4.5

7 Click Next > Next and type a name and location for the file that you want to export.
8
Click Next to save the file as a root certificate in the specified location.
What to do next
Add the root certificate to a server truststore file.
Add the Root Certificate to a Server Truststore File
You must add the root certificate for all trusted users to a server truststore file so that View Connection Server
instances and security servers can authenticate smart card users and connect them to their View desktops.
Prerequisites
n
Obtain the root certificate from the CA that signed the certificates on the smart cards presented by your
users. See “Obtain the Root Certificate from the CA,” on page 121.
n
Verify that the keytool utility is added to the system path on your View Connection Server or security
server host. See the VMware View Installation Guide for more information.
Procedure
1 On your View Connection Server or security server host, use the keytool utility to import the root
certificate into the server truststore file.
For example: keytool -import -alias
alias -file root_certificate -keystore truststorefile.key
In this command, alias is a unique case-insensitive name for a new entry in the truststore file, root_certificate
is the root certificate that you obtained or exported, and truststorefile.key is the name of the truststore file
that you are adding the root certificate to. If the file does not exist, it is created in the current directory.
NOTE The keytool utility might prompt you to create a password for the truststore file. You will be asked
to provide this password if you need to add additional certificates to the truststore file at a later time.
2 Copy the truststore file to the SSL gateway configuration folder on the View Connection Server or security
server host.
For example: install_directory \VMware\VMware View\Server\sslgateway\conf\ truststorefile.key
What to do next
Modify View Connection Server configuration properties to enable smart card authentication.
Modify View Connection Server Configuration Properties
To enable smart card authentication, you must modify View Connection Server configuration properties on
your View Connection Server or security server host.
Prerequisites
Add the root certificate for all trusted users to a server truststore file.
VMware View Administrator's Guide
122 VMware, Inc.