4.6

Table 7-1. Properties for Smart Card Certificate Revocation Checking
Property Description
enableRevocationChecking
Set this property to true to enable certificate revocation
checking.
When this property is set to false, certificate revocation
checking is disabled and all other certificate revocation
checking properties are ignored.
The default value is false.
crlLocation
Specifies the location of the CRL, which can be either a URL
or a file path.
If you do not specify a URL, or if the specified URL is invalid,
View uses the list of CRLs on the user certificate if
allowCertCRLs is set to true or is not specified.
If View cannot access a CRL, CRL checking fails.
allowCertCRLs
When this property is set to true, View extracts a list of CRLs
from the user certificate.
The default value is true.
enableOCSP
Set this property to true to enable OCSP certificate
revocation checking.
The default value is false.
ocspURL
Specifies the URL of an OCSP Responder.
ocspResponderCert
Specifies the file that contains the OCSP Responder's signing
certificate. View uses this certificate to verify that the OCSP
Responder's responses are genuine.
ocspSendNonce
When this property is set to true, a nonce is sent with OCSP
requests to prevent repeated responses.
The default value is false.
ocspCRLFailover
When this property is set to true, View uses CRL checking
if OCSP certificate revocation checking fails.
The default value is true.
Using RSA SecurID Authentication
You can configure a View Connection Server instance so that users are required to use RSA SecurID
authentication before providing their Active Directory credentials.
Because RSA SecurID authentication works with RSA Authentication Manager, an RSA Authentication
Manager server is required and must be directly accessible from the View Connection Server host.
To use RSA SecurID authentication, each user must have a SecurID token that is registered with RSA
Authentication Manager. An RSA SecurID token is a piece of hardware or software that generates an
authentication code at fixed intervals. RSA SecurID provides two-factor authentication by requiring
knowledge of both a PIN and an authentication code. The authentication code is available only on the RSA
SecurID token.
If you have multiple View Connection Server instances, you can configure RSA SecurID authentication on
some instances and a different user authentication method on others. For example, you can configure RSA
SecurID authentication only for users who access View desktops remotely over the Internet.
VMware View is certified through the RSA SecurID Ready program and supports the full range of SecurID
capabilities, including New PIN Mode, Next Token Code Mode, RSA Authentication Manager, and load
balancing.
Chapter 7 Setting Up User Authentication
VMware, Inc. 133