Installation and Setup Guide

n
If you plan to use embedded RSA SecurID software, verify that you have the correct CT-KIP URL and
activation code. See “Using Embedded RSA SecurID Software Tokens,” on page 15.
n
Congure the certicate checking mode for the SSL certicate presented by the server. See “Seing the
Certicate Checking Mode in Horizon Client,” on page 27.
n
If you plan to use Touch ID to authenticate, add at least one ngerprint in the Touch ID & Passcode
seing on the iOS device. For complete Touch ID authentication requirements, see “Touch ID
Authentication Requirements,” on page 10.
Procedure
1 If a VPN connection is required, turn on the VPN.
2 On the iOS device, tap the Horizon app icon.
3 Connect to a server.
Option Action
Connect to a new server
Enter the name of a server, enter a description (optional), and tap Add
Server.
Connect to an existing server
Tap the server icon on the Servers window.
Connections between Horizon Client and servers always use SSL. The default port for SSL connections
is 443. If the server is not congured to use the default port, use the format shown in this example:
view.company.com:1443.
4 If a smart card is required or optional, select the smart card certicate to use and enter your PIN.
If your smart card has only one certicate, that certicate is already selected. If there are many
certicates, you can scroll through the certicates.
5 If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, either type
your credentials or, if you plan to use an embedded RSA SecurID token, install an embedded token.
Option Action
Existing token
If you use a hardware authentication token or software authentication
token on a smart phone, enter your user name and passcode. The passcode
might include both a PIN and the generated number on the token.
Install software token
Tap External Token. In the Install Software Token dialog box, paste the CT-
KIP URL or CTFString URL that your administrator sent to you in email. If
the URL contains an activation code, you do not need to enter anything in
the Password or Activation Code text box.
6 If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials,
enter the next generated number on the token.
Do not enter your PIN, and do not enter the same generated number that you entered before. If
necessary, wait until a new number is generated.
If this step is required, it is required only when you mistype the rst passcode or when conguration
seings in the RSA server change.
7 (Optional) If the Enable Touch ID seing is available, turn on the seing to use Touch ID to
authenticate.
The Enable Touch ID seing is available only if biometric authentication is enabled on the server and
you have not previously authenticated with Touch ID.
Chapter 3 Managing Remote Desktop and Application Connections
VMware, Inc. 29