Hi,

For the past 2 years we have been using Microsoft roaming profiles to manage our profiles for our horizon view desktops. because we have 5-600 staff we have 6 servers storing profiles and redirected folders. We have group policies that say, if you are a member of prof1, store your settings and folders on server prof1. This works quite well but we do keep getting problems whereby users get temporary profiles every so often.

So I have been looking at using persona management.

This works well if you only have one server storing profiles. The group policy for persona management/Roaming & Synchronization is a computer setting and not a user setting. Obviously when we set up windows roaming profiles, we can do it per user and assign them to different servers.

I could set up one pool of desktops for each profile server, with its own OU and put group policies in that OU, but that would be a pain as at present we tend to have pools of desktops set up per department.

I thought about ue-v with folder redirection, but that seems to set up a new profile each time the user logs on??

Does anyone else have a setup with multiple profile servers?

Hope that all makes sense....

Steve.

I am unable to click on the HTML Access Client and get to my resources on the connection server through Chrome i get a "Failed to connect to Connection Server" But again this only happens in Chrome. Any suggestions?

Thanks all!

Hi,

We are setting up View 7 with keeping fail over and HA our main priority in our design we have ran into an issue.

We have two data centers have the following set up in each one.

1 PSC

1 vCenter appliance

10 esxi host

2 connection servers

1 Composer Server

1 Persona Server (DFS to the other site)

We are going to use the Cloud POD option.

We have a virtual IP address to load balance the 2 connection servers at each site together. However were are trying to figure out how to tie all 4 (two connection servers at each site together).

For example....DC01 has view01 and view03 tied to a vIP, DC02 has view04 and view06 to a vIP.... are we able to make yet another VIP that ties those two vIP's together?

We want to do this so that we can point our zero clients at one address and the user can get to what ever home site we set.

We currently have a VMware Horizon View 5.3 environment. I have been having some performance issues that we are troubleshooting and I just needed some more information on the plateau stat in the pcoip_server logs.

I have read the definition and that it says it is the maximum bandwidth consumed by PCoIP, but I am not sure I totally understand it in terms of troubleshooting.

For instance:

Limit=300

Plateau=60

Can this be hurting the PCoIP session's performance since the plateau is low? Or do I really have 300kbps for my session?

Thanks!

Hello

I know 2 factor authentication configuration.

When I configurate it, all view user need to 2 factor authentication.

I want to user 2 factor authentication for some users.

Example:

For external users using 2 factor authentication (domain and radius).

For internal users only using domain authentication.

How to configre it?

vCenter, vSphere: 5.5

View: 5.3

Please help me.

Thanks.

Hello All,

I have installed a CA in my environment that I use to deploy certificates.  I have created and imported a certificate on my vcenter server.  When I https to vcenter with Chrome, I see that everything is good with the secure connection and I can verify that it is indeed using the certificate that I created.

When I add the vcenter server in Horizon View Administrator, it shows up with a Red square beside it and says that the certificate is Untrusted and Invalid.  I can click the Verify button it says the server's identity has verified correctly.  It shows me the same certificate that I use when i access the vcenter console through https  (verified the serial number and thumbprint are the same).  When I click OK after the identity was verified it still shows up in Red.

Does anyone know what the problem might be?  Also, I have set the logs to debug mode but there are no errors in it.  Where are SSL errors logged in this application??!!

Thanks

Jason

Hey All,

I have a Base image with office on it with UEM and AppVols (writable) and when i login to the Base VM i am able to launch my Outlook and it uses a rule i created in UEM to create my OST in my writable. Now when i Recompose and push this out to my Desktop Pools i login again and then try to launch outlook and it says cant connect to Exchange Server. I then delete my OST and my mail profile and try to create the OST again and it say the same.

Do i need to take the Base Image off the Domain prior to recompose? Has anyone seen this before? I am running Office 2010x64 and Exchange 2010 and have tested office 32 and that seems to have the same results on the recompose.

Thanks all !

Hello,

We have an Access Point 2.8 going into a small DMZ with a single flat 192 network publishing out Horizon 6.2. Using the two IP option seemed like a sensible approach and I have one IP with the rules open to reach the back end servers and another hosting a NAT from the internet facing firewall. However, the documentation states:

"With two network interfaces, external traffic is on one subnet, and internal and management traffic are on another subnet."

