Defense Logistics Agency. Virtual Desktop: User Guide

Transcription

1 Defense Logistics Agency Virtual Desktop: Effective 04

2 TABLE OF CONTENTS Introduction... 3 Section 1: Virtual Desktop Overview Virtual Desktop Background... 4 Section 2: Device Type - Thin Client Purpose Thin Client Usage Overview Thin Client Hardware Overview Thin Client Software Overview Thin Client Login Instructions Thin Client Log Off Instructions Section 3: Device Type Repurposed Laptop/Desktop, Government Furnished Equipment (GFE) Purpose Repurposed Laptop/Desktop Usage Overview Repurposed Laptop/Desktop Hardware Overview Repurposed Laptop/Desktop Software Overview Repurposed Laptop/Desktop Login Instructions Repurposed Laptop/Desktop Log Off Instructions Section 4: Device Type Traditional Laptop/Desktop, Government Furnished Equipment (GFE) Purpose Traditional Laptop/Desktop Usage Overview Traditional Laptop/Desktop Hardware Overview Traditional Laptop/Desktop Software Overview Traditional Laptop/Desktop Login Instructions Laptop/Desktop (GFE) Log Off Instructions Section 5: Device Type Laptop/Desktop Contractor Furnished Equipment (CFE)/Personal Equipment (PE) Purpose Laptop/Desktop (CFE/PE) Usage Overview Laptop/Desktop (CFE/PE) User Hardware Overview Laptop/Desktop (CFE/PE) User Software Recommendations Laptop/Desktop (CFE/PE) Login Instructions Laptop/Desktop (CFE/PE) Log Off Instructions Home Use Printing Appendix Support Virtual Desktop 2

3 Introduction This user guide is intended to provide all DLA Virtual Desktop users with Virtual Desktop background information, instructions for accessing the Virtual Desktop, and usage information for the specific devices that will access the Virtual Desktop. Readers of this user guide are assumed to have a basic knowledge of operating a personal computer and have received all required certificates (i.e. CAC credentials and PIN) to access DLA s secured network. The Virtual Desktop can be accessed from any computing device that has an internet connection. Accessing the Virtual Desktop allows the user to view their workstation desktop virtually via a terminal machine rather than a local device (i.e. traditional desktop/laptop). This user guide will outline the procedures for accessing the Virtual Desktop from the following devices: Thin Client Repurposed Laptop/Desktop (Government Furnished Equipment) Traditional Laptop/Desktop (Government Furnished Equipment) Contractor Furnished Equipment (CFE) / Personal Equipment (PE) DLA Administrators will identify the device type each user will use (i.e. one of the four machines listed above). Note: Active sessions within the Virtual Desktop can be transferred between the above devices. For example, a user can log into the Virtual Desktop on one device, disconnect, and log in with a different device, and see the same active applications left running on the previous device. Device Usage Policy: Please note the following usage policies for the endpoints that will access the Virtual Desktop: Device HP mt41 Mobile Thin Client HP t620 Thin Client Traditional Laptop Traditional Desktop Repurposed Laptop* Repurposed Desktop* Contractor Equipment Personal Equipment Policy Approved for DLA office usage with wired/wi-fi connection, approved for telework usage Approved for DLA office usage with wired/wi-fi connection, not approved for telework usage Approved for DLA office usage with wired/wi-fi connection, approved for telework usage Approved for DLA office usage with wired connection, not approved for telework usage Approved for DLA office usage with wired/wi-fi connection, approved for telework usage Approved for DLA office usage with wired connection, not approved for telework usage Approved for DLA office usage with Wi-Fi Connection, approved for telework usage Not approved for DLA office usage, approved for telework usage *User can identify that their traditional laptop / desktop is repurposed by powering on device and looking for the Windows ThinPC logo on bottom of the Login page (i.e. Ctrl+Alt+Delete prompt page) Virtual Desktop 3

