5.2

5 On
the computer that is running RSA Authentication Manager, select Start > Programs > RSA Security >
RSA Authentication Manager Host Mode.
6 Select Agent Host > Edit Agent Host.
7 Select View Connection Server from the list and deselect the Node Secret Created check box.
Node Secret Created is selected by default each time you edit it.
8 Click OK.
Troubleshooting RADIUS Access Denial
Access is denied when View Client connects with RADIUS two-factor authentication.
Problem
A View Client connection using RADIUS two-factor authentication displays Access Denied.
Cause
RADIUS does not receive a reply from the RADIUS server, causing View to time out.
Solution
The following common configuration mistakes most often lead to this situation:
n
The RADIUS server has not been configured to accept the View Connection Server instance as a RADIUS
client. Each View Connection Server instance using RADIUS must be set up as a client on the RADIUS
server. See the documentation for your RADIUS two-factor authentication product.
n
The shared secret values on the View Connection Server instance and the RADIUS server do not match.
Using the Log In as Current User Feature Available with Windows-
Based View Client
With View Client for Windows, when users select the Log in as current user check box, the credentials that
they provided when logging in to the client system are used to authenticate to the View Connection Server
instance and to the View desktop. No further user authentication is required.
To support this feature, user credentials are stored on both the View Connection Server instance and on the
client system.
n
On the View Connection Server instance, user credentials are encrypted and stored in the user session
along with the username, domain, and optional UPN. The credentials are added when authentication
occurs and are purged when the session object is destroyed. The session object is destroyed when the user
logs out, the session times out, or authentication fails. The session object resides in volatile memory and
is not stored in View LDAP or in a disk file.
n
On the client system, user credentials are encrypted and stored in a table in the Authentication Package,
which is a component of View Client. The credentials are added to the table when the user logs in and are
removed from the table when the user logs out. The table resides in volatile memory.
Administrators can use View Client group policy settings to control the availability of the Log in as current
user check box and to specify its default value. Administrators can also use group policy to specify which View
Connection Server instances accept the user identity and credential information that is passed when users
select the Log in as current user check box in View Client.
VMware Horizon View Administration
172 VMware, Inc.