Now we obviously we only have one subnet and as a result I have not configured any additional routes during on the access point deployment.

Is a two IP configuration supported on a single subnet? I agree it has somewhat limited advantages but is slightly more secure than using a single IP.

Thanks.

The instructions for installing the Skype plug-in call for installing the certificate that was generated when installing the Skype server.  Does anybody know what the certificate is called.

Hi Friends,

I would like to know how can we redirect my .OST file to network share link (for example N:\share\userprofile\%username%\....) because I don't want to use writable volumes.

so far I created on ADMX file for outlook cache which looks like below

under OST location option inside, I used my network share (eg: N:\share\userprofile\%username%\....) but I can't able to write my .ost file at specified location (network share).

and also when every I open the outlook I am seeing the one small MS office configuring pop up screen for 20 seconds!

please try to help me

Thanks

Hi View Community,

We're seeing a couple instances where new MacBook Pro 15" Touchbar models are having their View client crash or just display a blank screen.   This does not seem to happen with just a single external display attached.

I have a case open with support, but no solution has been forthcoming.

Thanks

I have a set up with two connection servers (A and B), a Security server  and a farm.  Connection server A handles all the internal connections while connection server B handles all the external connections through the security server.  Suddenly, no one can connect from outside.  If I connect to connetion server B from insider our network, directly (not going through the security server) it works fine.  If I connect to the security server from inside or outside, it will connect to the connection server, and show me the applications that I have access to, but when I try to launch any of them, it gets as far as saying "A connection  has been established and the application is loading"  but then times out or says "The connection to the remote computer ended"  I have looked through several of the windows event logs on all three servers Security, connection B and the farm, but cannot find any reason the applications will no load if I am going through the security server.  It worked last week and I don't know what has changed.

Any help that can even point me in the right direction would be greatly appreciated.

Bob

My server is Windows Server 2012R2, after finished the Horizon View 7 server install, couldn't open the Horizon view admin page. I check the netstat, and the port 443 didn't opened.

Check the vdm log in the /programdata/vmware/vmd/logs, a lot of warning in the log files.

I tried the Windows Server 2008R2, tried the Horizon View 6.2, and the warning is same.

The warning information is below, and I upload the log file.

2017-02-20T07:54:09.518+08:00 INFO  (0C8C-0FEC) <SwiftMQ-ConnectorPool-1> [CertificateUtils] Adding bouncy castle security provider

2017-02-20T07:54:09.674+08:00 WARN  (0C8C-0FEC) <SwiftMQ-ConnectorPool-1> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:09.768+08:00 WARN  (0C8C-0FEC) <SwiftMQ-ConnectorPool-1> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:09.815+08:00 WARN  (0C8C-0C60) <SwiftMQ-ConnectorPool-2> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:09.877+08:00 WARN  (0C8C-0FEC) <SwiftMQ-ConnectorPool-1> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:09.924+08:00 WARN  (0C8C-0304) <SwiftMQ-ConnectorPool-3> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:13.565+08:00 INFO  (0DB8-0DB0) <localhost-startStop-1> [BrokerMessageSecurity] Changing message security mode to: ENHANCED

2017-02-20T07:54:13.565+08:00 INFO  (0DB8-0DB0) <localhost-startStop-1> [BrokerMessageSecurity] Generating new broker message security keys

2017-02-20T07:54:13.565+08:00 INFO  (0DB8-0DB0) <localhost-startStop-1> [BrokerMessageSecurity] Switching message security ENHANCED by default

2017-02-20T07:54:14.221+08:00 INFO  (0DB8-0CEC) <SwiftMQ-ConnectorPool-1> [CertificateUtils] Adding bouncy castle security provider

2017-02-20T07:54:14.284+08:00 WARN  (0DB8-0CEC) <SwiftMQ-ConnectorPool-1> [BrokerSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:14.924+08:00 WARN  (0C8C-0FEC) <SwiftMQ-ConnectorPool-1> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:14.971+08:00 WARN  (0C8C-04F4) <SwiftMQ-ConnectorPool-5> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:15.018+08:00 WARN  (0C8C-08D4) <SwiftMQ-ConnectorPool-6> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:15.065+08:00 WARN  (0C8C-0304) <SwiftMQ-ConnectorPool-3> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:15.112+08:00 WARN  (0C8C-0358) <SwiftMQ-ConnectorPool-4> [JMSTunnelSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:15.315+08:00 WARN  (0DB8-0D48) <TrackerJMSReceiver> [CommonCertificateManager] Found certificate with incorrect identity, deleting: #1e1a00620072006f006b00650072002f00760063006f006e005f0031

