6.1

4 On the Personal tab, select the certificate you want to use and click View.
If the user certificate does not appear on the list, click Import to manually import it from a file. After the
certificate is imported, you can select it from the list.
5 On the Certification Path tab, select the certificate at the top of the tree and click View Certificate.
If the user certificate is signed as part of a trust hierarchy, the signing certificate might be signed by
another higher-level certificate. Select the parent certificate (the one that actually signed the user
certificate) as your root certificate.
6 On the Details tab, click Copy to File.
The Certificate Export Wizard appears.
7 Click Next > Next and type a name and location for the file that you want to export.
8 Click Next to save the file as a root certificate in the specified location.
What to do next
Add the root certificate to a server truststore file.
Add the Root Certificate to a Server Truststore File
You must add root certificates to a server truststore file for all users and administrators that you trust. View
Connection Server instances and security servers use this information to authenticate smart card users and
administrators.
Prerequisites
n
Obtain the root certificates that were used to sign the certificates on the smart cards presented by your
users or administrators. See “Obtain the Root Certificate from the CA,” on page 44 and “Obtain the
Root Certificate from Windows,” on page 44.
n
Verify that the keytool utility is added to the system path on your View Connection Server or security
server host. See the View Installation document for more information.
Procedure
1 On your View Connection Server or security server host, use the keytool utility to import the root
certificate into the server truststore file.
For example: keytool -import -alias alias -file root_certificate -keystore truststorefile.key
In this command, alias is a unique case-sensitive name for a new entry in the truststore file,
root_certificate is the root certificate that you obtained or exported, and truststorefile.key is the name of the
truststore file that you are adding the root certificate to. If the file does not exist, it is created in the
current directory.
NOTE The keytool utility might prompt you to create a password for the truststore file. You will be
asked to provide this password if you need to add additional certificates to the truststore file at a later
time.
2 Copy the truststore file to the SSL gateway configuration folder on the View Connection Server or
security server host.
For example: install_directory\VMware\VMware View\Server\sslgateway\conf\truststorefile.key
What to do next
Modify View Connection Server configuration properties to enable smart card authentication.
Chapter 3 Setting Up Authentication
VMware, Inc. 45