To perform initial configuration tasks, you must log in to Horizon Administrator. You access Horizon Administrator by using a secure (TLS) connection.

Note: Horizon Administrator will be deprecated by early 2020. You can use Horizon Console to perform the same administrative tasks. For more information about using Horizon Console, see the VMware Horizon Console Administration document.


  • Verify that Horizon Connection Server is installed on a dedicated computer.
  • Verify that you are using a Web browser supported by Horizon Administrator. For Horizon Administrator requirements, see the Horizon 7 Installation document.


  1. Open your Web browser and enter the following URL, where server is the host name of the Connection Server instance.
    Note: You can use the IP address if you have to access a Connection Server instance when the host name is not resolvable. However, the host that you contact will not match the TLS certificate that is configured for the Connection Server instance, resulting in blocked access or access with reduced security.
    Your access to Horizon Administrator depends on the type of certificate that is configured on the Connection Server computer. If you open your Web browser on the Connection Server host, use to connect, not https://localhost. This method improves security by avoiding potential DNS attacks on the localhost resolution.
    Option Description
    You configured a certificate signed by a CA for Horizon Connection Server. When you first connect, your Web browser displays the Welcome to VMware Horizon 7 page.
    The default, self-signed certificate supplied with Horizon Connection Server is configured. When you first connect, your Web browser might display a page warning that the security certificate associated with the address is not issued by a trusted certificate authority.

    Click Ignore to continue using the current TLS certificate.

  2. Click Launch under Horizon Administrator.
  3. Log in using an account that has the Administrators role.
    You make an initial assignment to the Administrators role when you install a standalone Connection Server instance or the first Connection Server instance in a replicated group. By default, the account that you use to install Connection Server is selected, but you can change this account to the Administrators local group or to a domain global group.

    If you chose the Administrators local group, then you can use any domain user added to this group directly or through global group membership. You cannot use local users added to this group.


After you log in to Horizon Administrator, you can use View Configuration > Administrators to change the list of users and groups that have the Administrators role.