2017-02-20T07:54:15.596+08:00 WARN  (0DB8-06A0) <SwiftMQ-ConnectorPool-2> [BrokerSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:16.596+08:00 WARN  (0DB8-0D48) <TrackerJMSReceiver> [CommonCertificateManager] Found certificate with incorrect identity, deleting: #1e1a00620072006f006b00650072002f00760063006f006e005f0031

2017-02-20T07:54:16.800+08:00 WARN  (0DB8-06A0) <SwiftMQ-ConnectorPool-2> [BrokerSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:17.800+08:00 WARN  (0DB8-0D48) <TrackerJMSReceiver> [CommonCertificateManager] Found certificate with incorrect identity, deleting: #1e1a00620072006f006b00650072002f00760063006f006e005f0031

2017-02-20T07:54:18.034+08:00 WARN  (0DB8-06A0) <SwiftMQ-ConnectorPool-2> [BrokerSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

2017-02-20T07:54:19.034+08:00 WARN  (0DB8-0D48) <TrackerJMSReceiver> [CommonCertificateManager] Found certificate with incorrect identity, deleting: #1e1a00620072006f006b00650072002f00760063006f006e005f0031

2017-02-20T07:54:19.393+08:00 WARN  (0DB8-06A0) <SwiftMQ-ConnectorPool-2> [BrokerSSLSocketFactory] Badly formatted identity presented: #1e1a0072006f0075007400650072002f00760063006f006e005f0031

Hey all!

Quick question.

What does everyone think about deleting vs refresh during log off when talking about non-persistent virtual machines?

I know with delete, you tend to have more host cpu utilization and what not during log off storms.

My question is...what's the benefit of using each of them? Pros and Cons of each.

Thanks in advance,

David Nolen

We have RSA enabled on an RDP server. RSA prompts the user when they RDP from the standard Windows RDP client. We have added this server as an RDS Desktop Pool. When users log in via RDP via the Horizon Client, they are not prompted for RSA  credentials. Is this normal behavior? Can it be stopped?

I have a strange problem - I can't connect through VMWare Horizon Client in one environment, getting a "network error" message.

• I can connect through browser - when I click on a machine and choose my client to open it with, same thing happens.
• I can connect in another OS (Ubuntu 16.10) on the same machine, so it's not network problem
• I can connect on another machine with the same OS (Windows 10 x64)

While it might still be a firewall problem, I tried connecting with windows firewall turned off and antivirus disabled, so I don't know what else could be blocking it.

Part of log file for connection failing:

2017-02-21 00:46:47.024+01:00 INFO (3230) [WinCDK] BrokerItem::Connect : [User] Enter ConnectToServer:vdi.bottomline.com.

2017-02-21 00:46:47.024+01:00 INFO (3230) [WinCDK] Services::LogOffServer : [User] Enter Services::LogOffServer.

2017-02-21 00:46:47.024+01:00 INFO (3230) [libcdk] Disconnecting from broker https://vdi.bottomline.com:443/broker/xml

2017-02-21 00:46:47.024+01:00 INFO (3230) [libcdk] CdkUtil_SetLocalAddress: fd -1 < 0, not retrieving local address.

2017-02-21 00:46:47.025+01:00 INFO (3230) [WinCDK] Services::LogOffServer : [User] Exit  Services::LogOffServer.

2017-02-21 00:46:47.026+01:00 INFO (3230) [WinCDK] AppWindow::EnterWindowState : Valid transition from state 'Disconnected' to state 'Connecting'.

2017-02-21 00:46:47.060+01:00 INFO (3230) [WinCDK] BrokerItem::Connect : [User] Exit  ConnectToServer:vdi.bottomline.com.

2017-02-21 00:46:47.060+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetLaunchItemsTask(TODO) added, group task num:1, total task num:1.

2017-02-21 00:46:47.060+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetUserGlobalPreferencesTask(TODO) added, group task num:2, total task num:2.

2017-02-21 00:46:47.062+01:00 DEBUG (0948) [(null)] CDKProxy_GetProxyInternal: Enter WinHttpGetProxyForUrl.

