Horizon 7 version 7.3 introduces several new features for Linux desktops.

The following new features are supported beginning with Horizon 7 version 7.3 release.

  • User Datagram Protocol (UDP) based Blast Extreme connectivity support

  • K Desktop Environment (KDE) support on CentOS/RHEL 7, Ubuntu 14.04/16.04, and SLED 11 SP4

  • Support for MATE Desktop Environment on Ubuntu 14.04 and 16.04 virtual machines

  • RHEL/CentOS 7.4 support

  • Hardware H.264 Encoder

The following list presents the key features for Horizon Linux Desktops.

Automated Full-Clone Desktop Pool

Beginning with Horizon 7 version 7.0.2 release, you can create automated full-clone desktop pools for Linux desktops.

Manual Desktop Pool

Machine source.

  • Managed Virtual Machine - Machine source of the vCenter virtual machine. A managed virtual machine is supported for new and upgrade deployment.

  • Unmanaged Virtual Machine - Machine source of other sources. An unmanaged virtual machine is only supported when the upgrade is from an unmanaged virtual machine deployment.

Note:

To ensure the best possible performance, do not use an unmanaged virtual machine.

Multiple Monitors

  • vDGA/vGPU desktop supports a maximum resolution of 2560x1600 on four monitors.

  • 2D/vSGA desktop on VMware vSphere® 6.0 or later supports a maximum resolution of 2048x1536 on four monitors or a maximum resolution of 2560x1600 on three monitors.

For Ubuntu 14.04/16.04, you must use Gnome, KDE, or the MATE desktop environment to use the multiple monitors feature. See http://kb.vmware.com/kb/2151294 for more information.

For SLES 12 SP1, you must use the default package with kernel level kernel-default-3.12.49-11.1. If you upgraded the package, the multi-monitor feature fails and the desktop is shown in one monitor.

VMware Horizon HTML Access does not support the multi-monitor feature in Horizon 7 for Linux desktops.

Lossless PNG

Images and videos that are generated on a desktop are rendered on the client device in a pixel-exact manner.

H.264 Encoder

H.264 can improve the Blast Extreme performance for a Horizon desktop, especially under a low-bandwidth network. If the client side disabled H.264, Blast Extreme automatically falls back to JPEG/PNG encoding.

From Horizon 7 version 7.3 for Linux release, hardware H.264 encoder support is added with the software H.264 encoder support. The hardware H.264 support has the following requirements.

  • The vGPU is configured with the NVIDIA graphics card.

  • The NVIDIA driver 384 series or later is installed in the NVIDIA graphics card.

When the system meets the preceding requirements, Horizon 7 for Linux uses the hardware H.264 encoder. Otherwise, the software H.264 encoder is used.

3D Graphics

3D graphics is supported with the following combinations of Linux versions and graphics cards:

  • vSGA is supported on RHEL 7 Workstation x64 with NVIDIA GRID K1 or K2 graphics cards.

  • vDGA is supported on RHEL 6 Workstation x64 with NVIDIA GRID K1 or K2 graphics cards.

  • vGPU is supported on RHEL 6 Workstation x64 with NVIDIA Maxwell M60 graphics cards.

  • vGPU is supported on RHEL 7 Workstation x64 with NVIDIA Maxwell M60 graphics cards.

  • vGPU is supported on RHEL 6 Workstation x64 with NVIDIA M6 graphics cards.

  • vGPU is supported on RHEL 7 Workstation x64 with NVIDIA M6 graphics cards.

Clipboard Redirection

With the clipboard redirection feature, you can copy and paste a rich text or a plain text between a client host and a remote Linux desktop. You can set the copy/paste direction and the maximum text size using Horizon Agent options. This feature is enabled by default. You can disable it during installation.

Single Sign-on

Single sign-on (SSO) is supported on the following Linux distributions.

  • RHEL 6/7 Workstation x64

  • CentOS 6/7 x64

  • SLED 11 SP3/SP4 x64

  • Ubuntu 14.04/16.04 x64

Smart Card Redirection with SSO

Smart card redirection is supported on RHEL 6 Workstation x64. Personal Identity Verification (PIV) cards and Common Access Cards (CAC) are supported. Mac client is not supported.

Audio-in

Audio input redirection from a client host to a remote Linux desktop is supported. This feature is not based on the USB redirection function. If you want this feature enabled, you must select it during installation. You must select the system default audio in device "PulseAudio server (local)" in your application for the audio input. This feature is supported on the following Linux distributions.