4 Section 1: Virtual Desktop Overview 1.1 Virtual Desktop Background Virtual Desktop is a capability that moves computer processing and storage away from local devices (laptop/desktops) and into the data center. The benefits of implementing Virtual Desktops into the DLA landscape include improved end user agility (i.e. access to desktop anytime from anywhere), operational efficiencies (i.e. capital and operational costs), and improved security (i.e. no data at rest on lost devices). The below diagram depicts the infrastructure of a Virtual Desktop: Users Data Center User s Data Citrix XenApp/XenDesktop Screen Images Keystrokes Warehouse Workers System Administrators Office Workers (Stationary) Office Workers (Can Telework) Virtual Desktop 4

5 Section 2: Device Type - Thin Client 2.1 Purpose Provide an overview of the hardware, software, and steps to access the Virtual Desktop from a thin client. 2.2 Thin Client Usage Overview The following are two types of Thin Client endpoints that are used to access the Virtual Desktop: HP mt41 Mobile Thin Client Laptop can be used in the office with wired DLA network and Wi-Fi connection. The Mobile Thin Client is approved for telework usage. HP t620 Flexible Thin Client can be used in the office with wired DLA network and Wi-Fi connection. The HP t620 Flexible Thin Client is not approved for telework usage. 2.3 Thin Client Hardware Overview The thin client serves as an access point to the Virtual Desktop (i.e. takes a user s log in request and connects to the desktop virtually) that contains the user s workstation desktop. The thin client has a streamlined and configurable operating system and has limited storage. It can support wired or Wi-Fi connections depending on the model. Specifically, the HP mt41 Mobile Thin Client will support both wired and Wi-Fi connections, and the HP t620 Flexible Thin Client will support only wired connections. The following sections will outline all accessories and additional hardware required to use a thin client and the steps required to access the Virtual Desktop: As of August 2015, DLA is using the HP mt41 Mobile Thin Client and the HP t620 Flexible Thin Client, and repurposed desktop endpoints. Virtual Desktop 5

6 HP mt41 Mobile Thin Client I. At a Glance Left Side View Front View Right Side View Power Adapter Port 2 USB Ports CAC Ethernet Reader Power Button 2 USB Ports Headphone Display Port VGA Port Lockdown port II. Accessories The following accessories are included with the HP mt41 Mobile Thin Client: Image Description Power Cord Docking Station Virtual Desktop 6

7 HP 90W Docking Station I. At a Glance Power Button Front View Laptop Eject Button Docking Station Cable Lock Slot Monitor Stand Port Back View DVI Port Parallel Port Power Adapter Port Security Cable Slot 3 USB Ports II. Accessories Security Cable Slot Audio Serial Port VGA Port In/Out Mouse Connector / Keyboard Connector Display Port 2 USB Ports Ethernet The following accessories are included with the HP 90W Docking Station: Image Description Power Cord Virtual Desktop 7

8 HP t620 Flexible Thin Client I. At a Glance Side View Front View Back View Power Button 2 USB 2.0 Ports 2 USB 3.0 Ports Microphone Headphone 2 USB 2.0 Ports 2 Display Ports VGA Port Power Adapter Port Ethernet Keyboard 2 PS/2 / Ports Mouse Inputs Audio In/Out Lockdown port II. Accessories The following accessories are included with the HP t620 Flexible Thin Client: Image Description Power Cord Display Port to DVI Adapter Virtual Desktop 8

9 III. Additional Hardware Required The following hardware is required for end users to use the HP t620 Flexible Thin Client to complete daily tasks: Image Description Monitor Keyboard with built-in CAC Reader Mouse 2.4 Thin Client Software Overview All software required for the Thin Client is DLA-managed. End user will not need to install any software. The equipment will come configured with all proper installs. Virtual Desktop 9

10 2.5 Thin Client Login Instructions The following steps outline the Virtual Desktop login process using either the HP mt41 Mobile Thin Client and HP t620 Flexible Thin Client: Note: There are two separate login instructions documented for users that will connect via DLA network (Internal) or Wireless network (External) DLA Network (Internal) a. Press the keystroke Ctrl+Alt+Delete SCREEN: Screen displays the ThinPC login image b. Select OK SCREEN: Screen displays the US Department of Defense Warning Statement Virtual Desktop 10