2017-02-21 00:46:47.062+01:00 DEBUG (0948) [(null)] CDKProxy_GetProxyInternal: Failed to get WinHTTP proxy info with error 0x00002f94.

2017-02-21 00:46:47.073+01:00 DEBUG (3230) [(null)] CdkProxy_GetProxyForUrl: Got the proxy and return to main message loop.

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetTunnelConnectionTask(TODO) added, group task num:3, total task num:3.

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: Group Tasks(3):CdkGetLaunchItemsTask(TODO),CdkGetUserGlobalPreferencesTask(TODO),CdkGetTunnelConnectionTask(TODO),

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetConfigurationTask(TODO) added, group task num:1, total task num:4.

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: CdkSetLocaleTask(TODO) added, group task num:2, total task num:5.

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: Group Tasks(2):CdkGetConfigurationTask(TODO),CdkSetLocaleTask(TODO),

2017-02-21 00:46:47.073+01:00 INFO (3230) [libcdk] TaskCombiner: CreateRequest for CdkSetLocaleTask(REDY).

2017-02-21 00:46:47.089+01:00 INFO (3230) [libcdk] CdkUtil_SetLocalAddress: local ip address 192.168.0.16 is being picked.

2017-02-21 00:46:47.089+01:00 INFO (3230) [libcdk] Send request successful: 0385B6F0

2017-02-21 00:46:47.406+01:00 INFO (3230) [libcdk] Verify server's certificate for Request 0386B590

2017-02-21 00:46:47.406+01:00 INFO (3230) [libcdk] Find rpc request 0386B590 from list

2017-02-21 00:46:47.407+01:00 INFO (3230) [libcdk] Alt name 0 matches hostname vdi.bottomline.com

2017-02-21 00:46:47.407+01:00 INFO (3230) [libcdk] Found a valid EKU: TLS Web Server Authentication

2017-02-21 00:47:06.976+01:00 INFO (3230) [libcdk] CdkRpc_HandleResponsesAsync: Handle Response with rpc call id: 3.

2017-02-21 00:47:06.976+01:00 INFO (3230) [libcdk] Got a response to request 3.

2017-02-21 00:47:06.977+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetLaunchItemsTask(FAIL) removed, group task num:2, total task num:4.

2017-02-21 00:47:06.977+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetUserGlobalPreferencesTask(FAIL) removed, group task num:1, total task num:3.

2017-02-21 00:47:06.977+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetTunnelConnectionTask(FAIL) removed, group task num:0, total task num:2.

2017-02-21 00:47:06.977+01:00 INFO (3230) [libcdk] TaskCombiner: CdkGetConfigurationTask(FAIL) removed, group task num:1, total task num:1.

2017-02-21 00:47:06.977+01:00 INFO (3230) [WinCDK] Services::ErrorCallback : Error(Taskname:CdkSetLocaleTask, domain:52, code:48) Callback: Entry.

And for comparison, part of log file connecting to the same server on a different machine, where it works:

2017-02-21 10:09:55.076+01:00 INFO (A614) [WinCDK] BrokerItem::Connect : [User] Enter ConnectToServer:vdi.bottomline.com.

2017-02-21 10:09:55.076+01:00 INFO (A614) [WinCDK] Services::LogOffServer : [User] Enter Services::LogOffServer.

2017-02-21 10:09:55.078+01:00 INFO (A614) [WinCDK] Services::LogOffServer : [User] Exit  Services::LogOffServer.

2017-02-21 10:09:55.080+01:00 INFO (A614) [WinCDK] AppWindow::EnterWindowState : Valid transition from state 'Disconnected' to state 'Connecting'.

2017-02-21 10:09:55.157+01:00 INFO (A614) [WinCDK] BrokerItem::Connect : [User] Exit  ConnectToServer:vdi.bottomline.com.

2017-02-21 10:09:55.157+01:00 INFO (A614) [libcdk] TaskCombiner: CdkGetLaunchItemsTask(TODO) added, group task num:1, total task num:1.

2017-02-21 10:09:55.157+01:00 INFO (A614) [libcdk] TaskCombiner: CdkGetUserGlobalPreferencesTask(TODO) added, group task num:2, total task num:2.

2017-02-21 10:09:55.165+01:00 DEBUG (D5C8) [(null)] CDKProxy_GetProxyInternal: Enter WinHttpGetProxyForUrl.

