Implementing Federal Personal Identity Verification for VMware View. By Bryan Salek, Federal Desktop Systems Engineer, VMware
|
|
- Robyn Owen
- 8 years ago
- Views:
Transcription
1 Implementing Federal Personal Identity Verification for VMware View By Bryan Salek, Federal Desktop Systems Engineer, VMware Technical WHITE PAPER
2 Introduction This guide explains how to implement authentication using federal Personal Identity Verification (PIV) access cards including Department of Defense (DoD) Common Access Card (CAC) in a VMware View environment. It provides a one-stop shop for federal PIV information relating to VMware View by including the essential steps here and referencing the authoritative sources in the VMware product documentation. It is intended to help organizations successfully configure VMware View environments to leverage PIV to access their virtual desktops. Background The U.S. federal government, under Homeland Security Presidential Directive 12 (HSPD 12), made it mandatory for all organizations to implement two-factor authentication for access to all federal buildings and information systems. HSPD 12 mandates that all federal employees and contractors have a Federal Information Processing Standard 201 (FIPS 201) PIV card. The DoD CAC and DoD Public Key Infrastructure (PKI) programs are being aligned to meet this additional set of requirements. According to a February 3, 2011, Office of Management and Budget (OMB) memo, all agencies were to have a documented implementation plan for PIV in place by March 31, Prerequisites This guide makes a few basic assumptions about the environment: Users have properly issued CAC or PIV smart cards with their certificates installed. The Active Directory and PKI components are already properly configured, and users are currently authenticating via their smart cards for access. Although it is not a prerequisite for enabling smart-card authentication, it is pertinent to address certificates for the server components of the architecture. You can replace the default certificates before or after enabling smart-card authentication, but it is recommended you make them separately and validate the configuration before implementing the other. Refer to pp of the View 4.5 Installation Guide for detailed procedures. 2 These assumptions are addressed in other sources and are out of scope for this guide. Limitations Be aware of the following limitations: Several versions of CAC and PIV credentials exist that vary in memory size and card type. Currently, T0 and T1 cards in are in circulation. T1 cards require upgrades to View 4.6 and PCoIP firmware v3.4 (if the environment uses zero clients). The VMware View Client for Mac OS X does not support smart-card authentication. When using smart-card authentication, users must log off before switching to a different display protocol. Checking the Log In As Current User option in the VMware View Client will cause the user to be prompted for a smart-card PIN a second time when connecting to Windows. If the Smart Card Authentication policy is set to Optional, Local Mode users must use smart-card authentication to access their desktops for the checkout operation. HP s RGS protocol is not supported with smart-card authentication. Process for Configuring VMware View The high-level overview of the process for configuring VMware View is 1. Prepare the parent image for smart-card authentication. 2. Configure Smart Card Authentication on each VMware View Connection Server. 3. Ensure that access endpoints leveraging the VMware View Client software have Cryptographic Service Provider (CSP) software installed. TECHNICAL WHITE PAPER / 2
3 Detailed instructions for these procedures follow. Configure the Parent Image for Smart-Card Authentication Refer to Chapter 4 of the VMware View 4.5 Administrator s Guide for detailed instructions on preparing a virtualmachine image for use in VMware View. 3 To ensure a successful implementation, it is critical that you install several components in the correct order during this process: 1. Install VMware Tools. 2. Install VMware View Agent with the custom PCoIP Smartcard Enabled setup option. 3. Install the.net Framework. (It is considered a best practice to install it after installing the View Agent to prevent any issues with application-specific graphics settings being modified during the View Agent installation.) 4. Install the ActivIdentity ActivClient software. Configure VMware View Connection Servers The procedures for configuring the Connection Servers (including Security Servers) comprise three main activities: Importing the certificate truststore Enabling the Smart Card Authentication setting Configuring certificate revocation checking Detailed instructions are included in the View Manager Administration Guide, in the sections entitled Creating a Truststore and Enable Smart Card Authentication in the Server. 4 Import the Certificates to the Truststore You must obtain the root and intermediate certificate authority (CA) certificate(s) for all users you want to access the environment. They can be obtained from the CA or from a user certificate. You must ensure that the system path includes the location of the key-management utility, keytool. The procedures are included on page 76 of the VMware View 4.5 Installation Guide. Go to Environment Variable, then System variables, and edit the Path to include C:\Program Files\VMware\VMware View\Server\jre\bin\. Next, add the certificate to a truststore file using the keytool utility, via the following syntax: Keytool import alias alias file root _ certificate keystore truststorefile.key In this command, alias is a unique case-insensitive name for a new entry in the truststore file. root _ certificate is the root certificate that you obtained or exported. truststorefile.key is the name of the truststore file that you are adding the root certificate to. If the file does not exist, it is created in the current directory. Repeat this process for all root certificates. Then copy the truststore file to the Connection Server at C:\Program Files\VMware\VMware View\Server\sslgateway\conf\. Next, edit or create a file called locked.properties in that same folder and set three parameters in the file: trustkeyfile=truststorefile.key truststoretype=jks usecertauth=true Note: If you have already replaced the default server certificates, locked.properties will already exist, and you can just edit the existing file. Copy the truststore and locked.properties files to the same folder location on each of the other Connection Servers you wish to use for smart-card authentication. TECHNICAL WHITE PAPER / 3
