To import an internal root CA certificate on a Windows host, you export the certificate from your Horizon FLEX server and import it to the Windows computer.
Become familiar with how to install and use the MMC Certificates snap-in on a Windows system. For more information, go to the Windows TechNet Web site at http://technet.microsoft.com.
Obtain and install an internal CA certificate. You can use the Windows MMC Certificates snap-in to request a certificate.
Install Windows IIS.
- Export the root CA certificate from your Horizon FLEX server.
- On the Horizon FLEX server, start MMC (mmc.exe), add the Certificates snap-in for a computer account, and manage certificates for the local computer.
- Select File > Add/Remove Snap-in.
- Click the Certificates snap-in and click Add.
- On the Certificates snap-in display, select Computer account and click Next.
This setting is required by the Horizon FLEX server.
- Select Local Computer and click Finish and then OK.
- In the left navigation pane, expand Certificates (Local Computer).
- Right-click on Trusted Root Certification Authorities and select All Tasks > Import.
The Certificate Import Wizard opens.
- Click Next.
- Browse for the root certificate file and click Next.
- Select Place all certificates in the following store: Trusted Root Certification Authorities and click Next, then click Finish.
- Navigate to .
- Select and export the root CA certificate.
Export the certificate in DER-encoded binary X.509 (.CER) format.
- Copy the root CA certificate to the Windows computer.
- Import the root CA certificate to the Windows computer.
- On the Windows computer, start MMC (mmc.exe).
- Add the Certificates snap-in for the computer account and manage certificates for the local computer.
- Import the root CA certificate into .
The root CA certificate is now trusted for all users.