2017-02-21 10:09:55.165+01:00 DEBUG (D5C8) [(null)] CDKProxy_GetProxyInternal: Failed to get WinHTTP proxy info with error 0x00002f94.

2017-02-21 10:09:55.201+01:00 DEBUG (A614) [(null)] CdkProxy_GetProxyForUrl: Got the proxy and return to main message loop.

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: CdkGetTunnelConnectionTask(TODO) added, group task num:3, total task num:3.

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: Group Tasks(3):CdkGetLaunchItemsTask(TODO),CdkGetUserGlobalPreferencesTask(TODO),CdkGetTunnelConnectionTask(TODO),

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: CdkGetConfigurationTask(TODO) added, group task num:1, total task num:4.

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: CdkSetLocaleTask(TODO) added, group task num:2, total task num:5.

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: Group Tasks(2):CdkGetConfigurationTask(TODO),CdkSetLocaleTask(TODO),

2017-02-21 10:09:55.201+01:00 INFO (A614) [libcdk] TaskCombiner: CreateRequest for CdkSetLocaleTask(REDY).

2017-02-21 10:09:55.213+01:00 INFO (A614) [libcdk] CdkUtil_SetLocalAddress: local ip address 172.26.129.14 is being picked.

2017-02-21 10:09:55.213+01:00 INFO (A614) [libcdk] Send request successful: 04199940

2017-02-21 10:09:55.511+01:00 INFO (A614) [libcdk] Verify server's certificate for Request 041BA818

2017-02-21 10:09:55.511+01:00 INFO (A614) [libcdk] Find rpc request 041BA818 from list

2017-02-21 10:09:55.599+01:00 INFO (A614) [libcdk] Alt name 0 matches hostname vdi.bottomline.com

2017-02-21 10:09:55.599+01:00 INFO (A614) [libcdk] Found a valid EKU: TLS Web Server Authentication

2017-02-21 10:09:55.963+01:00 INFO (A614) [libcdk] CdkRpc_HandleResponsesAsync: Handle Response with rpc call id: 1.

2017-02-21 10:09:55.963+01:00 INFO (A614) [libcdk] Got a response to request 1.

2017-02-21 10:09:55.963+01:00 INFO (A614) [libcdk] TaskCombiner: ParseResult for CdkSetLocaleTask(PEND).

2017-02-21 10:09:55.963+01:00 INFO (A614) [libcdk] TaskCombiner: CdkSetLocaleTask(DONE) removed, group task num:1, total task num:4.

2017-02-21 10:09:55.963+01:00 INFO (A614) [libcdk] TaskCombiner: SetResult for CdkSetLocaleTask(DONE).

2017-02-21 10:09:55.967+01:00 INFO (A614) [libcdk] Alt name 0 matches hostname vdi.bottomline.com

2017-02-21 10:09:55.967+01:00 INFO (A614) [libcdk] Found a valid EKU: TLS Web Server Authentication

2017-02-21 10:09:55.967+01:00 INFO (A614) [WinCDK] Services::AuthInfoLoadCallback : Secureid_Passcode Callback: Entry.

2017-02-21 10:09:55.967+01:00 INFO (A614) [WinCDK] Services::AuthInfoLoadCallback : Secureid_Passcode Callback: Exit.

2017-02-21 10:09:55.971+01:00 INFO (A614) [WinCDK] Services::AuthInfoCallback : Secureid_Passcode Callback: Entry.

2017-02-21 10:09:55.971+01:00 INFO (A614) [WinCDK] Services::AuthInfoCallback : Secureid_Passcode Callback: Exit.

2017-02-21 10:09:55.971+01:00 INFO (A614) [WinCDK] Services::TaskDoneCallback : CdkGetConfigurationTask Callback: Entry.

2017-02-21 10:09:55.971+01:00 INFO (A614) [WinCDK] Services::TaskDoneCallback : CdkGetConfigurationTask Callback: Exit.

2017-02-21 10:09:55.971+01:00 INFO (A614) [libcdk] TaskCombiner: CdkGetConfigurationTask(DONE) removed, group task num:0, total task num:3.

2017-02-21 10:09:55.971+01:00 INFO (A614) [libcdk] TaskCombiner: SetResult for CdkGetConfigurationTask(DONE).

2017-02-21 10:09:56.031+01:00 INFO (A614) [WinCDK] AuthDlg::OnInitDialog : [User] Enter Init.