4 Enable Smart-Card Settings in View Administrator Go to Global Settings and verify that the Require SSL for Client Connections and View Administrator setting is selected. Then you must configure each Connection Server for smart-card authentication. For Security Servers, no additional action is required after the previous steps are completed. For standard Connection Servers, edit each server s Configuration page. Select the Authentication tab and set Smart Card Authentication to Required. (Federal mandates prohibit access to systems with normal Active Directory authentication.) Next set the Smart Card Removal Policy to either disconnect users from View upon removal or leave them connected. The best practice is to disconnect user sessions upon smart-card removal. However, be aware that if pools are set to log off on disconnect, users will be logged off each time the smart card is removed. It is also considered a best practice to enable group policy to lock the virtual desktops upon smart-card removal to prevent possible compromise of an unlocked console session. Note: The Smart Card Removal Policy does not apply to users who authenticate to View using the Log In as Current User check box in the View Client. The final step is to restart the View Connection Server service. You can omit this step now if you are going to configure certificate revocation checking in View next. Configure Smart-Card Certificate Revocation Checking Some organizations leverage the Tumbleweed tool to do revocation checking. If you use Tumbleweed, refer to the manufacturer s documentation for configuration information. Refer to the Certificate Revocation Checking Using OCSP and CRL in View 4.5/4.6 technical paper for a thorough explanation of certificate revocation checking and how it is accomplished in View. 5 The detailed procedures for configuring revocation checking in View begin on page 127 of the VMware View 4.5 Administrator s Guide. You configure Online Certificate Status Protocol (OSCP) with Certificate Revocation List (CRL) as a failback for CAC or PIV by adding the following lines to the locked.properties file: enablerevocationchecking=true enableocsp=true allowcertcrls=true ocspsigningcert=va.cer ocspurl= You retrieve the oscpsigningcert by browsing to the Web site of the local OCSP responder, saving the certificate in.cer format and placing it in the conf folder. View uses the certificate to handshake with the OCSP responder prior to validating the OCSP response of the user s certificate from the user s CAC. The final step is to restart the View Connection Server service. Add New Certificate Authorities New CAs come online periodically and should be added to the truststore at your earliest convenience. Numerous sites make this information available. A number of them including the DoD PKE site ( are listed at You can easily add new CAs to the truststore by making a copy of the truststore file and running the command described earlier in this paper for importing certificates. Do this for each new CA, and be sure to use a unique alias so you don t overwrite previous entries. When done, overwrite the truststore file in the conf folder and restart the View Connection Server service. Configure Endpoints Zero clients are configured completely for smart-card authentication out of the box in the firmware on the PCoIP chip. For Linux-based thin clients, refer to the blog post entitled Setting up CAC or Smartcard for use with an HP Thin Client. 6 See the Google Code site s VMware View Open Client page for instructions on configuring Open Client for Linux endpoints. 7 TECHNICAL WHITE PAPER / 4
5 The remaining clients are Windows-based either a thin client with an embedded Windows OS or a full version of Windows XP, Vista or 7. The only configuration necessary for these clients is to prevent users from selecting the Log In as Current User option. This is done by setting LoginAsCurrentUser _ Default = 0 in HKLM\SOFTWARE\ VMWare, Inc.\VMware VDM\Client\Security\. It is also advisable to prevent users from selecting this check box. This is done by setting LoginAsCurrentUser _ Display = 0 in the same registry key. Troubleshooting Few CAC and PIV troubleshooting practices are unique to VMware View. Your general troubleshooting steps are the same as with physical desktops, but the location where you validate or change the settings might be different because of the additional authentication that occurs to the View environment. The following list recommends some first steps to consider when authentication to your virtual desktops is not working properly: Check the documentation provided by your smart-card vendor to confirm that the smart-card software and hardware have been configured correctly. Verify that the smart-card reader has been updated to the latest firmware available from the manufacturer. This will ensure maximum compatibility with new card types. Verify that the zero client has been updated to the latest firmware. This will ensure maximum compatibility with new card types. If using a Windows client, go to Start > Settings > Control Panel > Internet Options > Content > Certificates > Personal to verify that