recent posts

banner image

Horizon View Installation & Configuration - Part 07 - Install And View Security Server Settings

The next component we are installing is the Security Serve, with its installation, you can provide the users with the necessary access to allow them to connect from the outside to their desktops. Security Server is another example of a Connection Server that we install on a virtual machine called HZN7-SS1. I repeat that this server must have a static IP and should not join the domain.

Do not forget that Security Server has a one-to-one connection with Connection Server. If you want to increase the number of security servers, you should increase the same number of View Connections.

It is also recommended that an external View Connection Server be considered to be coupled with your Security Server, and this server is completely separate from your internal Connection Server. By doing this scenario, it's possible to access users' labels from outside to their desktops.

Preparing View Administrator for Security Server:

Before starting the installation, it is necessary to prepare the Connection Server for the pair with the Security Server. This occurrence is made using a pair of passwords. This password is used to connect two servers with complete security. This process is exactly what you see in your phone's Bluetooth-connection mechanism between a device and a car or handwritten recorder!

1. From the Inventory menu, open the View Configuration section and click Servers. Now click on the Connection Servers tab. The Connection Server details are displayed:

2. Select the Connection Server that is supposed to be in the pair with the Security Server. In the example above, Connection Server name is hzn7-cs2 (1).

3. Click the More Commands button (2) and then select Specify Security Server Pairing Password (3). You now see the Specify Security Server Pairing Password page.

4. In the Pairing Password field, enter the password you want to use. This password should not be forgotten! Because you need to re-enter it in the Security Server installation process. Re-enter the password in the Confirm password field. In the Password timeout field, consider the time to validate the password.

5. By setting the OK button, the password pair will be ended.

Now you can start the Security Server installation process.

Security Server installation steps:

Get a console from the HZN7-SS1 virtual machine and select the Horizon View installation program path.

1. Run the VMware-viewconnectionserver-x86_64-7.0.0-3633490 file.

2. If you are justified with the Security Warning message, press the Run button.

3. The Welcome to the Installation Wizard for VMware Horizon 7 Connection Server page appears.

4. Click the Next button to begin the installation process. The license agreement page appears.

5. Put the radio button on the I accept the terms in the license agreement option and then click on the Next button. The
     location of the files appears.

6. Do not touch the default settings and hit Next. You will see the Installation Options page.

7. Select Horizon 7 Security Server from the list of specified rolls (1).

8. The last option on this page is to select the IP address that we choose the IPv4 option as mentioned above (2).

9. Click the Next button Click to continue.

10. The Paired Horizon 7 Connection Server page appears to you.

11. In the Server field, enter the Connection Server information to be placed with the Security Server in the pairing mode.

12. Click the Next button to proceed with the installation process.

13. The Paired Horizon 7 Connection Server Password page is displayed. In the password field, enter the password you specified in the View Administrator.

14. Click Next to continue the installation process. Log into the Horizon 7 Security Server Configuration page. Here is a section where we can consider specific settings for the Security Server.

15. In the External URL field (3), enter the address that users will connect to their clients over the Internet through it.

16. In the PCoIP External URL (4) field, enter an IP address for the external IP address of the PCoIP. This field should contain an IP address instead of a URL.

17. In the Blast External URL (5) field, enter an address for the Blast protocol. This protocol uses HTML5 to access desktops.

18. Click Next to display the Firewall Configuration page.

19. Click the radio button in the Configure Windows Firewall automatically, and then click Next to continue. The Ready to Install the Program section is displayed to you.

20. Click the Install button to start the installation process.

21. When the Security Server is installed, the Completed Installer screen is displayed. Click the Finish button to close the corresponding page.

22. Check Replica Server for the installation process to be performed correctly and all services are up.

23. From the Inventory menu, click View Configuration on the Servers (6). Click the Security Servers tab (7). You see the security server named HZN7-SS2 from the list (8).

Security Server is set up correctly and successfully. As we mentioned earlier, it is recommended that the Security Server be installed in a connection with a separate external View Connection. So you can restrict access to your desktop from external connections by tagging.

The first step in creating tagging for an external connection server

1. From the Inventory menu, select the View Configuration section, and then click Servers (9). Click on the Connection Servers tab (10) and then select the Connection Server that is paired with the External Security Server. In our example, this server is known as HZN7-CS2. (11)

2. Right-click and then click Edit ... from the menu bar. (12)

3. The Edit Connection Server Settings page is displayed to you.

4. In Tag (13), consider a name for this tag. In this example, we call the external tag name. This means that only one desktop pool with this tag can communicate with the connection server.

Installation View Enrollment Server

The last component we are going to install is Enrollment Server. Like the first Connection Server, Security Server, and Replica Server, the Enrollment Server is another example of a Connection Server that installs it on a server named HZN7-ENROL. This server must join the domain and assign it a static IP number.

1. Take a console from the HZN7-ENROL server and go to the installation folder.

2. Run the VMware-viewconnectionserver-x86_64-7.0.0-3633490 file.

 

3. If you encounter a Windows Security Warning message, click on the Run button:

4. You will see the Welcome to the Installation Wizard for VMware Horizon 7 Connection Server page.

5. Click the Next button to begin the installation process. The License Agreement page is displayed.

6. Click the radio button I accept the terms in the license agreement, and then click the Next button. You will see the Destination Folder.

7. Do not change the folder that was used to install the program by default and click the Next button. The Installation Options screen is displayed.

8. Select the Horizon 7 Enrollment Server option from the roll list in Horizon 7 Connection Server (1).

9. Click the Next button to continue.

10. You will see the Firewall Configuration page:

11. Click the Next button.

12. The Ready to Install the Program page is displayed for you.

13. Click the Install button to start the installation process. When the installation process is complete, the Completed Installer screen is displayed. Click the Finish button.

14. There is no console and interfaces for the Enrollment server. Visit the Windows Services section to see if the VMware Horizon Enrollment Server service is in running mode. (2) If the services run smoothly, that is the right thing to do.




Want to download this blog as a PDF document, click the link below:






Abd El-Rahman Oreiby
Senior Data Center Engineer
Al Thuraya Security Egypt 
www.abdelrahmanoreiby.weebly.com
Horizon View Installation & Configuration - Part 07 - Install And View Security Server Settings Horizon View Installation & Configuration - Part 07 - Install And View Security Server Settings Reviewed by Abd El-Rahman Oreiby on 8/06/2020 01:20:00 ص Rating: 5

ليست هناك تعليقات:

يتم التشغيل بواسطة Blogger.