  • Ubuntu 14.04 x64 with MATE, KDE, or Gnome Fallback (Metacity) desktop environment

  • Ubuntu 16.04 x64 with MATE or Gnome Flashback (Metacity) desktop environment

  • RHEL 7 Workstation x64 with KDE or Gnome desktop environment

Audio-out

Audio output redirection is supported. This feature is enabled by default. To disable this feature, you must set the RemoteDisplay.allowAudio option to false. Beginning with Horizon 7 version 7.2 release, VMWare Horizon HTML Access accessed using Chrome and Firefox browsers provides audio-out support for Linux desktops.

Client Drive Redirection

The Client Drive Redirection (CDR) feature is available beginning with the Horizon 7 version 7.2 release. When you enable the CDR feature, your local system's shared folders and drives become available for you to access. You use the tsclient folder that is located in your home directory in the remote Linux desktop. To use this feature, you must install the CDR components.

USB Redirection

The USB Redirection feature is available beginning with the Horizon 7 version 7.2 release. The feature gives you access to locally attached USB devices from remote Linux desktops. You must install the USB Redirection components and USB VHCI driver kernel module to use the USB feature. Ensure that you have been granted sufficient privileges to use the USB device that you want to redirect.

Note:

USB 3.0 protocol is supported in Horizon 7 version 7.2 release.

Keyboard Layout and Locale Synchronization

This feature specifies whether to synchronize a client's system locale and current keyboard layout with the Horizon Linux Agent desktops. When this setting is enabled or not configured, synchronization is allowed. When this setting is disabled, synchronization is not allowed.

This feature is supported only for Horizon Client for Windows, and only for the English, French, German, Japanese, Korean, Spanish, Simplified Chinese and Traditional Chinese locales.

K Desktop Environment

Beginning with Horizon 7 version 7.2 release, the K Desktop Environment (KDE) is supported. The following are the currently supported Linux distributions.

  • CentOS 6 and 7

  • RHEL 6 and 7

  • Ubuntu 14.04 and 16.04

  • SLED 11 SP4

MATE Desktop Environment

As of Horizon 7 version 7.3 release, the MATE Desktop Environment is supported on the following Linux distributions.

  • Ubuntu 14.04

  • Ubuntu 16.04

FIPS 140-2 Mode

The Federal Information Processing Standard (FIPS) 140-2 mode support, although not yet validated with the NIST Cryptographic Module Validation Program (CMVP), is available beginning with Horizon 7 version 7.2.

The Horizon 7 Agent for Linux implements cryptographic modules that are designed for FIPS 140-2 compliance. These modules were validated in operational environments listed in CMVP certificate #2839 and #2866, and were ported to this platform. However, the CAVP and CMVP testing requirement to include the new operational environments in VMware's NIST CAVP and CMVP certificates remains to be completed on the product roadmap.

Note:

The Transport Layer Security (TLS) protocol version1.2 is required to support FIPS 140-2 mode.

UDP Support for VMware Blast Extreme

Beginning with the release of Horizon 7 version 7.3 for Linux desktop, the User Datagram Protocol (UDP) is supported for VMware Blast Extreme and is enabled by default. Initially, Blast Extreme only supported Transmission Control Protocol (TCP).

If one of the inline components used does not support UDP, connections will fall back to using TCP over UDP. For example, if your connection is using the Blast Security Gateway component of the Horizon Connection Server or Security Server, the connection uses TCP, even if both client and agent enabled UDP, because Blast Security Gateway does not support UDP. If users are connecting from outside the corporate network, the UDP component requires the VMware Unified Access Gateway (formerly called Access Point), which supports UDP.

Use the following information to establish a UDP-based Blast Extreme connection.

  • If the client connects to a Linux desktop directly, enable the UDP in both the client and agent. UDP is enabled by default in both the client and agent.

  • If the client connects to a Linux desktop using Unified Access Gateway, enable UDP in the client, agent, and Unified Access Gateway.

In a local area network (LAN), TCP performs better than UDP. You must disable UDP in the client or agent if you want to continue using TCP. In a wide area network (WAN), the UDP performance is better than the TCP performance.

Linux desktops and desktop pools have the following limitations:

  • Virtual printing, location-based printing, and Real-Time Video are not supported.

Note:

When a security server is used, port 22443 must be open in the internal firewall to allow traffic between the security server and the Linux desktop.