To configure this for TLS 1.2 only the attribute should look like this. Pae-ClientSSLSecureProtocols attribute lists the security protocols configured for the default global proposal policy. Pae-ServerSSLCipherSuites = \LIST:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA Configure this setting based on cipher suites that are supported by clients. Pae-ServerSSLCipherSuites attribute lists the cipher suites configured for the default global acceptance policy. Pae-ServerSSLSecureProtocols = \LIST:TLSv1.2 Pae-ServerSLLSecureProtocols attribute lists the security protocols configured for the default global acceptance policy.
Each policy is a single-valued attribute in the following View LDAP location: cn=common, ou=global, ou=properties, dc=vdi, dc=vmware, dc=int.
#VMWARE HORIZON VIEW CLIENT CANNOT CONNECT TO SERVER HOW TO#
For those that don't know how to connect to the View ADAM DB Click Here. To configure the default global policies this process is done in the View ADAM DB. Finally how to configure the view agent on the desktops.
Then how to apply the settings on a individual server. We will first review the process of setting up the default global policies. The process to do this is the same for both a Horizon View Connection Server and a Security Server. I can not stress this one more if you make the changes and one of your client types will not support TLS 1.2 those users will not be able to connect to your Horizon View Environment.ĥ) (Optional) Test all the changes in your devlopment Horizon View Environment before making the changes in production.Ĭonfiguring Security Protocols and Cipher Suites on View Connection Server and Security Servers This can be found in install_directory\VMware\VMware View\Server\sslgateway\conf\ģ) Take a backup of the View ADAM DB (KB for Backup Process Click Here)Ĥ) Check TLS 1.2 compliance for all your client types and versions. I would recommend trying to implement this in your Horizon View environment if you can support the higher security requirements.ġ) Create backups of your servers using your desired backup tool.Ģ) Backup your locked.properties file on each of your Servers. This is going to focus on setting up Horizon View 7.x to run TLS 1.2 only including Blast Secure Gateway (BSG) and PCoIP protocol.
0 kommentar(er)
