4.6
Table Of Contents
- VMware View Installation
- Contents
- VMware View Installation
- System Requirements for Server Components
- System Requirements for Client Components
- Supported Operating Systems for View Agent
- Supported Operating Systems for View Client and View Client with Local Mode
- Hardware Requirements for Local Mode Desktops
- Client Browser Requirements for View Portal
- Remote Display Protocol and Software Support
- Adobe Flash Requirements
- Smart Card Authentication Requirements
- Preparing Active Directory
- Configuring Domains and Trust Relationships
- Creating an OU for View Desktops
- Creating OUs and Groups for Kiosk Mode Client Accounts
- Creating Groups for View Users
- Creating a User Account for vCenter Server
- Create a User Account for View Composer
- Configure the Restricted Groups Policy
- Using View Group Policy Administrative Template Files
- Prepare Active Directory for Smart Card Authentication
- Installing View Composer
- Installing View Connection Server
- Installing the View Connection Server Software
- Installation Prerequisites for View Connection Server
- Install View Connection Server with a New Configuration
- Install a Replicated Instance of View Connection Server
- Configure a Security Server Pairing Password
- Install a Security Server
- Microsoft Windows Installer Command-Line Options
- Uninstalling View Products Silently by Using MSI Command-Line Options
- Configuring User Accounts for vCenter Server and View Composer
- Where to Use the vCenter Server User and Domain User for View Composer
- Configure a vCenter Server User for View Manager, View Composer, and Local Mode
- View Manager Privileges Required for the vCenter Server User
- View Composer Privileges Required for the vCenter Server User
- Local Mode Privileges Required for the vCenter Server User
- Configuring View Connection Server for the First Time
- Configuring View Client Connections
- Sizing Windows Server Settings to Support Your Deployment
- Installing the View Connection Server Software
- Installing View Transfer Server
- Configuring Certificate Authentication
- Replacing the Default Certificate
- Add keytool and openssl to the System Path
- Use an Existing PKCS#12 Certificate and Private Key
- Convert a PKCS#12 Keystore to JKS Format
- Creating a New SSL Certificate
- Configure a View Connection Server Instance or Security Server to Use a New Certificate
- Configure a View Transfer Server Instance to Use a New Certificate
- Configure SSL for Client Connections
- Configure SSL for View Transfer Server Communications
- Using Group Policy to Configure Certificate Checking in View Client
- Creating an Event Database
- Installing and Starting View Client
- Install the Windows-Based View Client or View Client with Local Mode
- Start the Windows-Based View Client or View Client with Local Mode
- Install View Client by Using View Portal
- Install View Client on Mac OS X
- Start View Client on Mac OS X
- Set Printing Preferences for the Virtual Printer Feature on Windows Clients
- Using USB Printers
- Installing View Client Silently
- Index
Configuring Certificate Authentication 7
You can configure certificate authentication for View Connection Server instances, security servers, and View
Transfer Server instances.
This chapter includes the following topics:
n
“Replacing the Default Certificate,” on page 79
n
“Add keytool and openssl to the System Path,” on page 80
n
“Use an Existing PKCS#12 Certificate and Private Key,” on page 80
n
“Convert a PKCS#12 Keystore to JKS Format,” on page 82
n
“Creating a New SSL Certificate,” on page 82
n
“Configure a View Connection Server Instance or Security Server to Use a New Certificate,” on
page 85
n
“Configure a View Transfer Server Instance to Use a New Certificate,” on page 86
n
“Configure SSL for Client Connections,” on page 87
n
“Configure SSL for View Transfer Server Communications,” on page 88
n
“Using Group Policy to Configure Certificate Checking in View Client,” on page 88
Replacing the Default Certificate
A default server SSL certificate is generated when you install View Connection Server. You can use the default
certificate for testing purposes.
IMPORTANT Replace the default certificate as soon as possible. The default certificate is not signed by a
commercial Certificate Authority (CA). Use of certificates that are not signed by a CA can allow untrusted
parties to intercept traffic by masquerading as your server.
View Connection Server instances, security servers, and View Transfer Server instances require a server SSL
certificate if they receive SSL connections.
n
If you enable SSL for client connections, client-facing View Connection Server instances and security
servers require a server SSL certificate.
n
If you enable SSL for local mode operations and desktop provisioning, View Transfer Server instances
require a server SSL certificate.
n
If you configure smart card authentication in VMware View, client-facing View Connection Server
instances and security servers require a root CA certificate in addition to a server SSL certificate.
VMware, Inc.
79