Post-certificate enrollment configuration tasks

Even though you have installed a certificate server and installed a valid certificate on the Connection Server, there are still a few things to configure.

If you were to try and connect to the View Administrator using your browser, you will still see an error message saying there is a problem with the website's security certificate. A typical message would look something like the following:

If you remember from the beginning of this chapter, we also discussed accessing web pages using http:// or https:// for secure web pages. If the address bar in your browser is red, as shown in the following screenshot, then the connection is not secure and there are no certificates installed:

You can of course ignore these errors and just click Continue to this website (not recommended), which allows you to continue past the warning and log on to View Administrator.

However, when you log on, you will see that, in the System Health section of the View Administrator dashboard, there is also a red warning box. As far as View is concerned, if you don't have a valid certificate installed, the health warning tells you that the connections will be untrusted and therefore that's a bad thing! An example of this is shown in the following screenshot:

If you click on the Horizon 7 Administrator dashboard, and under System Health on the Dashboard view, select one of the Connection Servers displaying a red warning box. You can see in the server details box that opens that there is a yellow warning sign telling you that there is an untrusted certificate on this particular server. In the example lab environment, we are going to continue using the Horizon View Manager rather than the newer Horizon Console web-based management console. The reason is that at the time of writing, not all of the features we are going to cover can be accessed using the Horizon console.

It's the same thing from the end user perspective. If they try to log on via the Horizon Client, they will see the following:

You can see in the Server: box highlighted in the preceding screenshot, that the https:// address of the Connection Server is colored red, has been crossed out, and a warning symbol is displayed on the padlock, all indicating that there is no trusted certificate installed.

Now that we have created and installed a certificate on the Connection Server, in order for Horizon View to pick up the installed certificate, you need to restart the View Connection Server service in Windows services. To do this, follow these steps:

  1. Open a Run dialog box, and in the Run dialog box, type services.msc to open the Services (Local) screen. Scroll down to the entry for VMware Horizon View Connection Server (1), as shown in the following screenshot:

  1. Select the option for VMware Horizon View Connection Server, right-click, and then from the contextual menu, click on Restart (2). Once the VMware Horizon View Connection Server service has restarted, you can log in to the View Administrator again, and check the certificate has been applied.
  1. To do this, once you have logged in, from the Dashboard, and under System Health, click on Connection Servers to expand this section, and then click on the Connection Server HZN7-CS1 (3), or the server onto which you have just installed the certificate. In the Connection Server Details box that pops up, you will now see that the SSL certificate is shown as Valid (4) and that the error boxes have now changed from red to green:

  1. Finally, click on OK to close the dialog box for the Connection Server Details and then log out of the View Administrator.

You have now successfully created and installed a certificate for Horizon View. Don't forget that you need to install a certificate on all of the Horizon View components, such as any Replica Servers or View Composer servers.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset