5.2

Set View Server External URLs to Point Clients to SSL Off-loading Servers
If
SSL is off-loaded to an intermediate server and View Clients use the secure tunnel to connect to View, make
sure to set the secure tunnel external URL to an address that clients can use to access the intermediate server.
If View Clients use the PCoIP Secure Gateway, set the secure tunnel external URL and PCoIP external URL to
addresses that allow clients to connect to the intermediate server.
You configure the external URL settings on the View Connection Server instance or security server that
connects to the intermediate server. For more information, see “Configuring External URLs for PCoIP Secure
Gateway and Tunnel Connections” in the VMware Horizon View Installation document.
Allow HTTP Connections to Intermediate Servers
When SSL is off-loaded to an intermediate server, you can configure View Connection Server instances or
security servers to allow HTTP connections from the client-facing, intermediate devices. The intermediate
devices must accept HTTPS for View Client connections.
To allow HTTP connections between View servers and intermediate devices, you must configure the
locked.properties file on each View Connection Server instance and security server on which HTTP
connections are allowed.
Even when HTTP connections between View servers and intermediate devices are allowed, you cannot disable
SSL in View. View servers continue to accept HTTPS connections as well as HTTP connections.
NOTE If your View Clients use smart card authentication, the clients must make HTTPS connections directly
to View Connection Server or security server. SSL off-loading is not supported with smart card authentication.
Procedure
1 Create
or edit the locked.properties file in the SSL gateway configuration folder on the View Connection
Server or security server host.
For example:
install_directory \VMware\VMware View\Server\sslgateway\conf\locked.properties
2 To configure the View server's protocol, add the serverProtocol property and set it to http.
The value http must be typed in lower case.
3 (Optional) Add properties to configure a non-default HTTP listening port and a network interface on the
View server.
n
To change the HTTP listening port from 80, set serverPortNonSSL to another port number to which
the intermediate device is configured to connect.
n
If the View server has more than one network interface, and you intend the server to listen for HTTP
connections on only one interface, set serverHost to the IP address of that network interface.
4 Save the locked.properties file.
5 Restart the View Connection Server service or security server service to make your changes take effect.
Example: locked.properties file
This file allows non-SSL HTTP connections to a View server. The IP address of the View server's client-facing
network interface is 10.20.30.40. The server uses the default port 80 to listen for HTTP connections. The value
http must be lower case.
serverProtocol=http
serverHost=10.20.30.40
VMware Horizon View Administration
34 VMware, Inc.