5.2

Smart Card Certificate Revocation Checking Properties
You
set values in the locked.properties file to enable and configure smart card certificate revocation checking.
Table 7-1 lists the locked.properties file properties for certificate revocation checking.
Table 7-1. Properties for Smart Card Certificate Revocation Checking
Property Description
enableRevocationChecking
Set this property to true to enable certificate revocation
checking.
When this property is set to false, certificate revocation
checking is disabled and all other certificate revocation
checking properties are ignored.
The default value is false.
crlLocation
Specifies the location of the CRL, which can be either a URL
or a file path.
If you do not specify a URL, or if the specified URL is invalid,
View uses the list of CRLs on the user certificate if
allowCertCRLs is set to true or is not specified.
If View cannot access a CRL, CRL checking fails.
allowCertCRLs
When this property is set to true, View extracts a list of CRLs
from the user certificate.
The default value is true.
enableOCSP
Set this property to true to enable OCSP certificate
revocation checking.
The default value is false.
ocspURL
Specifies the URL of an OCSP Responder.
ocspResponderCert
Specifies the file that contains the OCSP Responder's signing
certificate. View uses this certificate to verify that the OCSP
Responder's responses are genuine.
ocspSendNonce
When this property is set to true,
a nonce is sent with OCSP
requests to prevent repeated responses.
The default value is false.
ocspCRLFailover
When this property is set to true, View uses CRL checking
if OCSP certificate revocation checking fails.
The default value is true.
Using Two-Factor Authentication
You can configure a View Connection Server instance so that users are required to use RSA SecurID
authentication or RADIUS (Remote Authentication Dial-In User Service) authentication.
With Horizon View 5.1 and later releases, RADIUS support has been added to the two-factor authentication
feature included with Horizon View:
n
RADIUS support offers a wide range of alternative two-factor token-based authentication options.
n
Horizon
View now provides an open standard extension interface to allow third-party solution providers
to integrate advanced authentication extensions into Horizon View.
Because two-factor authentication solutions such as RSA SecurID and RADIUS work with authentication
managers, installed on separate servers, you must have those servers configured and accessible to the View
Connection Server host. For example, if you use RSA SecurID, the authentication manager would be RSA
Authentication Manager. If you have RADIUS, the authentication manager would be a RADIUS server.
VMware Horizon View Administration
168 VMware, Inc.