Contact us at |support@ssldragon.com

How to install an SSL Certificate on VMWare Horizon View?

Wednesday, March 20th, 2019

This step by step guide shows how to generate a CSR code and install an SSL Certificate on VMWare Horizon View desktop virtualization. You will also learn a few interesting facts about VMware’s history, as well as discover the best place to shop for SSL Certificates.

If you’ve already ordered your SSL Certificate and don’t need to generate the CSR Code, feel free to jump straight to the installation instructions.

Generate a CSR Code on VMWare Horizon View
Install an SSL Certificate on VMWare Horizon View
Test your SSL installation
VMware Horizon View history and versions
Where to buy the best SSL Certificate for VMware Horizon View?

Generate a CSR Code on VMWare Horizon View

When applying for an SSL Certificate one of the first steps is to generate a CSR code and send it to your CA. CSR stands for Certificate Signing Request, a block of encoded code with your contact data.

To generate a CSR code on VMWare Horizon view, we’ll be using tools already installed on your Windows Server, specifically the Microsoft Management Certificates (MMC) snap-in. Please, follow the steps below to create your CSR code via MMC.

  1. On your Windows desktop click Start, and in the search box type mmc
  2. Click the mmc.exe icon
  3. Go to File > Add/Remove Snap-in, and then click on Certificates > Add > OK
  4. Now, select Computer account and click Next
  5. Make sure the Local Computer is selected then hit Finish and OK
  6. Next, under Local Computer expand the Certificates tree
  7. Right-click Personal, then click the following sequences: Select All Tasks > Advanced Operations > Create Custom Request
  8. In the Certificate Enrollment window click Next
  9. Select the option Proceed without enrolment policy and hit Next
  10. In the Custom Request window, from the drop-down list select (No Template) Legacy Key
  11. Select the PKCS#10 (Certification Request Standard) and click Next
  12. In the Certificate Information window, click on the arrow next to Details and select Properties
  13. In the General tab, in the Friendly name field, enter vdm
  14. Go to the Subject tab and provide the required details as shown below.

    Note: You need to click on Add after submitting the details for each type.

    • Common Name: type the FQDN (fully-qualified domain name) you want to secure with an SSL Certificate. For example, yoursite.com
    • Country: enter the two-letter code of your country. For instance, US. Here you can find the full list of country codes.
    • Locality: name the city where your company is officially registered. For example, Seattle
    • Organization: write the full, legal name of your company. For instance, GPI Holding LLC
    • Organizational unit: name the department in charge of your SSL Certificate. Generally, it’s IT or Web Administration
    • State: enter the state where your company is located. For example, Washington.
  15. Double-check the info you’ve just added then click OK
  16. Switch to the Private Key tab and click Key Options > Key Size and choose 2048 bits
  17. Now, click on Key Options and select the option Make Private Key Exportable. Click OK then Next
  18. Save the certreq.req file on your desktop
  19. You can open the certreq.req file with any text editor of your choice such as Notepad. During your SSL order, you will have to copy-paste your CSR code, including the BEGIN AND END tags into the corresponding field.

Install an SSL Certificate on VMWare Horizon View

After the CA signs your SSL Certificate, it will send all the necessary installation files to your email inbox. You need to download the ZIP folder and extract the SSL files. To import your certificate please follow the instructions below:

Add the Certificate Snap-In to MMC

  1. Log into your Connection/Security server and launch mmc.exe
  2. Navigate to File > Add/Remove Snap-in and select Certificates then hit Add
  3. In the Certificates snap-in window select Computer Account, then Next
  4. Select Local computer and click Finish
  5. In the Add or Remove snap-in window, click OK

Now, you need to import the TLS server certificate into the Windows local computer certificate store on the Windows Server host on which the Connection Server instance or security server service is installed.

Import your Server Certificate into a Windows Certificate Store

Depending on your certificate file format, you can import the entire certificate chain (the server certificate, intermediate certificate, and root certificate) that is contained in the Windows local computer certificate store.

  1. In the MMC window on the Windows Server host, expand the Certificates (Local Computer) and select the Personal folder.
  2. In the Actions pane, navigate to More Actions > All Tasks > Import.
  3. In the Certificate Import Wizard, click Next and browse to the directory of your SSL certificate.
  4. Select the certificate file and click Open.

