Horizon Installation - VMware Horizon 2106

1 Horizon InstallationVMware Horizon 2106 You can find the most up-to-date technical documentation on the VMware website at: , Hillview Alto, CA 2021 VMware , Inc. All rights reserved. Copyright and trademark InstallationVMware, Installation71 System Requirements for Server Components8 Horizon Connection Server Requirements8 Hardware Requirements for Horizon Connection Server8 Supported Operating Systems for Horizon Connection Server9 Virtualization Software Requirements for Horizon Connection Server9 Network Requirements for Replicated Horizon Connection Server Instances9 Horizon Console Requirements102 System Requirements for Guest Operating Systems11 Requirements and Considerations for Horizon Agent11 Remote Display Protocol and Software Support113 Preparing Active Directory12 configuring Domains and Trust Relationships12 Trust

2 Relationships and Domain Filtering14 Creating an OU for Remote Desktops14 Creating OUs and Groups for Kiosk Mode Client Accounts15 Creating Groups for Users15 Creating a User Account for vCenter Server15 Create a User Account for Instant-Clone Operations15 Configure the Restricted Groups Policy16 Using VMware Horizon Group Policy Administrative Template Files17 Prepare Active Directory for Smart Card Authentication17 Add UPNs for Smart Card Users18 Add the Root Certificate to Trusted Root Certification Authorities18 Add an Intermediate Certificate to Intermediate Certification Authorities19 Add the Root Certificate to the Enterprise NTAuth Store20 Disable Weak Ciphers in SSL/TLS204 Installing Horizon Connection Server22 Installing the Horizon Connection Server Software22 Installation Prerequisites for Horizon Connection Server23 Install Horizon Connection Server with a New Configuration24 Install Horizon Connection Server Silently28 Silent Installation Properties for a Horizon Connection Server Standard Installation30 Install a Replicated Instance of Horizon Connection Server31 VMware .

3 A Replicated Instance of Horizon Connection Server Silently35 Silent Installation Properties for a Replicated Instance of Horizon Connection Server37 Unified Access Gateway Appliance Advantages over VPN38 Horizon LDAP40 Firewall Rules for Horizon Connection Server41 Reinstall Horizon Connection Server with a Backup Configuration42 Microsoft Windows Installer Command-Line Options43 Uninstalling VMware Horizon Components Silently by Using MSI Command-Line Options465 configuring TLS Certificates for VMware Horizon Servers48 Understanding TLS Certificates for VMware Horizon Servers49 Overview of Tasks for Setting Up TLS Certificates50 Obtaining a Signed TLS Certificate from a CA51 Obtain a Signed Certificate from a Windows Domain or Enterprise CA52 Configure Horizon Connection Server to Use a New TLS Certificate53 Add the Certificate Snap-In to MMC54 Import a Signed Server Certificate into a Windows Certificate Store55 Modify the Certificate Friendly Name56 Import a Root Certificate and Intermediate Certificates into a Windows Certificate Store57 Configure Client Endpoints to Trust Root and Intermediate Certificates58 Configure Horizon Client for Mac to Trust Root and Intermediate Certificates59 Configure

4 Horizon Client for iOS to Trust Root and Intermediate Certificates60 configuring Certificate Revocation Checking on Server Certificates60 Configure the PCoIP Secure Gateway to Use a New TLS Certificate62 Verify That the Server Name Matches the PSG Certificate Subject Name63 Configure a PSG Certificate in the Windows Certificate Store63 Set the PSG Certificate Friendly Name in the Windows Registry65 Force a CA-Signed Certificate to Be Used for Connections to the PSG66 Setting Horizon Console to Trust a vCenter Server Certificate67 Accept the Thumbprint of a Default TLS Certificate67 Benefits of Using TLS Certificates Signed by a CA68 Update the Certificates on a Connection Server Instance69 Troubleshooting Certificate Issues on Horizon Connection Server706 configuring VMware Horizon for the First Time72 configuring an Instant Clone Domain Administrator in Active Directory72 configuring User Accounts for vCenter Server73 Configure a vCenter Server User for VMware Horizon73 Privileges Required for the vCenter Server User Without Instant Clones74 Privileges Required for the vCenter Server User With Instant Clones75 configuring Horizon Connection Server for the First Time77 Horizon InstallationVMware.

