3.0.1

VMware, Inc. 85
Chapter 5 Client Management
5Intheleftpane,expandComputerConfiguration>WindowsSettings>Security
Settings>PublicKeyPolicy
6Right‐clickTrustedRootCertificationAuthoritiesandselectImport.
7Followtheinstructionsinthewizardtoimportthecertificate.ClickOK.
8ClosetheGroupPolicywindow.
Byaddingthecertificatetothelistoftrustedroot
s,youareensuringthatallsystemsin
thedomainhaveacopyofthecertificateintheirtrustedrootstore.
To add the third-party root CA to the NTAuth store in Active Directory
ToimportaCAcertificateintotheEnterpriseNTAuthstoreenterthefollowingfrom
thecommandpromptontheActiveDirectoryserver,where<certificate>isthepath
tothethird‐partyrootCAce
rtificate:
certutil –dspublish –f <certificate> NTAuthCA
BypublishingthecertificatetotheEnterpriseNTAuthstore,youareconfirmingthat
theCAistrustedtoissuecertificatesofthistype.
Creating a Truststore
AtruststoreisakeystorethatisusedbyViewManagerwhenmakingdecisionsabout
whichclientstotrust.InorderforViewConnectionServertoauthenticatesmartcard
usersandconnectthemtotheirdesktops,therootcertificateforalltrustedusersmust
firstbeaddedtotheservertruststore.
Atrust
storecanbecreatedbyusingthekeytoolutilityprovidedwiththeJava
RuntimeEnvironment(JRE)instancethataccompaniesViewConnectionServer.
To add the JRE utilities to your command path
1PresstheWindowskey+BreaktodisplaytheWindowsSystemPropertiesdialog
box.
2UndertheAdvancedtab,clickonEnvironmentVariables.
3IntheSystemvariablesgroup,selectPATHandthencl
ickEdit.
4IntheVariablevaluefieldaddthepathtotheJREinstallationdirectory:
C:\Program Files\VMware\View Manager\Server\jre\bin
Ensurethatthisentryisdelimitedwithasemicolon(;)fromanyotherentries
presentinthefield.
5ClickOK>OK>OKtoclosetheWindowsSystemPropertiesdialogbox.