11 c. Insert CAC into the SmartCard Reader SCREEN: Screen displays the ThinPC Smart Card Input Screen d. Enter PIN SCREEN: Screen displays the ThinPC PIN Input Virtual Desktop 11

12 e. Select VDI Launcher Internal SCREEN: Screen displays the Virtual Desktop Internal/External Login methods f. Select DLA Standard Desktop Note: The DLA Standard Desktop will auto-launch for most users SCREEN: Screen displays the Citrix Receiver Desktop Options Virtual Desktop 12

13 g. Choose the DOD certificate and Select OK SCREEN: Screen displays the DOD Certificate options h. Select OK SCREEN: Screen displays the DOD Warning Statement Virtual Desktop 13

14 Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop Wireless Network (External) a. Press the keystroke Ctrl+Alt+Delete SCREEN: Screen displays the ThinPC login image Virtual Desktop 14

15 b. Select OK SCREEN: Screen displays the US Department of Defense Warning Statement c. Insert CAC into the SmartCard Reader SCREEN: Screen displays the ThinPC Smart Card Input Screen Virtual Desktop 15

16 d. Enter PIN SCREEN: Screen displays the ThinPC PIN Input e. Select the Network Options Icon in the lower righthand corner of the screen SCREEN: Screen displays the Virtual Desktop Internal/External Login methods Virtual Desktop 16

17 f. Select Wireless Network and choose Connect Note: list is dependent on wireless options available SCREEN: Screen displays the Virtual Desktop Internal/External Login methods g. Enter Wireless Network Password and choose OK SCREEN: Screen displays the Virtual Desktop Internal/External Login methods Virtual Desktop 17

18 h. Select Appropriate Location SCREEN: Screen displays the Virtual Desktop Internal/External Login methods a i. Select Connect Note: User will not receive a Splash Page if connecting to Wi-Fi at home SCREEN: Screen displays an example of a splash page that a user may encounter when launching the Virtual Desktop from a public place (i.e. hotel, airport, etc.) Virtual Desktop 18

19 j. Select VDI Launcher External SCREEN: Screen displays the Virtual Desktop Internal/External Login methods k. Select the I Agree With The Statements Above button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to accept the use of a U.S Government (USG) Information System (IS) Virtual Desktop 19

20 l. Select the VDI LOGIN button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to Login m. Select DLA Standard Desktop Note: The DLA Standard Desktop will auto-launch for most users SCREEN: Screen displays the Citrix Receiver Desktop Options Virtual Desktop 20

21 n. Choose the DOD certificate and Select OK SCREEN: Screen displays the DOD Certificate options o. Select OK SCREEN: Screen displays the DOD Warning Statement Virtual Desktop 21

22 Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop 2.6 Thin Client Log Off Instructions I. Log-Off the Virtual Desktop Note: Users following this method will terminate the active Virtual Desktop session (i.e. they will not be able to transfer their session to another device) and shut down the Thin Client a. Select the Windows button in the lower lefthand corner of the screen (within Virtual Desktop session) SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop Virtual Desktop 22

23 b. Select the Log Off button (within Virtual Desktop session) SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop c. Select Start Menu and Select the Log Off button (on local machine) SCREEN: Screen displays the local machine desktop II. Removing CAC Remove CAC from CAC Reader - Users following this method will disconnect the active Virtual Desktop session, but will not terminate (i.e. they will be able to transfer their session to another device; sessions will be automatically logged off after 3 hours of inactivity) Note: Virtual Desktop session will close. Virtual Desktop 23

24 Section 3: Device Type Repurposed Laptop/Desktop, Government Furnished Equipment (GFE) 3.1 Purpose Provide an overview of the hardware, software, and steps to access the Virtual Desktop from a repurposed laptop/desktop. 3.2 Repurposed Laptop/Desktop Usage Overview The following are two types of repurposed endpoints that are used to access the Virtual Desktop: Repurposed Laptop is a traditional laptop that has been repurposed for Virtual Desktop access only. It can be used in the office with the wired DLA and wireless network. The repurposed laptop is approved for telework usage. Repurposed Desktop is a traditional desktop that has been repurposed for Virtual Desktop access only. It can only be used in the office with a wired DLA network connection. The repurposed desktop is not approved for telework usage. 3.3 Repurposed Laptop/Desktop Hardware Overview All users using repurposed laptops/desktops will be provided with all necessary attachments and accessories to use the Virtual Desktop. 3.4 Repurposed Laptop/Desktop Software Overview All software required for the GFEs (laptops or desktops) are DLA-managed. End user will not need to install any software. The equipment will come configured with all proper installs. Virtual Desktop 24

