3.0.1

VMware, Inc. 77
Chapter 5 Client Management
TocreateandinstallyourowncertificateyoumustfirstaddtheJavakeytoolutilityto
yourcommandpathsothatyoucanexecuteitfromanylocationusingthecommand
prompt.Oncethisisdoneyoucancreateaself‐signedSSLcertificateusingthekeytool
utility.
Toobtainavalidatedcertificat
ethathasbeensignedbyatrustedcertificateauthority
youmustfirstsubmitacertificatesigningrequest(CSR)toatheCAinordertoreceive
atrustedcertificate.OnceyouhavereceivedatrustedcertificatefromtheCAyoucan
importitintothekeystorefortheViewCon
nectionServer,andthenconfigureView
ConnectionServertouseit.
To add the Java keytool to the system path
1PresstheWindowskey+BreaktodisplaytheWindowsSystemPropertiesdialog
box.
2UndertheAdvancedtab,clickonEnvironmentVariables.
3IntheSystemvariablesgroup,selectPATHandthenclickEdit.
4IntheVariablevaluefieldaddthepathtotheJREinst
allationdirectory:
C:\Program Files\VMware\View Manager\Server\jre\bin
Ensurethatthisentryisdelimitedwithasemicolon(;)fromanyotherentries
presentinthefield.
5ClickOK>OK>OKtoclosetheWindowsSystemPropertiesdialogbox.
Creating an SSL Certificate
Decidingwhatnametobindtoacertificateisanimportantconsideration.Acertificate
bindsthenameoftheservicetoacryptographickeypairand,indoingso,assumes
ownershipoftheserviceandkeys.Oncethecertificateissignedtheclientcantrustthe
server(anditscryptographickey)beca
usetheCAindependentlydeterminedthatthe
organizationthatisclaimingownershiprequestedthekey.
Themostimportantpartofthecertificateisthecommonname(CN)attribute.Usethe
fullyqualifieddomainnamethattheclientcomputerusestoconnecttotheView
ConnectionServer.Inasingle‐serverenvironment,thenameisty
picallythenameof
theserver.Ifloadbalancingisbeingused,usetheload‐balancedname.
N
OTEYoumayalreadyhaveanSSLcertificatethatyouwanttousewithView
ConnectionServer.Referto“UsingExistingSSLCertificates”onpage 81formore
informationonhowtodothis.