5 Console and Horizon Connection Server77 Log In to Horizon Console78 Install the Perpetual Product License Key in Horizon Console79 Enabling VMware Horizon for Subscription Licenses and Horizon Control Plane Services80 Add vCenter Server Instances to VMware Horizon81 Register Gateways in Horizon Console83 Add an Instant-Clone Domain Administrator83 configuring View Storage Accelerator for vCenter Server84 Concurrent Operations Limits for vCenter Server85 Setting a Concurrent Power Operations Rate to Support Remote Desktop Logon Storms86 Accept the Thumbprint of a Default TLS Certificate87 configuring Horizon Client Connections88 Configure the Secure Tunnel and PCoIP Secure Gateway89 Configure the Blast Secure Gateway90 Set the External URLs for Horizon Connection Server Instances92 Give Preference to DNS Names When Horizon Connection Server Returns Address Information93 Allow HTML Access Through a Load Balancer94 Allow HTML Access Through a Gateway94 Configure the VMware Horizon Web Portal Page for End Users95 Replacing Default Ports for VMware Horizon Services99 Replace the Default HTTP Ports or NICs for Horizon Connection Server Instances99 Replace the Default Ports or NICs for the PCoIP Secure Gateway on Horizon

6 Connection Server Instances101 Replace the Default Control Port for PCoIP Secure Gateway on Connection Server Instances102 Change the Port Number for HTTP Redirection to Connection Server103 Prevent HTTP Redirection for Client Connections to Connection Server103 Enable Remote Access to VMware Horizon Performance Counters on Connection Servers104 Sizing Windows Server Settings to Support Your Deployment104 Sizing Memory for Horizon Connection Server104 Configure the System Page-File Settings1057 Deploying VMware Horizon on VMware Cloud on AWS1078 Deploying VMware Horizon on Azure VMware Solution1089 Deploying VMware Horizon on VMware Cloud on Dell EMC10910 configuring Event Reporting in Horizon Console110 Horizon InstallationVMware.

7 A Database and Database User for VMware Horizon Events in Horizon Console110 Prepare an SQL Server Database for Event Reporting in Horizon Console111 Prepare a PostgreSQL Database for Event Reporting in Horizon Console112 Configure the Event Database in Horizon Console112 SSL Connection to Event Database115 Configure Event Logging to File or Syslog Server in Horizon Console11511 Installing VMware Horizon in an IPv6 Environment117 Setting Up VMware Horizon in an IPv6 Environment117 Supported vSphere, Database, and Active Directory Versions in an IPv6 Environment118 Supported Operating Systems for VMware Horizon Servers in an IPv6 Environment118 Supported Windows Operating Systems for Desktops and RDS Hosts in an IPv6 Environment118 Supported clients in an IPv6 Environment119 Supported Remoting Protocols in an IPv6 Environment119 Supported Authentication Types in an IPv6 Environment119 Other Supported Features in an IPv6 Environment12012 Installing VMware Horizon in FIPS Mode123 Overview of Setting Up VMware Horizon in FIPS Mode123 System Requirements for FIPS Mode124 Horizon InstallationVMware.

8 InstallationHorizon Installation explains how to install the VMware Horizon server, agent, and client AudienceThis information is intended for anyone who wants to install VMware Horizon . The information is written for experienced Windows or Linux system administrators who are familiar with virtual machine technology and datacenter , Requirements for Server Components1 Hosts that run VMware Horizon server components must meet specific hardware and software chapter includes the following topics:nHorizon Connection Server RequirementsnHorizon Console RequirementsHorizon Connection Server RequirementsHorizon Connection Server acts as a broker for client connections by authenticating and then directing incoming user requests to the appropriate remote desktops and applications.

9 Horizon Connection Server has specific hardware, operating system, Installation , and supporting software Requirements for Horizon Connection ServerYou must install all Horizon Connection Server Installation types, including standard, replica, and enrollment server installations, on a dedicated physical or virtual machine that meets specific hardware Operating Systems for Horizon Connection ServerYou must install Horizon Connection Server on a supported Windows Server operating Software Requirements for Horizon Connection ServerIf you choose to deploy VMware Horizon in a VMware virtualized environment some minimum version of the virtualization software is Requirements for Replicated Horizon Connection Server InstancesWhen installing replicated Horizon Connection Server instances.

10 You must usually configure the instances in the same physical location and connect them over a high-performance Requirements for Horizon Connection ServerYou must install all Horizon Connection Server instal