User manual

Table Of Contents
3 After the pools are created, recomposed, or upgraded to use View Agent with the HTML Access
option, use Horizon Client to log in to a desktop or application.
With this step, before you aempt to use HTML Access, you verify that the pool is working correctly.
4 Open a supported browser and enter a URL that points to your View Connection Server instance.
For example:
https://horizon.mycompany.com
Be sure to use https in the URL.
5 On the Web page that appears, click VMware Horizon HTML Access and log in as you would with the
Horizon Client software.
6 On the desktop and application selection page that appears, click an icon to connect.
You can now access a remote desktop or application from a Web browser when you are using a client device
that does not or cannot have Horizon Client software installed in its operating system.
What to do next
For added security, if your security policies require that the Blast agent on the remote desktop uses an SSL
certicate from a certicate authority, see “Congure HTML Access Agents to Use New SSL Certicates,” on
page 12.
Configure HTML Access Agents to Use New SSL Certificates
To comply with industry or security regulations, you can replace the default SSL certicates that are
generated by the HTML Access Agent with certicates that are signed by a Certicate Authority (CA).
When you install the HTML Access Agent on View desktops, the HTML Access Agent service creates
default, self-signed certicates. The service presents the default certicates to browsers that use
HTML Access to connect to View.
N In the guest operating system on the desktop virtual machine, this service is called the VMware Blast
service.
To replace the default certicates with signed certicates that you obtain from a CA, you must import a
certicate into the Windows local computer certicate store on each View desktop. You must also set a
registry value on each desktop that allows the HTML Access Agent to use the new certicate.
If you replace the default HTML Access Agent certicates with CA-signed certicates, VMware
recommends that you congure a unique certicate on each desktop. Do not congure a CA-signed
certicate on a parent virtual machine or template that you use to create a desktop pool. That approach
would result in hundreds or thousands of desktops with identical certicates.
Procedure
1 Add the Certicate Snap-In to MMC on a View Desktop on page 13
Before you can add certicates to the Windows local computer certicate store, you must add the
Certicate snap-in to the Microsoft Management Console (MMC) on the View desktops where the
HTML Access Agent is installed.
2 Import a Certicate for the HTML Access Agent into the Windows Certicate Store on page 13
To replace a default HTML Access Agent certicate with a CA-signed certicate, you must import the
CA-signed certicate into the Windows local computer certicate store. Perform this procedure on
each desktop where the HTML Access Agent is installed.
Using HTML Access
12 VMware, Inc.