certificates are available for smart-card authentication. If smart-card users use the PCoIP protocol to connect to View desktops, verify that the View Agent PCoIP Smartcard subfeature is installed on desktop sources. Verify that all DoD CA certificates are included in the truststore file. Confirm that the locked.properties file is located in C:\Program Files\VMware\VMware View\ Server\sslgateway\conf\. Verify that the usecertauth property in the locked.properties files is set to true. The usecertauth property is commonly misspelled as usercertauth. If you configured smart-card authentication on a View Connection Server instance, check the Smart Card Authentication setting in View Administrator: Select View Configuration > Servers, select the View Connection Server instance and click Edit. On the Authentication tab, verify that Smart Card Authentication is set to either Optional or Required. You must restart the View Connection Server services for changes to the smart-card settings to take effect. If the user s domain is different from the domain the root certificate was issued from, verify that the user s User Principal Name (UPN) is set to the subjectaltname (SAN) contained in the root certificate of the trusted CA. Find the SAN contained in the root certificate of the trusted CA by viewing the certificate properties. On your Active Directory server, select Start > Administrative Tools > Active Directory Users and Computers. Right-click the user in the Users folder and select Properties. The UPN appears in the User logon name text boxes on the Account tab. Check the log files in C:\Documents and Settings\All Users\Application Data\VMware\VDM\logs on the View Connection Server or Security Server host for messages stating that smart-card authentication is enabled. Validate that the WdfCoInstaller files are properly matched. A mismatch can occur if Windows Update was disabled during Agent install. More details are available from Microsoft Knowledge Base article If you are having problems with PIV-II CACs, validate that you have installed ActivClient Hot Fix FIXS msp. TECHNICAL WHITE PAPER / 5
6 References 1 Continued Implementation of Homeland Security Presidential Directive (HSPD) 12 Policy for a Common Identification Standard for Federal Employees and Contractors: 2 VMware View Installation Guide: 3 VMware View Administrator s Guide: 4 View Manager Administration Guide: 5 Certificate Revocation Checking Using OCSP and CRL in View 4.5/4.6: Checking-OCSP-CRL-View45-WP.pdf. 6 Setting up CAC or Smartcard for use with an HP Thin Client: 7 VMware View Open Client: 8 Deployment may fail when an injected driver requires an update to the Kernel Mode Driver Framework (KMDF) or User Mode Driver Framework (UMDF) during deployment (Microsoft Knowledge Base article ): Other Resources VMware View Architecture Planning Guide: Smart Card Certificate Authentication with VMware View 4.5/4.6: View-SmartCardAuthentication-WP-EN.pdf. Certificate enrollment using smart cards (Microsoft Knowledge Base article ): TECHNICAL WHITE PAPER / 6
7 VMware, Inc Hillview Avenue Palo Alto CA USA Tel Fax Copyright 2011 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. Item No: VMW-TECH-WP-CAC-USLET-101
Smart Card Certificate Authentication with VMware View 4.5 and Above WHITE PAPER
Smart Card Certificate Authentication with VMware View 4.5 and Above WHITE PAPER Table of Contents.... About This Paper.... 3 Introduction... 3 Smart Card Overview.... 3 Getting Started... 4 Authenticating
More informationThinPrint GPO Configuration for Location-Based Printing
ThinPrint GPO Configuration for Location-Based Printing I N F O R M AT I O N G U I D E Table of Contents Summary................................................................... 3 Environment................................................................
More informationVMware vcenter Support Assistant 5.1.1
VMware vcenter.ga September 25, 2013 GA Last updated: September 24, 2013 Check for additions and updates to these release notes. RELEASE NOTES What s in the Release Notes The release notes cover the following
More informationInstalling and Configuring vcenter Multi-Hypervisor Manager
Installing and Configuring vcenter Multi-Hypervisor Manager vcenter Server 5.1 vcenter Multi-Hypervisor Manager 1.1 This document supports the version of each product listed and supports all subsequent
More informationCheck Point FDE integration with Digipass Key devices
INTEGRATION GUIDE Check Point FDE integration with Digipass Key devices 1 VASCO Data Security Disclaimer Disclaimer of Warranties and Limitation of Liabilities All information contained in this document
More informationSmart Card Setup Guide
Smart Card Setup Guide K Apple Computer, Inc. 2006 Apple Computer, Inc. All rights reserved. Under the copyright laws, this manual may not be copied, in whole or in part, without the written consent of
More informationConfiguring Single Sign-on from the VMware Identity Manager Service to Dropbox
Configuring Single Sign-on from the VMware Identity Manager Service to Dropbox VMware Identity Manager SEPTEMBER 2015 V1 Configuring Single Sign-On from VMware Identity Manager to Dropbox Table of Contents
More informationSecuring VMware View Communication Channels with SSL Certificates TECHNICAL WHITE PAPER
Securing VMware View Communication Channels with SSL Certificates TECHNICAL WHITE PAPER Table of Contents About VMware View.... 3 Changes in VMware View 5.1.... 3 SSL Authentication Mechanism.... 4 X.509
More informationHOTPin Integration Guide: DirectAccess
1 HOTPin Integration Guide: DirectAccess Disclaimer Disclaimer of Warranties and Limitation of Liabilities All information contained in this document is provided 'as is'; Celestix assumes no responsibility
More information2. Each server or domain controller requires its own server certificate, DoD Root Certificates and enterprise validator installed.