25 3.5 Repurposed Laptop/Desktop Login Instructions The following steps outline the Virtual Desktop login process using a traditional laptop/desktop: Note: There are two separate login instructions documented for users that will connect via DLA network (Internal) or Wireless network (External) DLA Network (Internal) a. Press the keystroke Ctrl+Alt+Delete SCREEN: Screen displays the ThinPC login image b. Select OK SCREEN: Screen displays the US Department of Defense Warning Statement Virtual Desktop 25

26 c. Insert CAC into the SmartCard Reader SCREEN: Screen displays the ThinPC Smart Card Input Screen d. Enter PIN SCREEN: Screen displays the ThinPC PIN Input Virtual Desktop 26

27 e. Select VDI Launcher Internal SCREEN: Screen displays the Virtual Desktop Internal/External Login methods f. Select DLA Standard Desktop Note: The DLA Standard Desktop will auto-launch for most users SCREEN: Screen displays the Citrix Receiver Desktop Options Virtual Desktop 27

28 g. Choose the DOD certificate and Select OK SCREEN: Screen displays the DOD Certificate options h. Select OK SCREEN: Screen displays the DOD Warning Statement Virtual Desktop 28

29 Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop Wireless Network (External) a. Press the keystroke Ctrl+Alt+Delete SCREEN: Screen displays the ThinPC login image Virtual Desktop 29

30 b. Select OK SCREEN: Screen displays the US Department of Defense Warning Statement c. Insert CAC into the SmartCard Reader SCREEN: Screen displays the ThinPC Smart Card Input Screen Virtual Desktop 30

31 d. Enter PIN SCREEN: Screen displays the ThinPC PIN Input e. Select the Network Options Icon in the lower righthand corner of the screen SCREEN: Screen displays the Virtual Desktop Internal/External Login methods Virtual Desktop 31

32 f. Select Wireless Network and choose Connect Note: list is dependent on wireless options available SCREEN: Screen displays the Virtual Desktop Internal/External Login methods g. Enter Wireless Network Password and choose OK SCREEN: Screen displays the Virtual Desktop Internal/External Login methods Virtual Desktop 32

33 h. Select Appropriate Location SCREEN: Screen displays the Virtual Desktop Internal/External Login methods a i. Select Connect Note: User will not receive a Splash Page if connecting to Wi-Fi at home SCREEN: Screen displays an example of a splash page that a user may encounter when launching the Virtual Desktop from a public place (i.e. hotel, airport, etc.) Virtual Desktop 33

34 j. Select VDI Launcher External SCREEN: Screen displays the Virtual Desktop Internal/External Login methods k. Select the I Agree With The Statements Above button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to accept the use of a U.S Government (USG) Information System (IS) Virtual Desktop 34

35 l. Select the VDI LOGIN button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to Login m. Select DLA Standard Desktop Note: The DLA Standard Desktop will auto-launch for most users SCREEN: Screen displays the Citrix Receiver Desktop Options Virtual Desktop 35

36 n. Choose the DOD certificate and Select OK SCREEN: Screen displays the DOD Certificate options o. Select OK SCREEN: Screen displays the DOD Warning Statement Virtual Desktop 36

37 Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop 3.6 Repurposed Laptop/Desktop Log Off Instructions I. Log-Off the Virtual Desktop Note: Users following this method will terminate the active Virtual Desktop session (i.e. they will not be able to transfer their session to another device) and shut down the Thin Client. a. Select the Windows button in the lower lefthand corner of the screen (within Virtual Desktop session) SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop Virtual Desktop 37

