True SSO Diagnostic Utility

version 2.2 — October 29, 2020

Contributors 3

Per Larsson
Peter Brown
Enterprise Desktop
Tarique Chowdhury
Enterprise Desktop

Comments 4

Horizon View True SSO uses Microsoft Enterprise Certificate Servers to issue certificates that are used when the user logs on to the desktop. The Horizon View Enrollment Server (ES) is responsible for sending a certificate request to certificate servers, and for monitoring the PKI configuration settings in the Active Directory.

This Fling, True SSO Diagnostic Utility, is a diagnostic utility that allows you to perform basic validation of the Horizon (Certificate) Enrollment server, the Active Directory PKI settings, and Enterprise Certificate Authorities (CA).”

Requirements

In order for the Horizon View Enrollment Server (ES) to be able to issue certificates for users in a specific domain these basic requirements must be met:

The ES must be installed on a system that is a member of the user domain, or a domain that has a two-way trust to the domain where the users are located. It can’t be installed on a Domain Controller or the Connection Server, but it may be co-installed with the CA.
A Certificate Template with Smartcard Logon usage must be configured, and the ES must be given Enroll permission on this Template.
An enterprise CA must be configured to issue certificates for the wanted Template.
An Enrollment Certificate generated by an Enterprise CA from the forest where the users are located must be installed into the \ certificate store of the ES.
A Horizon View Connection server (pod) must be paired with the ES. Please refer to the Horizon View Admin Guide and Deployment Guide for detailed information of how to install and configure True SSO.

Instructions

Copy the True SSO diagnostic utility to the Horizon 7 Enrollment Server, and then simply run the utility from a command prompt. See Horizon 7 True SSO Enrollment Server Diagnostics Tool (PDF)

Changelog

Version 2.2

The tool has been updated to allow performance-testing of the enrollment-server.

Version 2.0

Updated to support VMware Horizon 7.4 and later
Added LogonTest method; Performs basic validation of generated certificates
Display expiry time for Enrollment and CA certificates
Display additional information of generated certificates

Contributors

Per Larsson

Peter Brown

Enterprise Desktop

Tarique Chowdhury

Enterprise Desktop

Similar Flings

No similar flings found. Check these out instead...

Feb 02, 2015

VM Resource and Availability Service

version 1.0

This Fling enables you to perform a what-if analysis for host failures on your infrastructure.

May 30, 2013

ESXi Google Authenticator

version 1.0

Google Authenticator is a project that provides two-factor authentication by using both a PAM (Pluggable Authentication Module) module and a mobile application for generating one-time passcodes. In ESXi Google Authenticator, we modified the source code of Google-Authenticator to enable two-step authentication on ESXi (5.0, 5.1).

authentication

ESXi

Google Authenticator

May 27, 2014

Wavemaker Integration for vCenter Orchestrator

version 1.0

This Fling enables you to easily run vCenter Orchestrator (vCO) workflows from within Wavemaker web applications. It covers much of the Workflow Presentation dialogs available in vCO, with Java services exposing the main vCO functionality. Additionally, you get a demo application.

Feb 05, 2020

Pallas

version 1.0

The goal of Pallas is to provide management ability of virtualized Edge devices(ESXi host on Edge Device).

ESXi management

IoT

Virtualized Edge Device

Jun 11, 2020

True SSO Configuration Utility

version 1.0

This project is intended for the VMware Horizon customers in order to use True SSO Configuration Utility to help you configuring TrueSSO using View Connection Server, Enrollment Server and your Certificate Authoriry / Active Directory.

Command Line

EnrollmentServer

EUC

Horizon

TrueSSO

utility

May 16, 2016

VMware GOLD vApp STIG Assessment and Remediation Tool (START)

version 1.0

This fling provides SCAP based assessment and remediation capabilities on any remote Linux machine running OpenSCAP. It can be used to assess compliance, provide ansible based remediation and harden the target OS. Check out the videos for a detailed capability and usage.

docker