4.5

Using RSA SecurID Authentication
You can configure a View Connection Server instance so that users are required to use RSA SecurID
authentication before providing their Active Directory credentials.
Because RSA SecurID authentication works with RSA Authentication Manager, an RSA Authentication
Manager server is required and must be directly accessible from the View Connection Server host.
To use RSA SecurID authentication, each user must have a SecurID token that is registered with RSA
Authentication Manager. An RSA SecurID token is a piece of hardware or software that generates an
authentication code at fixed intervals. RSA SecurID provides two-factor authentication by requiring
knowledge of both a PIN and an authentication code. The authentication code is available only on the RSA
SecurID token.
If you have multiple View Connection Server instances, you can configure RSA SecurID authentication on
some instances and a different user authentication method on others. For example, you can configure RSA
SecurID authentication only for users who access View desktops remotely over the Internet.
VMware View is certified through the RSA SecurID Ready program and supports the full range of SecurID
capabilities, including New PIN Mode, Next Token Code Mode, RSA Authentication Manager, and load
balancing.
n
Logging in with RSA SecurID on page 131
When
a user connects to a View Connection Server instance that has RSA SecurID authentication enabled,
a RSA SecurID login dialog box appears in View Client.
n
Enable RSA SecurID Authentication in View Administrator on page 131
You enable a View Connection Server instance for RSA SecurID authentication by modifying View
Connection Server settings in View Administrator.
n
Troubleshooting RSA SecurID Access Denial on page 132
Access is denied when View Client connects with RSA SecurID authentication.
Logging in with RSA SecurID
When a user connects to a View Connection Server instance that has RSA SecurID authentication enabled, a
RSA SecurID login dialog box appears in View Client.
Users enter their RSA SecurID username and passcode in the RSA SecurID login dialog box. An RSA SecurID
passcode typically consists of a PIN followed by a token code.
If RSA Authentication Manager requires users to enter a new RSA SecurID PIN after entering their RSA SecurID
username and passcode, a PIN dialog box appears. After setting a new PIN, users are prompted to wait for
the next token code before logging in. If RSA Authentication Manager is configured to use system-generated
PINs, a dialog box appears to confirm the PIN.
After successful validation against RSA Authentication Manager, users are prompted to enter their Active
Directory credentials.
Enable RSA SecurID Authentication in View Administrator
You enable a View Connection Server instance for RSA SecurID authentication by modifying View Connection
Server settings in View Administrator.
Prerequisites
n
Install and configure the RSA SecurID software.
n
Export the sdconf.rec file for the View Connection Server instance from RSA Authentication Manager.
See the RSA Authentication Manager documentation for more information.
Chapter 7 Setting Up User Authentication
VMware, Inc. 131