5.2

Table 8-10. View Client Configuration Template: Security Settings
(Continued)
Setting Computer User Description
Certificate verification
mode
X Configures the level of certificate checking that is
performed by View Client. You can select one of these
modes:
n
No Security. View does not perform certificate
checking.
n
Warn But Allow. When the following server
certificate
issues occur, a warning is displayed, but
the user can continue to connect to View
Connection Server:
n
A self-signed certificate is provided by View.
In this case, it is acceptable if the certificate
name does not match the View Connection
Server name provided by the user in View
Client.
n
A verifiable certificate that was configured in
your deployment has expired or is not yet
valid.
If any other certificate error condition occurs, View
displays an error dialog and prevents the user from
connecting to View Connection Server.
Warn But Allow is the default value.
n
Full Security. If any type of certificate error
occurs, the user cannot connect to View Connection
Server. View displays certificate errors to the user.
When this group policy setting is configured, users can
view the selected certificate verification mode in View
Client but cannot configure the setting. The SSL
configuration dialog box informs users that the
administrator has locked the setting.
When this setting is not configured or disabled, View
Client users can select a certificate verification mode.
To allow a View server to perform checking of
certificates provided by a View Client, the View Client
must make HTTPS connections to the View Connection
Server or security server host. Certificate checking is not
supported if you off-load SSL to an intermediate device
that makes HTTP connections to the View Connection
Server or security server host.
For Windows clients, if you do not want to configure
this setting as a group policy, you can also enable
certificate verification by adding the CertCheckMode
value name to one of the following registry keys on the
client computer:
n
For 32-bit Windows:
HKEY_LOCAL_MACHINE\Software\VMware,
Inc.\VMware VDM\Client\Security
n
For 64-bit Windows:
HKLM\SOFTWARE\Wow6432Node\VMware,
Inc.\VMware VDM\Client\Security
Use the following values in the registry key:
n
0 implements No Security.
n
1 implements Warn But Allow.
n
2 implements Full Security.
If you configure both the group policy setting and the
CertCheckMode setting in the registry key, the group
policy setting takes precedence over the registry key
value.
VMware Horizon View Administration
190 VMware, Inc.