With or without the useCertAuth=true setting toggled, all the VMware services seem to be running on the connection server. I've verified Windows has the Smart Card Logon and Client Authentication cert for this test user. VMware recommends using the Samba method for desktops. VMware recommends using the SSSD Authentication method (instead of Samba) for desktops running the following Linux distributions. When trying to launch the Horizon Administrator Console, Edge just says 'ERR_CONNECTION_REFUSED'. Samba only for desktops running older distributions, as described in the following note. Not only is this an issue, but with the useCertAuth=true in the locked.properties, I cannot connect to the web interface on my connection server. It sits there for ten seconds or so, then errors out with 'Error: Timeout was reached'. The green loading bar gets to about the 98% filled mark, then just stops. Now when I try to reconnect with the thin client, I get a different error. So, I do that and restart the connection server. Okay - I read that you have to add the useCertAuth=true parameter to your locked.properties on your connection server. When I log into Windows on the thin client with the YubiKey and try to connect to my connection server via the Horizon Client, I get the error 'Smart Card or Certificate authentication is required'. The best virtual desktop services of 2023 in full: Why you can trust TechRadar We spend hours testing every product or service we review, so you can be sure you’re buying the best. 'Use Secure Tunnel connection to machine' is also checked. In the connection server, the 'Smart card authentication for users' is set to Required and the smart card authentication for administrators is set to optional. I'll try to keep it concise while also giving as many details as possible. They pull up the Horizon Client, select the Horizon Connection Server, then log in with their YubiKey and access the VDI. How it ideally works is: user sticks YubiKey into physical thin client, logs into Windows. In this airgapped environment, we'll have 12 thin clients hooked up to 12 VDIs and we're using YubiKeys for user authentication. Build, test and demo software across an array of different devices, platforms and clouds. Thin Client: Windows 10 LTSC running Horizon Client 8.1.0 Run Windows, Linux and BSD virtual machines on a Windows or Linux desktop with VMware Workstation Pro. Horizon Connection Server: Windows Server 2019 runnig Horizon Connection Server 8.8, with a secondary server tethered to it for high availability
0 Comments
Leave a Reply. |