5.0

Table 7-1. Properties for Smart Card Certificate Revocation Checking (Continued)
Property Description
enableOCSP
Set this property to true to enable OCSP certificate
revocation checking.
The default value is false.
ocspURL
Specifies the URL of an OCSP Responder.
ocspResponderCert
Specifies the file that contains the OCSP Responder's signing
certificate. View uses this certificate to verify that the OCSP
Responder's responses are genuine.
ocspSendNonce
When this property is set to true, a nonce is sent with OCSP
requests to prevent repeated responses.
The default value is false.
ocspCRLFailover
When this property is set to true, View uses CRL checking
if OCSP certificate revocation checking fails.
The default value is true.
Using RSA SecurID Authentication
You can configure a View Connection Server instance so that users are required to use RSA SecurID
authentication before providing their Active Directory credentials.
Because RSA SecurID authentication works with RSA Authentication Manager, an RSA Authentication
Manager server is required and must be directly accessible from the View Connection Server host.
To use RSA SecurID authentication, each user must have a SecurID token that is registered with RSA
Authentication Manager. An RSA SecurID token is a piece of hardware or software that generates an
authentication code at fixed intervals. RSA SecurID provides two-factor authentication by requiring
knowledge of both a PIN and an authentication code. The authentication code is available only on the RSA
SecurID token.
If you have multiple View Connection Server instances, you can configure RSA SecurID authentication on
some instances and a different user authentication method on others. For example, you can configure RSA
SecurID authentication only for users who access View desktops remotely over the Internet.
VMware View is certified through the RSA SecurID Ready program and supports the full range of SecurID
capabilities, including New PIN Mode, Next Token Code Mode, RSA Authentication Manager, and load
balancing.
n
Logging in with RSA SecurID on page 133
When a user connects to a View Connection Server instance that has RSA SecurID authentication enabled,
a RSA SecurID login dialog box appears in View Client.
n
Enable RSA SecurID Authentication in View Administrator on page 134
You enable a View Connection Server instance for RSA SecurID authentication by modifying View
Connection Server settings in View Administrator.
n
Troubleshooting RSA SecurID Access Denial on page 134
Access is denied when View Client connects with RSA SecurID authentication.
Logging in with RSA SecurID
When a user connects to a View Connection Server instance that has RSA SecurID authentication enabled, a
RSA SecurID login dialog box appears in View Client.
Users enter their RSA SecurID username and passcode in the RSA SecurID login dialog box. An RSA SecurID
passcode typically consists of a PIN followed by a token code.
Chapter 7 Setting Up User Authentication
VMware, Inc. 133