5.2

2 Select a certificate to use for smart card authentication.
The
signing chain lists a series a signing authorities. The best certificate to select is usually the intermediate
authority above the user certificate.
3 Verify that the authority does not sign other certificates on the card.
What to do next
Add the root certificate to a server truststore file. See “Add the Root Certificate to a Server Truststore File,” on
page 159.
Export a Root Certificate from a User Certificate
If you have a CA-signed user certificate or a smart card that contains one, you can export the root certificate if
it is trusted by your system.
Procedure
1 If the user certificate is on a smart card, insert the smart card into the reader to add the user certificate to
your personal store.
If the user certificate does not appear in your personal store, use the reader software to export the user
certificate to a file.
2 In Internet Explorer, select Tools > Internet Options.
3 On the Content tab, click Certificates.
4 On the Personal tab, select the certificate you want to use and click View.
If the user certificate does not appear on the list, click Import to manually import it from a file. After the
certificate is imported, you can select it from the list.
5 On the Certification Path tab, select the certificate at the top of the tree and click View Certificate.
If the user certificate is signed as part of a trust hierarchy, the signing certificate might be signed by another
higher-level certificate. Select the parent certificate (the one that actually signed the user certificate) as
your root certificate.
6 On the Details tab, click Copy to File.
The Certificate Export Wizard appears.
7 Click Next > Next and type a name and location for the file that you want to export.
8 Click Next to save the file as a root certificate in the specified location.
What to do next
Add the root certificate to a server truststore file.
Add the Root Certificate to a Server Truststore File
You must add the root certificate for all trusted users to a server truststore file so that View Connection Server
instances and security servers can authenticate smart card users and connect them to their View desktops.
Prerequisites
n
Obtain the root certificate from the CA that signed the certificates on the smart cards presented by your
users. See “Obtain the Root Certificate from the CA,” on page 158.
n
Verify that the keytool utility is added to the system path on your View Connection Server or security
server host. See the VMware Horizon View Installation document for more information.
Chapter 7 Setting Up User Authentication
VMware, Inc. 159