User manual

Table Of Contents

Connecting to Remote Desktops and

Applications 3

You can use Horizon Client to connect to remote desktops and applications.

This chapter includes the following topics:

“Seing the Certicate Checking Mode in Horizon Client,” on page 9

“Connect to a Remote Desktop or Application,” on page 10

“Disconnecting From a Remote Desktop or Application,” on page 12

“Log O From a Remote Desktop,” on page 12

Setting the Certificate Checking Mode in Horizon Client

You can determine whether client connections are rejected if any or some server certicate checks fail by

conguring a seing in Horizon Client.

Certicate checking occurs for SSL connections between the server and Horizon Client. Certicate

verication includes the following checks:

Is the certicate intended for a purpose other than verifying the identity of the sender and encrypting

server communications? That is, is it the correct type of certicate?

Has the certicate expired, or is it valid only in the future? That is, is the certicate valid according to

the computer clock?

Does the common name on the certicate match the host name of the server that sends it? A mismatch

can occur if a load balancer redirects Horizon Client to a server that has a certicate that does not match

the host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IP

address rather than a host name in the client.

Is the certicate signed by an unknown or untrusted certicate authority (CA)? Self-signed certicates

are one type of untrusted CA.

To pass this check, the certicate's chain of trust must be rooted in the device's local certicate store.

To set the certicate checking mode, start Horizon Client and tap  at the boom of the

Horizon Client window and tap Server   Mode. You have three choices:

Never connect to untrusted servers. If any of the certicate checks fails, the client cannot connect to the

server. An error message lists the checks that failed.

Warn before connecting to untrusted servers. If a certicate check fails because the server uses a self-

signed certicate, you can click Continue to ignore the warning. For self-signed certicates, the

certicate name is not required to match the server name you entered in Horizon Client.

Do not verify server identity . This seing means that no certicate checking occurs.

VMware, Inc.