4.6
Table Of Contents
- VMware View Installation
- Contents
- VMware View Installation
- System Requirements for Server Components
- System Requirements for Client Components
- Supported Operating Systems for View Agent
- Supported Operating Systems for View Client and View Client with Local Mode
- Hardware Requirements for Local Mode Desktops
- Client Browser Requirements for View Portal
- Remote Display Protocol and Software Support
- Adobe Flash Requirements
- Smart Card Authentication Requirements
- Preparing Active Directory
- Configuring Domains and Trust Relationships
- Creating an OU for View Desktops
- Creating OUs and Groups for Kiosk Mode Client Accounts
- Creating Groups for View Users
- Creating a User Account for vCenter Server
- Create a User Account for View Composer
- Configure the Restricted Groups Policy
- Using View Group Policy Administrative Template Files
- Prepare Active Directory for Smart Card Authentication
- Installing View Composer
- Installing View Connection Server
- Installing the View Connection Server Software
- Installation Prerequisites for View Connection Server
- Install View Connection Server with a New Configuration
- Install a Replicated Instance of View Connection Server
- Configure a Security Server Pairing Password
- Install a Security Server
- Microsoft Windows Installer Command-Line Options
- Uninstalling View Products Silently by Using MSI Command-Line Options
- Configuring User Accounts for vCenter Server and View Composer
- Where to Use the vCenter Server User and Domain User for View Composer
- Configure a vCenter Server User for View Manager, View Composer, and Local Mode
- View Manager Privileges Required for the vCenter Server User
- View Composer Privileges Required for the vCenter Server User
- Local Mode Privileges Required for the vCenter Server User
- Configuring View Connection Server for the First Time
- Configuring View Client Connections
- Sizing Windows Server Settings to Support Your Deployment
- Installing the View Connection Server Software
- Installing View Transfer Server
- Configuring Certificate Authentication
- Replacing the Default Certificate
- Add keytool and openssl to the System Path
- Use an Existing PKCS#12 Certificate and Private Key
- Convert a PKCS#12 Keystore to JKS Format
- Creating a New SSL Certificate
- Configure a View Connection Server Instance or Security Server to Use a New Certificate
- Configure a View Transfer Server Instance to Use a New Certificate
- Configure SSL for Client Connections
- Configure SSL for View Transfer Server Communications
- Using Group Policy to Configure Certificate Checking in View Client
- Creating an Event Database
- Installing and Starting View Client
- Install the Windows-Based View Client or View Client with Local Mode
- Start the Windows-Based View Client or View Client with Local Mode
- Install View Client by Using View Portal
- Install View Client on Mac OS X
- Start View Client on Mac OS X
- Set Printing Preferences for the Virtual Printer Feature on Windows Clients
- Using USB Printers
- Installing View Client Silently
- Index
n
If you use an intermediate CA, obtain an intermediate certificate in PEM format.
n
If a certificate is not in PEM format, convert it to PEM format.
Procedure
1 Stop the View Transfer Server service.
2 Copy the server certificate, intermediate certificate (if any), and private key files to the directory
install_directory
\VMware\VMware View\Server\httpd\conf on the View Transfer Server host.
3 Edit the entries for SSLCertificateFile and SSLCertificateKeyFile in the Apache configuration file
httpd.conf to specify the names of the server certificate and private key files.
For example:
SSLCertificateFile server.crt
SSLCertificateKeyFile server.key
4 If you copied an intermediate certificate file to the View Transfer Server host, add an entry for the
SSLCertificateChainFile directive to httpd.conf.
For example:
SSLCertificateChainFile intermediateCA.crt
5 Restart the View Transfer Server service to make your changes take effect.
6 Verify that the certificate is configured correctly by using your Web browser to navigate to
https://
transfer_server_host_address
.
Configure SSL for Client Connections
To configure whether client connections use SSL when communicating with View Connection Server, you
configure a global setting in View Administrator. The setting applies to View desktop clients and clients that
run View Administrator.
Global settings affect all client sessions that are managed by a standalone View Connection Server instance or
a group of replicated instances. They are not specific to a single View Connection Server instance.
If View Connection Server is configured for smart card authentication, SSL must be enabled for client
connections.
SSL is enabled by default for client connections.
NOTE If you disable SSL for client connections, users must deselect the Use secure connection (SSL) check
box in View Client before connecting to the View Connection Server host and administrators must type an
HTTP URL to run View Administrator.
IMPORTANT If you disable or enable SSL for client connections, all existing client connections are terminated.
Choose a time to restart the View Connection Server service that is least disruptive to the desktop users.
Procedure
1 In View Administrator, select View Configuration > Global Settings and click Edit.
2 To configure SSL for client connections, select or deselect Require SSL for client connections and View
Administrator.
3 Click OK to save your changes.
Chapter 7 Configuring Certificate Authentication
VMware, Inc. 87