4.6

Table Of Contents
Procedure
1 Copy the keystore file that contains your certificate to the SSL gateway configuration directory on the
View Connection Server or security server host.
For example:
install_directory
\VMware\VMware View\Server\sslgateway\conf\keys.jks
2 Add the keyfile, keypass, and storetype properties to the locked.properties file in the SSL gateway
configuration directory on the View Connection Server or security server host.
If the locked.properties file does not already exist, you must create it.
a Set the keyfile property to the name of your keystore file.
If you exported an existing Microsoft IIS SSL server certificate, set keyfile to the name of your PFX
file.
For example:
keyfile=keys.jks
b Set the keypass property to the password for your keystore file.
If you exported an existing Microsoft IIS SSL server certificate, set keypass to the password that you
used when you exported the certificate.
For example:
keypass=MY_PASS
c Set the storetype property to match the type of the keystore file.
Option Description
PKCS#12 or PFX file
Set the value of storetype to pkcs12.
Java keystore file
Set the value of storetype to jks.
For example:
storetype=jks
You must specify the storetype property for a Java keystore file.
3 Restart the View Connection Server service or Security Server service to make your changes take effect.
What to do next
Install the root certificate (if not already present) and the intermediate certificate as described in “Using Group
Policy to Configure Certificate Checking in View Client,” on page 88.
Configure a View Transfer Server Instance to Use a New Certificate
To configure a View Transfer Server instance to use a new server SSL certificate, you must copy your certificate
and private key files to the View Transfer Server host.
The Apache server on the View Transfer Server instance requires Base64 encoded DER (PEM) certificates.
Certificate files and key files must have the extensions .crt and .key respectively.
Prerequisites
n
Add openssl to the system Path variable on your host. See “Add keytool and openssl to the System
Path,” on page 80.
n
Obtain an existing PKCS#12 file, export an existing Microsoft IIS SSL server certificate, or create a new
SSL certificate.
VMware View Installation
86 VMware, Inc.