5.2

Procedure
1
On your View Connection Server or security server host, use the keytool utility to import the root
certificate into the server truststore file.
For example: keytool -import -alias
alias -file root_certificate -keystore truststorefile.key
In this command, alias is a unique case-insensitive name for a new entry in the truststore file,
root_certificate is the root certificate that you obtained or exported, and truststorefile.key is the name of the
truststore file that you are adding the root certificate to. If the file does not exist, it is created in the current
directory.
NOTE The keytool utility might prompt you to create a password for the truststore file. You will be asked
to provide this password if you need to add additional certificates to the truststore file at a later time.
2 Copy
the truststore file to the SSL gateway configuration folder on the View Connection Server or security
server host.
For example: install_directory \VMware\VMware View\Server\sslgateway\conf\ truststorefile.key
What to do next
Modify View Connection Server configuration properties to enable smart card authentication.
Modify View Connection Server Configuration Properties
To enable smart card authentication, you must modify View Connection Server configuration properties on
your View Connection Server or security server host.
Prerequisites
Add the root certificate for all trusted users to a server truststore file.
Procedure
1 Create or edit the locked.properties file in SSL gateway configuration folder on the View Connection
Server or security server host.
For example:
install_directory \VMware\VMware View\Server\sslgateway\conf\locked.properties
2 Add the trustKeyfile, trustStoretype, and useCertAuth properties to the locked.properties file.
a Set trustKeyfile to the name of your truststore file.
b Set trustStoretype to JKS.
c Set useCertAuth to true to enable certificate authentication.
3 Restart the View Connection Server service or security server service to make your changes take effect.
Example: locked.properties File
The file shown specifies that the root certificate for all trusted users is located in the file lonqa.key, sets the
trust store type to JKS, and enables certificate authentication.
trustKeyfile=lonqa.key
trustStoretype=JKS
useCertAuth=true
What to do next
If you configured smart card authentication for a View Connection Server instance, configure smart card
authentication settings in View Administrator. You do not need to configure smart card authentication settings
for a security server. Settings that are configured on a View Connection Server instance are also applied to a
paired security server.
VMware Horizon View Administration
160 VMware, Inc.