Purpose and Scope The purpose of this policy is to define the roles and responsibilities on implementing the Homeland Security Presidential Directive 12 (HSPD-12) Logical Access Control (LAC) throughout
More informationYubiKey PIV Deployment Guide
YubiKey PIV Deployment Guide Best Practices and Basic Setup YubiKey 4, YubiKey 4 Nano, YubiKey NEO, YubiKey NEO-n YubiKey PIV Deployment Guide 2016 Yubico. All rights reserved. Page 1 of 27 Copyright 2016
More informationEntrust Managed Services PKI
Entrust Managed Services PKI Entrust Managed Services PKI Windows Smart Card Logon Configuration Guide Using Web-based applications Document issue: 1.0 Date of Issue: June 2009 Copyright 2009 Entrust.
More informationManaging Multi-Hypervisor Environments with vcenter Server
Managing Multi-Hypervisor Environments with vcenter Server vcenter Server 5.1 vcenter Multi-Hypervisor Manager 1.0 This document supports the version of each product listed and supports all subsequent
More informationDIGIPASS KEY series and smart card series for Juniper SSL VPN Authentication
DIGIPASS KEY series and smart card series for Juniper SSL VPN Authentication Certificate Based 2010 Integration VASCO Data Security. Guideline All rights reserved. Page 1 of 31 Disclaimer Disclaimer of
More informationReplacing vcenter Server 4.0 Certificates VMware vsphere 4.0
Technical Note Replacing vcenter Server 4.0 Certificates VMware vsphere 4.0 Certificates are automatically generated when you install vcenter Server and ESX/ESXi. These default certificates are not signed
More informationObtaining SSL Certificates for VMware Horizon View Servers
Obtaining SSL Certificates for VMware Horizon View Servers View 5.2 View Composer 5.2 This document supports the version of each product listed and supports all subsequent versions until the document is
More informationObtaining SSL Certificates for VMware View Servers
Obtaining SSL Certificates for VMware View Servers View 5.1 View Composer 3.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
More informationApplication Note Gemalto.NET 2.0 Smart Card Certificate Enrollment using Microsoft Certificate Services on Windows 2008
7 Application Note Gemalto.NET 2.0 Smart Card Certificate Enrollment using Microsoft Certificate Services on Windows 2008 All information herein is either public information or is the property of and owned
More informationAdministration Guide ActivClient for Windows 6.2
Administration Guide ActivClient for Windows 6.2 ActivClient for Windows Administration Guide P 2 Table of Contents Chapter 1: Introduction....................................................................12
More informationIntegrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER
Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER Table of Contents Introduction.... 3 Requirements.... 3 Horizon Workspace Components.... 3 SAML 2.0 Standard.... 3 Authentication
More informationCertificate Revocation Checking Using OCSP and CRL in VMware View 4.5/4.6 TECHNICAL WHITE PAPER
Certificate Revocation Checking Using OCSP and CRL in VMware View 4.5/4.6 TECHNICAL WHITE PAPER Table of Contents Introduction... 3 About VMware View.... 3 About Smart Card Certificate Authentication....
More informationSetting Up Resources in VMware Identity Manager
Setting Up Resources in VMware Identity Manager VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
More informationSECO Whitepaper. SuisseID Smart Card Logon Configuration Guide. Prepared for SECO. Publish Date 19.05.2010 Version V1.0
SECO Whitepaper SuisseID Smart Card Logon Configuration Guide Prepared for SECO Publish Date 19.05.2010 Version V1.0 Prepared by Martin Sieber (Microsoft) Contributors Kunal Kodkani (Microsoft) Template
More informationvcenter Configuration Manager Backup and Disaster Recovery Guide VCM 5.3
vcenter Configuration Manager Backup and Disaster Recovery Guide VCM 5.3 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
More informationUsing MSCS to Cluster VirtualCenter VirtualCenter 2.0.1 Patch 2
Technical Note Using MSCS to Cluster VirtualCenter VirtualCenter 2.0.1 Patch 2 In a default installation, VMware VirtualCenter 2.x runs on a single Windows-based server. In order to provide high availability,
More informationReplacing VirtualCenter Server Certificates VMware Infrastructure 3
Technical Note Replacing VirtualCenter Server Certificates VMware Infrastructure 3 This technical note provides information about replacing the default certificates supplied with VirtualCenter Server hosts.
