SSL in VMware Horizon View 7

Common Issues

If the Windows Server host on which View Connection Server is installed does not trust the root certificate for the signed SSL server certificate, you must import the root certificate into the Windows local computer certificate store. In addition, if the View Connection Server host does not trust the root certificates of the SSL server certificates configured for the security server, View Composer, and vCenter Server hosts, you also must import those root certificates.

How to Install the Certificates

Step 1: Open the MMC Console on the Windows Server host.

Step 2: Expand the Certificates (Local Computer) node and navigate to:
Trusted Root Certification Authorities > Certificates.

• If the root certificate is already present and there are no intermediate certificates, skip to Step 7.
• If the root certificate is not present, proceed to Step 3.

Step 3: Import the Root Certificate:

• Right-click Trusted Root Certification Authorities > Certificates.
• Select All Tasks > Import.

Step 4: In the Certificate Import Wizard:

• Click Next.
• Browse to the location of the root CA certificate.
• Select the certificate file and click Open.
• Click Next, Next again, then Finish.

Step 5: Import Intermediate Certificates (if applicable):

• Navigate to Certificates (Local Computer) > Intermediate Certification Authorities > Certificates.
• Repeat Steps 3–5 for each intermediate certificate.

Step 6: Restart the necessary services:

• View Connection Server service
• Security Server service
• View Composer service
• vCenter Server service

Important notes

The SSL certificate bundle should be downloaded from this URL.

The files should be concatenated in the following order:

• www_example_com.crt – this is your SSL certificate
• SectigoRSADomainValidationSecureServerCA.crt
• USERTrustRSAAddTrustCA.crt
• AddTrustExternalCARoot.crt

Example command on Windows:

Example command on Linux:

The files SectigoRSADomainValidationSecureServerCA.crt, USERTrustRSAAddTrustCA.crt, and AddTrustExternalCARoot.crt must be included in the archive provided by Sectigo in the verification email.