

If FIPS is not configured in your operating system, this option will not display for you.Įnter a data recovery password and re-enter it. You will likely want to choose Enabled for FIPS compliant cryptography. If you are in the Federal Government, your systems most likely are Federal Information Processing Standards (FIPS) compliant. You can leave the Install HTML Access checkbox selected, but know that if your users use Smart Cards, they will not be able to use HTML. This same dialog works for Horizon 8, the UI will just say Horizon Standard Server instead of Horizon 7 Standard Server and Horizon Replica Server instead of Horizon 7 Replica Server. For subsequent, or replica servers, choose Horizon 7 Replica Server. Leave the default installation location or change if necessary.įor the first Connection Server, choose Horizon 7 Standard Server. Using an administrative account, double-click the VMware Horizon Connection Server installer.Īnswer the optional User Account Control window.Ĭhoose the I accept the terms in the license agreement radio button. Installing VMware Horizon Connection Server Software A user account on the local computer cannot be used. Expand System Tools > expand Local Users and Groups > click Groups folders.ĭouble-click the Administrators folder and add the Active Directory Service Account. Open the Computer Management console ( compmgmt.msc). Once installed, right-click the certificate, choose properties, and change the Friendly name to vdm, making sure vdm is lowercase.Ī service account should be added to the local administrator security group as a fail-safe way to log in. Blast Secure Gateway logs ( C:\ProgramData\VMware\VDM\logs\Blast Secure Gateway) will report that the private key is not accessible if this step is forgotten. The private key is required to bring up the VMware Horizon View Blast Secure Gateway service. If you forget this step, just import the certificate again. Make sure that you check the box to Mark this key as exportable. Open the Certificates – Local Machine ( certlm.msc) console and install the machine certificate. If you are going to use a load balancer, ensure the load balanced fully qualified domain name is in the Common Name (CN) attribute of the certificate and each Horizon Connection server’s fully qualified domain name is added to the Subject Alternative Name (SAN) attribute of the certificate.

During the installation, if a machine certificate is already installed, it will be used. You should use a Certificate Authority (CA) signed certificate for the computer account and store it in the Personal certificate store before installing VMware Horizon Connection server. When you install VMware Horizon Connection Server, a self-signed certificate will be installed into the Personal certificate store.