38 b. Select the Log Off button (within Virtual Desktop session) SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop c. Select Start Menu and Select the Log Off button (on local machine) SCREEN: Screen displays the local machine desktop Virtual Desktop 38

39 Section 4: Device Type Traditional Laptop/Desktop, Government Furnished Equipment (GFE) 4.1 Purpose Provide an overview of the hardware, software, and steps to access the Virtual Desktop from a traditional laptop/desktop (GFE). 4.2 Traditional Laptop/Desktop Usage Overview The following are two types of traditional endpoints that are used to access the Virtual Desktop: Traditional Laptop that was originally supplied by DLA can be used in the office with wired DLA network and Wi-Fi connection. The traditional laptop is approved for telework usage. Traditional Desktop that was originally supplied by DLA can only be used in the office with wired DLA network connection. The traditional desktop is not approved for telework usage. Users can continue to use their traditional laptop that was provided to them by DLA (if applicable) or use their personal computers at home to telework (see Section 6). 4.3 Traditional Laptop/Desktop Hardware Overview All users using traditional laptops/desktops will be provided with all necessary attachments and accessories to use the Virtual Desktop. 4.4 Traditional Laptop/Desktop Software Overview All software required for the GFEs (laptops or desktops) are DLA-managed. End user will not need to install any software. The equipment will come configured with all proper installs. Virtual Desktop 39

40 4.5 Traditional Laptop/Desktop Login Instructions The following steps outline the Virtual Desktop login process using a traditional laptop/desktop: a. Ensure CAC is inserted into CAC Reader b. Open Internet Explorer and select Certificate SCREEN: Screen displays Internet Explorer Windows Security c. Enter the following URL: SCREEN: Screen displays Internet Explorer Virtual Desktop 40

41 d. Choose the DOD certificate and Select OK SCREEN: Screen displays the Virtual Desktop Certificate Options e. Choose DLA Standard Desktop Note: DLA Standard Desktop may open automatically SCREEN: Screen displays the Virtual Desktop options available for the user Virtual Desktop 41

42 f. Select OK SCREEN: Screen displays the DOD Warning Statement g. Select the SmartCard Login option Note: To avoid the request being timed-out select the SmartCard Login option as the CAC is being read and do not navigate from the window until login process is successful SCREEN: Screen displays the Virtual Desktop Citrix Receiver requesting the user to select the SmartCard Login option Virtual Desktop 42

43 h. Enter PIN number SCREEN: Screen displays the Virtual Desktop Citrix Receiver requesting the user to enter their PIN Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop Note: To switch between local machine and Virtual Desktop, expand the Desktop Viewer Drop Down option at the top of the page and choose Home SCREEN: Screen displays the Desktop Viewer Drop Down option Virtual Desktop 43

44 4.6 Laptop/Desktop (GFE) Log Off Instructions Users can log-off of the Virtual Desktop by following the steps below: I. Log-Off Virtual Desktop Note: Users following this method will terminate the active Virtual Desktop session (i.e. they will not be able to transfer their session to another device) a. Select the Windows button in the lower lefthand corner of the screen SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop a. Select the Log Off button SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop Virtual Desktop 44

45 II. Removing CAC Note: Users following this method will disconnect the active Virtual Desktop session (i.e. they will be able to transfer their session to another device; sessions will be automatically logged off after 3 hours of inactivity) a. Remove CAC from CAC Reader Note: Virtual Desktop session will close. Virtual Desktop 45

46 Section 5: Device Type Laptop/Desktop Contractor Furnished Equipment (CFE)/Personal Equipment (PE) 5.1 Purpose Provide an overview of the hardware, software, and steps to access the Virtual Desktop solution from a laptop/desktop (CFE/PE). 5.2 Laptop/Desktop (CFE/PE) Usage Overview The following outlines the usage overview for CFE/PE when accessing the Virtual Desktop: CFE/PE can be used on a non-government network connections (i.e. home network, coffee shop network, contractor office network, etc.) CFEs are approved for telework usage. Personal Equipment is not approved for DLA office usage, but is approved for telework usage. 5.3 Laptop/Desktop (CFE/PE) User Hardware Overview There are a wide range of CFEs and personal machines that can be used to access the Virtual Desktop. The following list outlines the necessary hardware required to access the Virtual Desktop from either a CFE or personal machine: Desktop Computer or Laptop CAC Reader Ethernet port (with active internet connection) or Wi-Fi Virtual Desktop 46

