6.2

Table 2‑1. View Agent Direct-Connection Plug-In Configuration Settings (Continued)
Setting Registry Value Type Description
USB Enabled usbEnabled REG_SZ
The value can be set to TRUE or FALSE. Determines
whether desktops can use USB devices connected to
the client system. The default value is enabled. To
prevent the use of external devices for security
reasons, change the setting to disabled (FALSE).
Client setting: USB
AutoConnect
usbAutoConnect REG_SZ
The value can be set to TRUE or FALSE. Connect USB
devices to the desktop when they are plugged in. If
this policy is set, it overrides any saved client
preferences. No value is set by default.
Reset Enabled resetEnabled REG_SZ
The value can be set to TRUE or FALSE. When set to
TRUE, an authenticated Horizon client can perform an
operating system level reboot. The default setting is
disabled (FALSE).
Client Credential
Cache Timeout
clientCredentialCacheTi
meout
REG_SZ The time period, in minutes, that a Horizon client
allows a user to use a saved password. 0 means
never, and -1 means forever. Horizon Client offers
users the option of saving their passwords if this
setting is set to a valid value. The default is 0 (never).
User Idle Timeout userIdleTimeout REG_SZ If there is no user activity on the Horizon client for
this period of time, the user's desktop and application
sessions are disconnected. The value is set in seconds.
The default is 900 seconds (15 minutes).
Smart Card Support x509CertAuth REG_SZ Indicates how smart card authentication is supported
based on the following values:
n
0: Not allowed
n
1: Optional
n
2: Required
The default value is 0.
Smart Card Certificate
Source
x509SSLCertAuth REG_SZ Indicates that the smart card certificate is obtained
from the SSL negotiation. The value must be set to
TRUE whenever x509CertAuth is set to 1 or 2. The
default value is FALSE. Changing this setting
requires a restart of the View Agent service.
Client Config Name
Value Pairs
BioMetricsTimeout REG_SZ Indicates whether biometric authentication is
supported and if so, a time period during which it
can be used. 0 means that biometric authentication is
not supported. -1 means that it is supported without
any time limit. A positive number means that it can
be used for that number of minutes. The default is 0
(not supported).
The External Port numbers and External IP Address values are used for Network Address Translation
(NAT) and port mapping support. For more information see, “Using Network Address Translation and Port
Mapping,” on page 15.
You can set policies that override these registry settings by using the Local Policy Editor or by using Group
Policy Objects (GPOs) in Active directory. Policy settings have precedence over normal registry settings. A
GPO template file is supplied to configure policies. When ViewView Agent and the plug-in are installed in
the default location, the template file has the following location:
C:\Program Files\VMware\VMware View\Agent\extras\view_agent_direct_connection.adm
Chapter 2 View Agent Direct-Connection Plug-In Advanced Configuration
VMware, Inc. 13