to the server. After you successfully
log in, your Active Directory credentials are stored securely on the Mac
client system. The Touch ID option is shown the rst time you log in and
does not appear after Touch ID is enabled.
You can use Touch ID with smart card authentication and as part of two-factor authentication with RSA
SecurID and RADIUS authentication. If you use Touch ID with smart card authentication, Horizon Client
connects to the server after you enter your PIN and the Touch ID login screen does not appear.
Using VMware Horizon Client for Mac
10 VMware, Inc.