47 5.4 Laptop/Desktop (CFE/PE) User Software Recommendations Risks There are potential risks associated with installing prerequisite software components (i.e., ActivClient, Citrix Receiver, DOD Root Certificates) and using the remote access system. It is not possible to test these components with all software and/or applications that are commercially available and that may be on your home computer. Therefore, it is possible that the prerequisite software components could conflict with other applications or software residing on your home computer. Use of this capability on your personal non-government-furnished computer is at your own risk. Disclaimer of Liability With respect to installing prerequisite software components or using the remote access solution, neither the DOD, DLA, nor any employees within, provide any warranty, expressed or implied, or assume any legal or financial liability or responsibility for your non-government computer system and/or damages or repairs that may result from system incompatibilities with the remote access solution. By installing prerequisite software and using this product, you signify your agreement to the preceding terms and conditions. If you do not agree to these terms and conditions, do not install or use this product. Help Desk Support All liability for issues and troubleshooting non-gfe is the responsibility of the end user. The DLA Enterprise Help Desk will not provide support for issues with hardware/software not provided by DLA, including but not limited to non-gfe hardware, non-dla networks (e.g., home routers, public hot spots), and non-dla software compatibility issues with Citrix. DLA Enterprise Help Desk resources will support troubleshooting issues that are not related to the non-gfe hardware/software, including but not limited to accounts, DLA applications, and server-side issues. Virtual Desktop 47

48 Personal machines or CFEs running on Windows XP, Windows Vista, Windows 7, Windows 8/8.1, Windows 10 or the latest versions of Mac OS can be used to access the Virtual Desktop. Use the tables below to identify the recommended browser the user should use based on the operating system currently installed on the device. Note: It is highly recommended to use one of following combinations, as deviation could result in performance issues or inability to connect to the Virtual Desktop. Operating System Windows bit Editions Windows bit Editions Windows 7 Service Pack 1(SP1) 64-bit Editions Windows 7 Service Pack 1(SP1) 32-bit Editions Windows 8 64-bit Editions Windows 8 32-bit Editions Windows 7 Service Pack 1(SP1) 64-bit Editions Windows 8 Service Pack 1(SP1) 32-bit Editions Windows 7 64-bit or higher Windows 7 32-bit or higher Windows Vista 32-bit Editions with Service Pack 2 Windows Vista 64-bit Editions with Service Pack 2 Internet Explorer 11.x or later (32-bit mode) Internet Explorer 10.x or later (32-bit mode) Internet Explorer 9.x or later (32-bit mode) Browser Operating System Windows 7 64-bit Editions Windows 7 32-bit Editions Windows XP Professional with Service Pack 3 Windows XP Professional x64 Edition with Service Pack 2 Windows Vista 32-bit Editions with Service Pack 2 Windows Vista 64-bit Editions with Service Pack 2 Mac OS X Mavericks 10.9.x Windows 7 64-bit Editions Windows 7 32-bit Editions Windows XP Professional with Service Pack 3 Windows XP Professional x64 Edition with Service Pack 3 Windows Vista 32-bit Editions with Service Pack 2 Windows Vista 64-bit Editions with Service Pack 2 Internet Explorer 8.x (32-bit mode) Safari 7.0.x Browser Mozilla Firefox 4.x (32-bit mode) Windows XP Professional x32 Edition with Service Pack 3 Windows Vista 32-bit Editions with Service Pack 2 Windows 7 32-bit Editions Red Hat Enterprise Linux 5.4 Desktop Mozilla Firefox 3.x Virtual Desktop 48

