User manual

Connecting to Remote Desktops and
Applications 2
You can use Horizon Client to connect to remote desktops and applications.
This chapter includes the following topics:
n
“Seing the Certicate Checking Mode in Horizon Client,” on page 9
n
“Connect to a Remote Desktop or Application,” on page 10
n
“Connect to Published Applications Using Unauthenticated Access,” on page 11
n
“Log O or Disconnect,” on page 12
Setting the Certificate Checking Mode in Horizon Client
You can determine whether client connections are rejected if any or some server certicate checks fail by
conguring a seing in Horizon Client.
N At some companies, an administrator might set the default certicate verication mode and prevent
end users from changing it in Horizon Client.
Certicate checking occurs for SSL connections between the server and Horizon Client. Certicate
verication includes the following checks:
n
Is the certicate intended for a purpose other than verifying the identity of the sender and encrypting
server communications? That is, is it the correct type of certicate?
n
Has the certicate expired, or is it valid only in the future? That is, is the certicate valid according to
the computer clock?
n
Does the common name on the certicate match the host name of the server that sends it? A mismatch
can occur if a load balancer redirects Horizon Client to a server that has a certicate that does not match
the host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IP
address rather than a host name in the client.
n
Is the certicate signed by an unknown or untrusted certicate authority (CA)? Self-signed certicates
are one type of untrusted CA.
To pass this check, the certicate's chain of trust must be rooted in the device's local certicate store.
In addition to presenting a server certicate, the server also sends a certicate thumbprint to Horizon Client.
The thumbprint is a hash of the certicate public key and is used as an abbreviation of the public key. If the
server does not send a thumbprint, you see a warning that the connection is untrusted.
VMware, Inc.
9