
View Manager Administration Guide
106 VMware, Inc.
Thecertificateisexportedtothespecifiedlocation.Youmustnowcarryoutthe
proceduredescribedin“ToconfiguretheViewConnectionServertousethenew
certificate”onpage 104.Ensurethatthekeypassentryinthelocked.propertiesfile
correspondstothepasswordyouusedwhenexportingthecertificate.
Smart Card Authentication
Someorganizationsrequirepersonneltopassmultiplestagesofauthenticationbefore
allowingthemtoconnecttotheirsystems.Viewprovidessupportforhigh‐security
environmentsbyofferingsmartcardauthenticationofclientsessions.
Smartcardauthenticationworksbypresentingatrustedsetofclientcredentials—a
usercertificate—toViewConnectionServer.A
usercertificateisanencryptedsetof
authenticationcredentialsthatincludesthedigitalsignatureofthetrustedroot
CertificateAuthority(CA)thatissuedthecertificate.
Theusercertificateisstoredonthesmartcardandcanonlyberetrievedandpassedto
theserveraftertheuserhasverifiedtheirownership
byenteringapersonal
identificationnumber(PIN).Certificatesarethenauthenticatedbyusingapublickey
toverifytheincludeddigitalsignature;theexpecteddigitalsignatureiscontainedina
trustedCAcertificatethatisstoredonViewConnectionServer.
Thisfollowingsectionsdescribehowtoconfigureandenablethisfeature
onView
ConnectionServer.
Smart Card Hardware
EachclientsystemusingsmartcardauthenticationwillrequireViewClientanda
Windows‐compatiblesmartcardreadertobeinstalled.
Inordertorecognizeandusethesmartcardhardware,product‐specificapplication
driversmustbeinstalledonboththeclientsystemsandremotedesktops.Smartcard
profilescanvary
betweenvendors;refertothedocumentationthataccompaniesthe
smartcardreaderformoreinformationabouthowtodothis.
NOTESmartcardauthenticationisonlysupportedbyViewClient;itisnotsupported
byViewAdministrator,ViewPortal,orbyofflinedesktopinstancesaccessedthrough
ViewClientwithOfflineDesktop.
Comentarios a estos manuales