49 Before connecting to the Virtual Desktop for the first time, certificates and client software will need to be installed. These are available on the DLA Enterprise Remote Access login page (i.e. The procedures outlined below provide users with the steps required to ensure all proper software is downloaded: Note: The following steps outline the process of downloading the appropriate software in Internet Explorer. The user will need to use the proper web browser based on the operating system installed on the machine (i.e. outlined in above table). Following these steps will result in a necessary machine reboot once completed. a. Connect your Common Access Card (CAC) Reader to an available USB Port on your CFE/Personal Computer System (Desktop/Laptop) b. Turn on your CFE/PE (Desktop/Laptop) c. Launch the Internet browser d. Validate that the required security protocols are enabled - From Internet Explorer, select Tools and then Internet Options Note: If the Tools option isn t visible, then while in the browser select the ALT key on the keyboard and the Tools option will become visible SCREEN: Screen displays the expanded Tools options in Internet Explorer Virtual Desktop 49

50 e. When the Internet Options window appears select the Advanced tab and ensure Use SSL 3.0 and Use TLS 1.0 are checked in the Security section. Select OK, close the Internet browser, and open a new Internet browser window. SCREEN: Screen displays the Advanced tab within the Internet Explorer Internet Options settings f. Insert CAC into CAC Reader g. In your Internet browser, navigate to the DLA Enterprise Remote Access login page (URL below) to access pre-requisite files for download. Enter following URL: Note: The first time navigating to this page, the user may see a warning message similar to the website below. If this appears, select Continue to this Web site (not recommended) SCREEN: Screen displays the Security Certificate Warning requesting the user to close this webpage or continue to this webpage Virtual Desktop 50

51 h. Select the I Agree with the Statements Above button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to accept the use of a U.S Government (USG) Information System (IS) i. On the screen below you will see two links for components that need to be installed prior to establishing a connection to the Virtual Desktop from each machine for the first time: SCREEN: Screen displays the DLA Enterprise Remote Access Webpage outlining the required software installs Virtual Desktop 51

52 j. Download DOD Root Certificates Select DOD Root Certificates (Windows/Mac depending on machine) Select Save when prompted Save this file to the computer, and after download is complete, locate file, right click on file, and select Run as Administrator. This exe file will install all required DOD Certificates to the appropriate location on your machine. These certificates are required to be installed on a machine when using a CAC. You may see two prompts issuing a security warning. These warnings are standard, and if you accept them, you should click Yes on both. Note: Clicking No will prevent the machine from accessing the Virtual Desktop SCREEN: Screen displays the DLA Enterprise Remote Access Webpage outlining the required software installs SCREEN: Screen displays the Security Warning prompts requesting the user to accept Virtual Desktop 52

53 k. On the same page, Download Citrix Receiver Select Citrix Receiver (Windows/Mac depending on machine) When prompted, select Run and accept all defaults. SCREEN: Screen displays the DLA Enterprise Remote Access Webpage outlining the required software installs Note: The Citrix Receiver is required to establish a secure connection with Citrix. This client supports Mac, Windows XP, Vista, and Windows 7/8/8.1 operating systems. l. Download ActivIdentity ActivClient request the latest version of ActivClient from your local IT support Note: there are two choices of ActivClient to install, which are based on the configuration of your operating system: 32 bit 64 bit Virtual Desktop 53

54 Users can verify the version of your operating system by right-clicking the My Computer icon on your Desktop, and selecting Properties SCREEN: Screen displays the Computer Drives and the properties of the Computer On the screen that appears, it should state 32-bit or 64-bit Operating System. SCREEN: Screen displays the properties of the Computer Virtual Desktop 54

55 m. Update Trusted Sites Open Internet Explorer browser Select Tools and then Internet Options SCREEN: Screen displays the Internet Explorer Browser OR n. Select the Security tab SCREEN: Screen displays the Internet Options Virtual Desktop 55

56 o. Select the Trusted Sites and select Sites SCREEN: Screen displays the Internet Options Security p. Enter ( * asterisk; followed by a. Period; then dla.mil ) Select Add and Close SCREEN: Screen displays the Trusted Sites Virtual Desktop 56

57 q. Select Apply and OK SCREEN: Screen displays the Internet Options Security r. Update Compatibility View Settings Open Internet Explorer browser Select Tools and then Compatibility View Settings SCREEN: Screen displays the Internet Explorer Browser OR Virtual Desktop 57