    Note: To see your certificate file type, you can select its file format from the File name drop-down menu.

  5. Enter the password for the private key that is included in the certificate file.
  6. Select Mark this key as exportable.
  7. Select Include all extended properties.
  8. Click Next and click Finish. The new certificate will appear in the Certificates (Local Computer) > Personal > Certificates folder.
  9. Ensure that the new certificate contains a private key. Go to Certificates (Local Computer) > Personal > Certificates folder, and double-click the new certificate. In the General tab of the Certificate Information dialog box, verify that the following statement appears: You have a private key that corresponds to this certificate.

Modify the certificate’s friendly name

  1. In the MMC window on the Windows Server host, expand the Certificates (Local Computer) and select the Personal Certificates folder.
  2. Right-click the certificate that is issued to the Horizon server host and click Properties.
  3. On the General tab, replace the Friendly name with vdm.
  4. Click Apply and then OK.
  5. Make sure that no other server certificates in the Personal > Certificates folder have a Friendly name of vdm. If you find a certificate with a Friendly name of vdm, delete that name, click Apply and then click OK.

Next, you need to import the root certificate and intermediate certificates into the Windows local computer certificate store.

Import a Root Certificate and Intermediate Certificates into a Windows Certificate Store

  1. In the MMC console on the Windows Server host, expand the Certificates (Local Computer) and navigate to the Trusted Root Certification Authorities > Certificates folder.
  2. If your root certificate is in this folder, and there are no intermediate certificates in your certificate chain, skip to step 7.
  3. If your root certificate is not in this folder, continue with step 2.
  4. Right-click the Trusted Root Certification Authorities > Certificates folder and click All Tasks > Import.
  5. In the Certificate Import wizard, click Next and browse to the directory where the root CA certificate is located.
  6. Select the root CA certificate file and click Open.
  7. Click Next then Finish.
  8. If your server certificate was signed by an intermediate CA, import all intermediate certificates in the certificate chain into the Windows local computer certificate store.
  9. Go to the Certificates (Local Computer) > Intermediate Certification Authorities > Certificates folder.
  10. Repeat steps 3 through 6 for each intermediate certificate you need to import.
  11. Restart the server.

Congratulations, you’ve successfully added a new SSL Certificate to VMware Horizon View

Test your SSL Installation

After you install an SSL Certificate on VMWare Horizon View, grab one of these highly-rated SSL tools and run a diagnostic scan on your SSL configuration. In just a few seconds, the SSL tool will pinpoint all the existing vulnerabilities and potential errors.

VMWare Horizon View history and versions

VMware Horizon View is a commercial desktop virtualization product developed by VMware, Inc. Initially, it was sold under the name VMware VDM, then changed to VMware View, and, finally Horizon View with the release of version 6 in April 2014.

Listed below are the latest VMWare Horizon releases:

  • VMware Horizon 7.6 (Sep 6, 2018)
  • VMware Horizon 7.5.1 (July 19, 2018)
  • VMware Horizon 7.5 (May 29, 2018)
  • VMware Horizon 7.4 (Jan 04, 2018)
  • VMware Horizon 7.3.2 (November 20, 2017)
  • VMware Horizon 7.2 (Jun 20, 2017)
  • VMware Horizon 7.1 (March 16, 2017)
  • VMware Horizon 7.0.3 (December 8, 2016)
  • VMware Horizon 7.0.2 (September 15, 2016)
  • VMware Horizon 7.0.1 (June 16, 2016)

Where to buy the best SSL Certificate for VMWare Horizon View?

SSL dragon is your one-stop place for all your SSL needs. We offer the lowest prices on the market for the entire range of our SSL products. We’ve partnered with the best SSL brands in the industry to offer you high-end SSL security and dedicated support. All our SSL certificates are compatible with VMWare Horizon View servers. Here are the SSL certificate types you can buy from us:

To help you select the perfect SSL certificate, we created a couple of handy SSL tools. Our SSL Wizard can recommend the best SSL deal for your online project, while the Certificate Filter, can help you sort and compare different SSL certificates by price, validation, and features.

If you find any inaccuracies, or you have details to add to these SSL installation instructions, please feel free to send us your feedback at [email protected]. Your input would be greatly appreciated! Thank you.