HP mt20 Administrator Guide - Page 43

VMware Horizon View HTTPS and certificate management requirements, certificate

Page 43 highlights

VMware Horizon View HTTPS and certificate management requirements VMware Horizon View Client 1.5 and VMware Horizon View Server 5.0 and later require HTTPS. By default, the VMware Horizon View client warns about untrusted server certificates, such as self-signed (like the VMware Horizon View Manager default certificate) or expired certificates. If a certificate is signed by a Certificate Authority (CA) and the CA is untrusted, the connection will return an error and the user will not be allowed to connect. HP recommends that a signed certificate verified by a standard trusted root CA be used on the VMware Horizon View Manager server. This makes sure that users will be able to connect to the server without being prompted or required to do any configuration. If using an internal CA, the VMware Horizon View client connection returns an error until you complete one of the following tasks: ● Use the Certificate Manager to import the certificate from a file or URL. ● Use a remote profile update to import a certificate. ● In the VMware Horizon View Connection Manager, set Connection Security Level to Allow all connections. The following table describes certificate trust when the security level is set to Refuse insecure connections. Certificate trust Trusted Self-signed Expired Untrusted Result Trusted Error Error Error The following table describes certificate trust when the security level is set to Warn. Certificate trust Trusted Self-signed Expired Untrusted Result Trusted Warning Warning Error The following table describes certificate trust when the security level is set to Allow all connections. Certificate trust Trusted Self-signed Expired Untrusted Result Trusted Untrusted Untrusted Untrusted The following table describes the connection behavior associated with each result. VMware Horizon View 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166

VMware Horizon View HTTPS and
certificate
management requirements
VMware Horizon View Client 1.5 and VMware Horizon View Server 5.0 and later require HTTPS. By default, the
VMware Horizon View client warns about untrusted server
certificates,
such as self-signed (like the VMware
Horizon View Manager default
certificate)
or expired
certificates.
If a
certificate
is signed by a
Certificate
Authority (CA) and the CA is untrusted, the connection will return an error and the user will not be allowed to
connect.
HP recommends that a signed
certificate
verified
by a standard trusted root CA be used on the VMware
Horizon View Manager server. This makes sure that users will be able to connect to the server without being
prompted or required to do any
configuration.
If using an internal CA, the VMware Horizon View client
connection returns an error until you complete one of the following tasks:
Use the
Certificate
Manager to import the
certificate
from a
file
or URL.
Use a remote
profile
update to import a
certificate.
In the VMware Horizon View Connection Manager, set
Connection Security Level
to
Allow all
connections
.
The following table describes
certificate
trust when the security level is set to
Refuse insecure connections
.
Certificate
trust
Result
Trusted
Trusted
Self-signed
Error
Expired
Error
Untrusted
Error
The following table describes
certificate
trust when the security level is set to
Warn
.
Certificate
trust
Result
Trusted
Trusted
Self-signed
Warning
Expired
Warning
Untrusted
Error
The following table describes
certificate
trust when the security level is set to
Allow all connections
.
Certificate
trust
Result
Trusted
Trusted
Self-signed
Untrusted
Expired
Untrusted
Untrusted
Untrusted
The following table describes the connection behavior associated with each result.
VMware Horizon View
31