More informationVeriSign PKI Client Government Edition v 1.5. VeriSign PKI Client Government. VeriSign PKI Client VeriSign, Inc. Government.
END USER S GUIDE VeriSign PKI Client Government Edition v 1.5 End User s Guide VeriSign PKI Client Government Version 1.5 Administrator s Guide VeriSign PKI Client VeriSign, Inc. Government Copyright 2010
More informationShakambaree Technologies Pvt. Ltd.
Welcome to Support Express by Shakambaree Technologies Pvt. Ltd. Introduction: This document is our sincere effort to put in some regular issues faced by a Digital Signature and USB Token user doing on
More informationSecurity Guide vcenter Operations Manager for Horizon View 1.5 TECHNICAL WHITE PAPER
Security Guide vcenter Operations Manager for Horizon View 1.5 TECHNICAL WHITE PAPER Contents Introduction... 2 Surface Area... 3 SSL Configuration... 5 Authentication... 6 Adapter... 6 Broker Agent...
More informationVMware Virtual Desktop Manager User Authentication Guide
Technical Note VMware Virtual Desktop Manager User Authentication Guide VMware Virtual Desktop Manager The purpose of this guide is to provide details of user authentication in VMware Virtual Desktop Manager
More informationTroubleshooting smart card logon authentication on active directory
Troubleshooting smart card logon authentication on active directory Version 1.0 Prepared by: "Vincent Le Toux" Date: 2014-06-11 1 Table of Contents Table of Contents Revision History Error messages The
More informationMicrosoft Windows Server 2003 Integration Guide
15370 Barranca Parkway Irvine, CA 92618 USA Microsoft Windows Server 2003 Integration Guide 2008 HID Global Corporation. All rights reserved. 47A3-905, A.1 C200 and C700 December 1, 2008 Crescendo Integration
More informationUpgrading Horizon Workspace
Horizon Workspace 1.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of
More informationIBM Client Security Solutions. Client Security User's Guide
IBM Client Security Solutions Client Security User's Guide December 1999 1 Before using this information and the product it supports, be sure to read Appendix B - Notices and Trademarks, on page 22. First
More informationHow to Migrate Citrix XenApp to VMware Horizon 6 TECHNICAL WHITE PAPER
How to Migrate Citrix XenApp to VMware Horizon 6 TECHNICAL WHITE PAPER Table of Contents Introduction... 3 Horizon and XenApp Components Comparison.... 4 Preparing for the Migration.... 5 Three Approaches
More informationIntroduction to VMware vsphere Data Protection TECHNICAL WHITE PAPER
Introduction to VMware vsphere Data Protection TECHNICAL WHITE PAPER Table of Contents Introduction.... 3 Architectural Overview... 3 Deployment and Configuration.... 5 Administration.... 5 Backup....
More informationVMware User Environment Manager
VMware User Environment Manager Deployed in 60 Minutes or Less Author: Dale Carter Senior Solution Architect VMware Technology Consulting Services April 2015 Table of Contents 1. VMware User Environment
More informationDirector and Certificate Authority Issuance
VMware vcloud Director and Certificate Authority Issuance Leveraging QuoVadis Certificate Authority with VMware vcloud Director TECHNICAL WHITE PAPER OCTOBER 2012 Table of Contents Introduction.... 3 Process
More informationvsphere Upgrade vsphere 6.0 EN-001721-03
vsphere 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document,
More informationGetting Started with ESXi Embedded
ESXi 4.1 Embedded vcenter Server 4.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent
More informationGetting Started with VMware Fusion
Getting Started with VMware Fusion VMware Fusion for Mac OS X 2008 2012 EN-000933-00 2 Getting Started with VMware Fusion You can find the most up-to-date technical documentation on the VMware Web site
More informationVMware Horizon FLEX 1.5 WHITE PAPER
WHITE PAPER Table of Contents What Is VMware Horizon FLEX?... 3 Terminology for Horizon FLEX.... 4 Key Benefits of Horizon FLEX... 4 Deploying Horizon FLEX.... 5 Tested Host Operating Systems for Horizon
More informationConfiguring Multiple ACE Management Servers VMware ACE 2.0
Technical Note Configuring Multiple ACE Management Servers VMware ACE 2.0 This technical note describes how to configure multiple VMware ACE Management Servers to work together. VMware recommends this
More informationPortions of this product were created using LEADTOOLS 1991-2009 LEAD Technologies, Inc. ALL RIGHTS RESERVED.
