7.0
Table Of Contents
- Scenarios for Setting Up SSL Certificates for View
- Contents
- Scenarios for Setting Up SSL Connections to View
- Obtaining SSL Certificates from a Certificate Authority
- Off-loading SSL Connections to Intermediate Servers
- Import SSL Off-loading Servers' Certificates to View Servers
- Download an SSL Certificate from the Intermediate Server
- Download a Private Key from the Intermediate Server
- Convert a Certificate File to PKCS#12 Format
- Import a Signed Server Certificate into a Windows Certificate Store
- Modify the Certificate Friendly Name
- Import the Root and Intermediate Certificates into the Windows Certificate Store
- Set View Server External URLs to Point Clients to SSL Off-loading Servers
- Allow HTTP Connections From Intermediate Servers
- Import SSL Off-loading Servers' Certificates to View Servers
- Index
5 If you use HTML Access in VMware Horizon View 5.2 or later, restart the VMware View Blast Secure
Gateway service.
6 If you are setting up a certificate on a View Composer server, you might have to take another step.
n
If you set up the new certificate after you install View Composer, you must run the SviConfig
ReplaceCertificate utility to replace the certificate that is bound to the port used by View
Composer.
n
If you set up the new certificate before you install View Composer, you do not have to run the
SviConfig ReplaceCertificate utility. When you run the View Composer installer, you can select
the new certificate that is signed by a CA instead of the default, self-signed certificate.
For more information, see "Bind a New SSL Certificate to the port Used by View Composer" in the View
Installation document.
To perform the tasks in this procedure, see the following topics:
n
“Modify the Certificate Friendly Name,” on page 19
n
“Import the Root and Intermediate Certificates into the Windows Certificate Store,” on page 20
For more information, see "Configure View Connection Server, Security Server, or View Composer to Use a
New SSL Certificate" in the View Installation document.
NOTE The View Installation topic "Import a Signed Server Certificate into a Windows Certificate Store" is not
listed here because you already imported the server certificate by using the certreq utility. You should not
use the Certificate Import wizard in the MMC Snap-in to import the server certificate again.
However, you can use the Certificate Import wizard to import the root CA certificate and intermediate CA
certificate into the Windows certificate store.
Scenarios for Setting Up SSL Certificates for View
14 VMware, Inc.