58 s. Enter dla.mil, Select Add, and then Close SCREEN: Screen displays the Internet Options Security Note: Internet Explorer is now ready to be used. t. Reboot the computer after all prerequisite components have been installed Note: All required software is now available on the machine and user can proceed to the login process outlined below. 5.5 Laptop/Desktop (CFE/PE) Login Instructions The following steps outline the Virtual Desktop login process using a CFE/Personal Machine: Note: The following steps outline the process of logging in using Internet Explorer. User will need to use the proper web browser based on the operating system installed on the machine. a. Insert CAC into CAC Reader b. Open Internet Explorer c. Enter the following URL: Virtual Desktop 58

59 d. Select the I Agree With The Statements Above button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to accept the use of a U.S Government (USG) Information System (IS) e. Select the VDI LOGIN button SCREEN: Screen displays the DLA Enterprise Remote Access Webpage requesting user to Login Virtual Desktop 59

60 f. Choose the DOD certificate and Select OK SCREEN: Screen displays the Virtual Desktop Certificate Options g. Enter PIN SCREEN: Screen displays the PIN prompt h. Choose DLA Standard Desktop Note: DLA Standard Desktop may open automatically SCREEN: Screen displays the Virtual Desktop options available for the user Virtual Desktop 60

61 i. Select OK SCREEN: Screen displays the DOD Warning Statement j. Select the SmartCard Login option Note: To avoid the request being timed-out select the SmartCard Login option as the CAC is being read and do not navigate from the window until login process is successful SCREEN: Screen displays the Virtual Desktop Citrix Receiver requesting the user to select the SmartCard Login option Virtual Desktop 61

62 k. Enter PIN number SCREEN: Screen displays the Virtual Desktop Citrix Receiver requesting the user to enter their PIN Note: The Virtual Desktop is available to use, just as a user would navigate a traditional desktop SCREEN: Screen displays the Virtual Desktop Note: To switch between local machine and Virtual Desktop, expand the Desktop Viewer Drop Down at the top of the page and choose Home SCREEN: Screen displays the Desktop Viewer Drop Down option Virtual Desktop 62

63 5.6 Laptop/Desktop (CFE/PE) Log Off Instructions Users can log off of the Virtual Desktop by following one of the two outlined methods below. I. Log-Off the Virtual Desktop Note: Users following this method will terminate the active Virtual Desktop session (i.e. they will not be able to transfer their session to another device) a. Select the Windows button in the lower lefthand corner of the screen SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop b. Select the Log Off button SCREEN: Screen displays the Virtual Desktop; user can navigate the desktop similarly to their traditional desktop Virtual Desktop 63

64 II. Removing CAC Note: Users following this method will disconnect the active Virtual Desktop session (i.e. they will be able to transfer their session to another device; sessions will be automatically logged off after 3 hours of inactivity) a. Remove CAC from CAC Reader Note: Virtual Desktop session will close. 5.7 Home Use Printing Printing from home in Citrix when using your own computer can be done with a wireless connection to your printer, however, DLA cannot offer any technical support for connecting your own personal computer to your own personal printer. To print in Citrix: a. In the Citrix environment, make sure the printer is the default printer: Virtual Desktop 64

65 b. Open the document that you want to print and select File, and then Print Note: If the document doesn t print or if the printer is not set as the default, you may get an EMF viewer. An EMF Viewer will open outside of the Citrix environment; look for it in the task bar. c. Open the EMF Viewer and Select the Print button Virtual Desktop 65

66 d. If a Select Printer window opens, select the appropriate printer and select Print. Note: Printing from home in Citrix when using your government computer must be done with a wired connection to your printer, more information on connecting a wired printer can be found in the Home Use Printing How To. Once your home printer is connected to your government laptop and logged into the Citrix environment, the steps for printing are the same as above. Virtual Desktop 66

67 6.0 Appendix 6.1 Support DLA Enterprise Help Desk Support is available to provide any additional information concerning the Virtual Desktop implementation. Phone: (855) Virtual Desktop 67