Installation Guide Lenel OnGuard 2009 Installation Guide, product version 6.3. This guide is item number DOC-110, revision 1.038, May 2009 Copyright 1992-2009 Lenel Systems International, Inc. Information
More informationInstalling and Configuring vcloud Connector
Installing and Configuring vcloud Connector vcloud Connector 2.7.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
More informationReconfiguration of VMware vcenter Update Manager
Reconfiguration of VMware vcenter Update Manager Update 1 vcenter Update Manager 4.1 This document supports the version of each product listed and supports all subsequent versions until the document is
More informationConfiguring Single Sign-on from the VMware Identity Manager Service to AirWatch Applications
Configuring Single Sign-on from the VMware Identity Manager Service to AirWatch Applications VMware Identity Manager AUGUST 2015 V1 Configuring Single Sign-On from VMware Identity Manager to AirWatch Applications
More informationVMware vsphere Data Protection Evaluation Guide REVISED APRIL 2015
VMware vsphere Data Protection REVISED APRIL 2015 Table of Contents Introduction.... 3 Features and Benefits of vsphere Data Protection... 3 Requirements.... 4 Evaluation Workflow... 5 Overview.... 5 Evaluation
More informationQuick Start Guide for Parallels Virtuozzo
PROPALMS VDI Version 2.1 Quick Start Guide for Parallels Virtuozzo Rev. 1.1 Published: JULY-2011 1999-2011 Propalms Ltd. All rights reserved. The information contained in this document represents the current
More informationUser Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream
User Manual Onsight Management Suite Version 5.1 Another Innovation by Librestream Doc #: 400075-06 May 2012 Information in this document is subject to change without notice. Reproduction in any manner
More informationConfiguring Single Sign-On from the VMware Identity Manager Service to Office 365
Configuring Single Sign-On from the VMware Identity Manager Service to Office 365 VMware Identity Manager JULY 2015 V1 Table of Contents Overview... 2 Passive and Active Authentication Profiles... 2 Adding
More informationPUBLIC Secure Login for SAP Single Sign-On Implementation Guide
SAP Single Sign-On 2.0 SP04 Document Version: 1.0-2014-10-28 PUBLIC Secure Login for SAP Single Sign-On Implementation Guide Table of Contents 1 What Is Secure Login?....8 1.1 System Overview.... 8 1.1.1
More informationVMware AlwaysOn Point of Care Desktop. with Indigo Identityware software for Fast Access & Strong Authentication with Roaming Desktops
VMware AlwaysOn Point of Care Desktop with Indigo Identityware software for with Roaming Desktops Indigo Identityware provides clinical users fast and secure access to their VMware desktop through a fluid,
More informationVMware Horizon FLEX User Guide
Horizon FLEX 1.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this
More informationVMware vsphere Data Protection 6.0
VMware vsphere Data Protection 6.0 TECHNICAL OVERVIEW REVISED FEBRUARY 2015 Table of Contents Introduction.... 3 Architectural Overview... 4 Deployment and Configuration.... 5 Backup.... 6 Application
More informationUSER GUIDE WWPass Security for Windows Logon
USER GUIDE WWPass Security for Windows Logon December 2015 TABLE OF CONTENTS Chapter 1 Welcome... 3 Introducing WWPass Security for Windows Logon... 4 Related Documentation... 4 Presenting Your PassKey
More informationS/MIME on Good for Enterprise MS Online Certificate Status Protocol. Installation and Configuration Notes. Updated: October 08, 2014
S/MIME on Good for Enterprise MS Online Certificate Status Protocol Installation and Configuration Notes Updated: October 08, 2014 Installing the Online Responder service... 1 Preparing the environment...
More informationVMware View Backup Best Practices
VMware View Backup Best Practices September 2011 D E P L O Y M E N T A N D T E C H N I C A L C O N S I D E R A T I O N S G U I D E Table of Contents Executive Summary... 3 View Architecture Overview...
More informationUser Guide Remote Access to VDI/Workplace Using PIV
User Guide Remote Access to VDI/Workplace Using PIV Innovation & Engineering Office (IM-64) May 2015 Table of Contents 1 Overview... 3 1.1 Web Browsers... 3 1.2 Operating Systems... 3 2 Types of Smart
More informationVMware vcenter Configuration Manager Backup and Disaster Recovery Guide vcenter Configuration Manager 5.4.1
VMware vcenter Configuration Manager Backup and Disaster Recovery Guide vcenter Configuration Manager 5.4.1 This document supports the version of each product listed and supports all subsequent versions
More informationInstalling and Configuring vcenter Support Assistant
Installing and Configuring vcenter Support Assistant vcenter Support Assistant 5.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
More informationHow To Configure An Activcard Smart Card With An Hp Powerbook On A Pc Or Ipa (Powerbook) On A Powerbook 2 (Powercard) On An Hpla 2 (Ahemos) Or Powerbook (Power Card
Implementing ActivIdentity Smart Cards for Use with HP Compaq t5720 Thin Clients and HP Blade PCs Introduction............................................................ 2 Prerequisites............................................................
