3.0.1
Table Of Contents
- Administration Guide
- Contents
- About This Book
- Introduction
- Installation
- View Administrator
- Virtual Desktop Deployment
- Client Management
- View Client and View Portal
- Client Connections from the Internet
- Creating SSL Server Certificates
- Using Existing SSL Certificates
- Smart Card Authentication
- RSA SecurID Authentication
- View Client Command Line Options
- Virtual Printing
- View Composer
- Offline Desktop
- Component Policies
- Unified Access
- Troubleshooting
- Glossary
- Index
VMware, Inc. 29
Chapter 2 Installation
To install a replica server
1RunthefollowingexecutableonthesystemthatwillhosttheViewConnection
Server,wherexxxisthebuildnumberofthefile:
VMware-viewconnectionserver-xxx.exe
TheVMwareInstallationwizardisdisplayed.ClickNext.
2AccepttheVMwarelicenseterms,andclickNext.
3Acceptorchangethedestinationfolder,andclickNext.
4 ChoosetheReplicadeploymentopti
on.
5EnterthehostnameorIPaddressoftheexistingViewConnectionServerthatyou
wanttoreplicate.Ifthetargetsystemisnotpartofthesamedomainasthemain
server,youwillrequirelocaladministrativerightsonthetargetservertodothis.
6ClickNext>Install>Fin
ish.
Security Server Installation
Ademilitarizedzone(DMZ)isasemi‐protectedsub‐networkthatexistsbetweena
secureinternalnetworkandaninsecureexternalnetwork.Servicesthatexistwithin
thisspaceareexposedtobothnetworksandprovideanentrypointforexternaltousers
toaccessapplicationsthatresidewithinthesecureenvironment.
ViewConnectionSe
rversecurityserversareinstalledintheDMZinordertoaddan
additionallayerofnetworkprotection;theyensurethatonlyauthenticateduserscan
connecttotheinternalnetworkfromexternallocationsbyprovidingasinglepointof
access.BecausetheinboundcommunicationsfromDMZservicescanbestric
tly
controlledthroughfirewallpolicy,theriskoftheinternalnetworkbeingcompromised
isgreatlyreduced.
Figure 2‐2showsahigh‐availabilityenvironmentcomprisingtwoload‐balanced
securityserversintheDMZcommunicatingwithtwoinstancesofViewConnection
Server—astandardserverandareplicaserver—insidetheinternalnetwork.
N
OTEInLAN‐baseddeployments,nosecurityserversarerequiredasuserscan
connectdirectlywithanyViewConnectionServerfromwithintheirinternalnetwork.