2017-02-21 10:09:56.055+01:00 INFO (A614) [WinCDK] AuthDlg::UpdateWindowState : Update auth dialog. The auth type is CDK_AUTH_INFO_TYPE_SECURID_PASSCODE.

2017-02-21 10:09:56.064+01:00 INFO (A614) [WinCDK] AuthDlg::OnInitDialog : [User] Exit  Init.

As far as I can tell everything works exactly the same until "[libcdk] Found a valid EKU: TLS Web Server Authentication" line, where one unexpectedly fails.

For security reasons we would like to remove all mention of our internal domains from the Horizon View Client login screen (ie the drop down menu on the login page).

I have used the vdmadmin command to remove all domains (including the primary one which is the only domain our users would actually login from), but the single primary domain still appears in the list.

We would prefer our users to have to login with a text string of <domain>\<username> or <username>@<domain> and to show no domain in the drop down box of the login screen.

Is this possible, and if so, how do I achieve this?

Thanks and Regards

Gary

Hi,

When I install the VMWare Horizonclient using the following command, it doesn't add the server.

The user has to add it through "New Server" option. Is there a way to fix this?.

VMware-Horizon-Client-4.3.0-4710077.exe /s /v"/qn ADDLOCAL=Core,TSSO LOGINASCURRENTUSER_DISPLAY=1 LOGINASCURRENTUSER_DEFAULT=1 DESKTOP_SHORTCUT=1 STARTMENU_SHORTCUT=1 VDM_SERVER=horizon-dev.MY.com /l*v "%TEMP%\log.txt""

Thanks

Hi,

Is there any documentation in the attributes available to customize the Horizon Client for iOS ? For example server, protocol,...to fully deploy to the app to devices with all the settings needed in place.

Thank you

Regards

Need some help guys.

We use smart card and my job for authentication.

I have successfully setup Horizon View 7 to prompt for smart card and log into our VDI desktops, that all works 100%.

However I am unable to use my smart card to log into the Horizon View Administrator Web page.

When I hit the admin page it immediate finds gives me a list of my badge certs to choose from, then after selecting the right one (I've tried both that are presented to me) it asks for my PIN. After that it just thinks for a second and dumps me to the login page where I'm forced to use a traditional username/password to login.

I've imported the entire cert chain into my truststorefile.key

Here's what I'm seeing in the logs (edited bold for security reasons):

Reading certificate: UID=14001003227121 + CN=MY NAME (Affiliate), OU=XXX for privacy, OU=XXX for privacy, O=XXX for privacy, C=XXX for privacy

Extracted User Principal Name = MY NAME from cert

Skipping unrecognised SAN of type 6 with value: urn:uuid:XXXX

Reading certificate: OU=Entrust Managed Services SSP CA, OU=Certification Authorities, O=Entrust, C=US

No SubjectAlternativeName found

Reading certificate: OU=Entrust Managed Services Root CA, OU=Certification Authorities, O=Entrust, C=US

No SubjectAlternativeName found

Peer verified as: UID=XXX+CN=MY NAME (Affiliate),OU=XXX for privacy,OU=XXX for privacy,O=XXX for privacy,C=XXX for privacy

Request from /10.71.224.53: POST /admin/amfproxy/amfsecure

Appending UPNs: [MY NAME]

Adding vdmClientUPNsSigned to headers: long random string

Appending UPNs: [UID=XXX+CN=MY NAME (Affiliate),OU=XXX for privacy,OU=XXX for privacy,O=XXX for privacy, C=XXX for privacy, OU=Entrust Managed Services SSP CA,OU=Certification Authorities,O=Entrust,C=US, OU=Entrust Managed Services Root CA,OU=Certification Authorities,O=Entrust,C=US]

Adding vdmClientSubjectDnsSigned to headers:long random string

Gateway headers sent to the broker:

gateway-type = [SG-cohosted]

gateway-location = [Internal]

<ajp-nio-8009-exec-9> [ViewFlexFactory] com.vmware.vdi.admin.ui.LoginBean.getDomains 1 ms

<ajp-nio-8009-exec-9> [ViewFlexFactory] com.vmware.vdi.admin.ui.VersionInfoBean.getShortVersion 0 ms

<AJP-73> [SimpleAJPService] (ajp:admin:Request12) Response 200 200