5.2
Table Of Contents
- VMware Horizon View Installation
- Contents
- VMware Horizon View Installation
- System Requirements for Server Components
- System Requirements for Guest Operating Systems
- Preparing Active Directory
- Configuring Domains and Trust Relationships
- Creating an OU for View Desktops
- Creating OUs and Groups for Kiosk Mode Client Accounts
- Creating Groups for View Users
- Creating a User Account for vCenter Server
- Create a User Account for View Composer
- Configure the Restricted Groups Policy
- Using View Group Policy Administrative Template Files
- Prepare Active Directory for Smart Card Authentication
- Installing View Composer
- Installing View Connection Server
- Installing the View Connection Server Software
- Installation Prerequisites for View Connection Server
- Install View Connection Server with a New Configuration
- Install a Replicated Instance of View Connection Server
- Configure a Security Server Pairing Password
- Install a Security Server
- Firewall Rules for View Connection Server
- Reinstall View Connection Server with a Backup Configuration
- Microsoft Windows Installer Command-Line Options
- Uninstalling View Products Silently by Using MSI Command-Line Options
- Installing View Transfer Server
- Configuring SSL Certificates for View Servers
- Understanding SSL Certificates for View Servers
- Overview of Tasks for Setting Up SSL Certificates
- Obtaining a Signed SSL Certificate from a CA
- Configure View Connection Server, Security Server, or View Composer to Use a New SSL Certificate
- Configure View Clients to Trust Root and Intermediate Certificates
- Configuring Certificate Revocation Checking on Server Certificates
- Configuring Certificate Checking in View Client for Windows
- Configure the PCoIP Secure Gateway to Use a New SSL Certificate
- View Transfer Server and SSL Certificates
- Setting View Administrator to Trust a vCenter Server or View Composer Certificate
- Benefits of Using SSL Certificates Signed by a CA
- Configuring View for the First Time
- Configuring User Accounts for vCenter Server and View Composer
- Where to Use the vCenter Server User and Domain User for View Composer
- Configure a vCenter Server User for View Manager, View Composer, and Local Mode
- View Manager Privileges Required for the vCenter Server User
- View Composer Privileges Required for the vCenter Server User
- Local Mode Privileges Required for the vCenter Server User
- Configuring View Connection Server for the First Time
- View Administrator and View Connection Server
- Log In to View Administrator
- Install the View Connection Server License Key
- Add vCenter Server Instances to View Manager
- Configure View Composer Settings
- Configure View Composer Domains
- Allow vSphere to Reclaim Disk Space in Linked-Clone Virtual Machines
- Configure View Storage Accelerator for vCenter Server
- Concurrent Operations Limits for vCenter Server and View Composer
- Setting a Concurrent Power Operations Rate to Support View Desktop Logon Storms
- Accept the Thumbprint of a Default SSL Certificate
- Configuring View Client Connections
- Replacing Default Ports for View Services
- Replace the Default HTTP Ports or NICs for View Connection Server Instances and Security Servers
- Replace the Default Ports or NICs for the PCoIP Secure Gateway on View Connection Server Instances and on Security Servers
- Replace the Default Port for View Composer
- Replace the Default Ports for View Transfer Server
- Sizing Windows Server Settings to Support Your Deployment
- Configuring User Accounts for vCenter Server and View Composer
- Adding the View Desktops Plug-in to the vSphere Web Client
- Configuring Event Reporting
- Index
6 Click OK to save your changes.
View Administrator sends the updated external URLs to the security server. You do not need to restart the
security server service for the changes to take effect.
Replacing Default Ports for View Services
During installation, View services are set up to listen on certain network ports by default. In certain
organizations, these ports must be changed to comply with organization policies or to avoid contention. You
can change the default ports that are used by View Connection Server, security server, PCoIP Secure
Gateway, View Composer, and View Transfer Server services.
Changing ports is an optional setup task. Use the default ports if your deployment does not require you to
change them.
For a list of the default TCP and UDP ports that are used by View servers, see "View TCP and UDP Ports" in
the VMware Horizon View Security document.
Replace the Default HTTP Ports or NICs for View Connection Server Instances
and Security Servers
You can replace the default HTTP ports or NICs for a View Connection Server instance or security server by
editing the locked.properties file on the View server computer. Your organization might require you to
perform these tasks to comply with organization policies or to avoid contention.
The default SSL port is 443. The default non-SSL port is 80.
The port that is specified in the secure tunnel External URL does not change as a result of changes that you
make to ports in this procedure. Depending on your network configuration, you might have to change the
secure tunnel External URL port as well.
If the View server computer has multiple NICs, the computer listens on all NICs by default. You can select
one NIC to listen on the configured port by specifying the IP address that is bound to that NIC.
During installation, View configures the Windows firewall to open the required default ports. If you change
a port number or the NIC on which it listens, you must manually reconfigure your Windows firewall to
open the updated ports so that View Client devices can connect to the View server.
Prerequisites
Verify that the port that is specified in the External URL for this View Connection Server instance or security
server will continue to be valid after you change ports in this procedure.
Procedure
1 Create or edit the locked.properties file in the SSL gateway configuration folder on the View
Connection Server or security server computer.
For example: install_directory\VMware\VMware View\Server\sslgateway\conf\locked.properties
The properties in the locked.properties file are case sensitive.
2 Add the serverPort or serverPortNonSsl property, or both properties, to the locked.properties file.
For example:
serverPort=4443
serverPortNonSsl=8080
Chapter 8 Configuring View for the First Time
VMware, Inc. 109