More informationVMware vsphere Data Protection 5.8 TECHNICAL OVERVIEW REVISED AUGUST 2014
VMware vsphere Data Protection 5.8 TECHNICAL OVERVIEW REVISED AUGUST 2014 Table of Contents Introduction.... 3 Features and Benefits of vsphere Data Protection... 3 Additional Features and Benefits of
More informationVMware Horizon FLEX User Guide
Horizon FLEX 1.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this
More informationCitrix Access Gateway Plug-in for Windows User Guide
Citrix Access Gateway Plug-in for Windows User Guide Access Gateway 9.2, Enterprise Edition Copyright and Trademark Notice Use of the product documented in this guide is subject to your prior acceptance
More informationInstallation and Configuration Guide
Entrust Managed Services PKI Auto-enrollment Server 7.0 Installation and Configuration Guide Document issue: 1.0 Date of Issue: July 2009 Copyright 2009 Entrust. All rights reserved. Entrust is a trademark
More informationVMware Horizon FLEX User Guide
Horizon FLEX 1.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this
More informationProtecting Juniper SA using Certificate-Based Authentication. Quick Start Guide
Protecting Juniper SA using Certificate-Based Authentication Copyright 2013 SafeNet, Inc. All rights reserved. All attempts have been made to make the information in this document complete and accurate.
More informationVMware vrealize Operations for Horizon Security
VMware vrealize Operations for Horizon Security vrealize Operations for Horizon 6.2 This document supports the version of each product listed and supports all subsequent versions until the document is
More informationSynthetic Monitoring Scripting Framework. User Guide
Synthetic Monitoring Scripting Framework User Guide Please direct questions about {Compuware Product} or comments on this document to: APM Customer Support FrontLine Support Login Page: http://go.compuware.com
More informationCard Management System Integration Made Easy: Tools for Enrollment and Management of Certificates. September 2006
Card Management System Integration Made Easy: Tools for Enrollment and Management of Certificates September 2006 Copyright 2006 Entrust. All rights reserved. www.entrust.com Entrust is a registered trademark
More informationvsphere Upgrade Update 1 ESXi 6.0 vcenter Server 6.0 EN-001804-02
Update 1 ESXi 6.0 vcenter Server 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent
More informationVMware vcenter Log Insight Getting Started Guide
VMware vcenter Log Insight Getting Started Guide vcenter Log Insight 1.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by
More informationSage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and 2012. October 2013
Sage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and 2012 October 2013 This is a publication of Sage Software, Inc. Document version: October 17, 2013 Copyright
More informationDell SupportAssist Version 2.0 for Dell OpenManage Essentials Quick Start Guide
Dell SupportAssist Version 2.0 for Dell OpenManage Essentials Quick Start Guide Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer.
More informationUserGuide ReflectionPKIServicesManager
UserGuide ReflectionPKIServicesManager User Guide Reflection PKI Services Manager version 1.3.1 Copyrights and Notices Copyright 2015 Attachmate Corporation. All rights reserved. No part of the documentation
More informationOutlook Web Access 2003 Remote User Guide
UNITED STATES COAST GUARD Outlook Web Access 2003 Remote User Guide Using Common Access Card Access TISCOM TIS-42 07/29/2008 Version 1.0 CAC Enabled Outlook Web Access CAC Enabled OWA is a way to view
More informationUser Guide Remote PIV to VDI Using a PIV Card
User Guide Remote PIV to VDI Using a PIV Card Energy IT Services (IM-64) March 2015 Authors Prepared By Matthew Cummings Senior Systems Engineer IM-64 Version Control Date Version Document Revision Description
More information4cast Client Specification and Installation
4cast Client Specification and Installation Version 2015.00 10 November 2014 Innovative Solutions for Education Management www.drakelane.co.uk System requirements The client requires Administrative rights
More informationSymantec Managed PKI. Integration Guide for ActiveSync
Symantec Managed PKI Integration Guide for ActiveSync ii Symantec Managed PKI Integration Guide for ActiveSync The software described in this book is furnished under a license agreement and may be used
More informationvsphere Host Profiles
ESXi 5.1 vcenter Server 5.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions
More informationVERITAS Backup Exec 9.1 for Windows Servers Quick Installation Guide
VERITAS Backup Exec 9.1 for Windows Servers Quick Installation Guide N109548 Disclaimer The information contained in this publication is subject to change without notice. VERITAS Software Corporation makes
More informationScenarios for Setting Up SSL Certificates for View
Scenarios for Setting Up SSL Certificates for View VMware Horizon 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
More informationVMware vrealize Operations for Horizon Security
VMware vrealize Operations for Horizon Security vrealize Operations for Horizon 6.1 This document supports the version of each product listed and supports all subsequent versions until the document is
More informationDefense Logistics Agency. Virtual Desktop: User Guide
Defense Logistics Agency Virtual Desktop: Effective 04 TABLE OF CONTENTS Introduction... 3 Section 1: Virtual Desktop Overview... 4 1.1 Virtual Desktop Background... 4 Section 2: Device Type - Thin Client...
More informationActive Directory Rights Management Service Integration Guide
Active Directory Rights Management Service Integration Guide Preface Preface 2013 SafeNet, Inc. All rights reserved. Part Number: 007-011230-001 (Rev F, 07/2013) All intellectual property is protected
More informationSage HRMS 2012 Sage Employee Self Service. Technical Installation Guide for Windows Server 2003 and Windows Server 2008
Sage HRMS 2012 Sage Employee Self Service Technical Installation Guide for Windows Server 2003 and Windows Server 2008 2011 Sage Software, Inc. All rights reserved. Sage, the Sage logos, and the Sage product
More informationTable of Contents. CHAPTER 1 About This Guide... 9. CHAPTER 2 Introduction... 11. CHAPTER 3 Database Backup and Restoration... 15
Table of Contents CHAPTER 1 About This Guide......................... 9 The Installation Guides....................................... 10 CHAPTER 2 Introduction............................ 11 Required
More informationVMware Workspace Portal Reference Architecture
VMware Workspace Portal 2.1 TECHNICAL WHITE PAPER Table of Contents Executive Summary.... 3 Overview.... 4 Hardware Components.... 5 VMware vsphere.... 5 VMware Workspace Portal 2.1.... 5 VMware Horizon
More informationConfiguring Single Sign-on from the VMware Identity Manager Service to WebEx
Configuring Single Sign-on from the VMware Identity Manager Service to WebEx VMware Identity Manager SEPTEMBER 2015 V 2 Configuring Single Sign-On from VMware Identity Manager to WebEx Table of Contents
More informationXcalibur Global Version 1.2 Installation Guide Document Version 3.0
Xcalibur Global Version 1.2 Installation Guide Document Version 3.0 December 2010 COPYRIGHT NOTICE TRADEMARKS 2010 Chip PC Inc., Chip PC (Israel) Ltd., Chip PC (UK) Ltd., Chip PC GmbH All rights reserved.
More informationYubico PIV Management Tools
Yubico PIV Management Tools Active Directory Smart Card Logon using the YubiKey NEO or NEO-n Document Version 1.0 April 15, 2015 Yubico PIV Management Tools 2015 Yubico. All rights reserved. Page 1 of
More informationQuick Start Guide for VMware and Windows 7
PROPALMS VDI Version 2.1 Quick Start Guide for VMware and Windows 7 Rev. 1.1 Published: JULY-2011 1999-2011 Propalms Ltd. All rights reserved. The information contained in this document represents the
More informationIntegration with Active Directory
VMWARE TECHNICAL NOTE VMware ACE Integration with Active Directory This document explains how to set up Active Directory to use with VMware ACE. This document contains the following topics: About Active
More informationVMware vcenter Configuration Manager Software Provisioning Components Installation and User Guide
VMware vcenter Configuration Manager Software Provisioning Components Installation and User Guide Package Studio 1.1 Software Repository for Windows 1.1 Package Manager 1.2 This document supports the version
More informationTECHNICAL SUPPORT GUIDE
TECHNICAL SUPPORT GUIDE INTRODUCTION This document has been developed to provide a guideline for assisting our clients and their technicians with a standard Console Gateway Live configuration. IS THIS
More informationUser Documentation for SmartPolicy. Version 1.2
User Documentation for SmartPolicy Version 1.2 Prepared by: "Vincent Le Toux" Date: 07/02/2013 1 Table of Contents Table of Contents Introduction... 4 System Specifications... 4 Requirement... 4 Installation...
More informationReconfiguring VMware vsphere Update Manager
Reconfiguring VMware vsphere Update Manager vsphere Update Manager 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
More informationInstalling and Configuring vcloud Connector
Installing and Configuring vcloud Connector vcloud Connector 2.0.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
More informationPC-Duo Web Console Installation Guide
PC-Duo Web Console Installation Guide Release 12.1 August 2012 Vector Networks, Inc. 541 Tenth Street, Unit 123 Atlanta, GA 30318 (800) 330-5035 http://www.vector-networks.com Copyright 2012 Vector Networks
More information