To connect to a remote desktop or application, you must provide the name of a server and supply credentials for your user account.


Obtain the following information from your View administrator:

  • Instructions about whether to turn on a VPN (virtual private network) connection.

  • Server name to use for connecting to the server.

  • Port number to use for connecting to the server if the port is not 443.

  • The credentials you need to log in, such as Active Directory user name and password, RSA SecurID user name and passcode, RADIUS authentication user name and passcode, or smart card personal identification number (PIN).

  • Domain name for logging in.

  • If you have Horizon Client 4.0 or later, instructions about whether you can use fingerprint authentication.

If your administrator sent you an email containing a URL to use for setting up an RSA SecurID software token on your client device, open that email and verify that you also have the activation code or that the activation code appears at the end of the URL.

For more information about the administrative tasks involved in setting up an embedded RSA SecurID software token, see the Using VMware Horizon Client guide for your device.

Determine which mode of certificate verification checking to use. See Certificate Checking Modes for Horizon Client.


  1. If a VPN connection is required, turn on the VPN.
  2. Tap the VMware View (Horizon Client 3.0) or Horizon (Horizon Client 3.1 and later) app icon on the Home screen.
  3. Connect to a server.



    Horizon Client 3.0

    • To connect to a new server, tap Add Server, type the name of a server, and tap Connect.

    • To connect to an existing server, tap the server shortcut on the Recent Connections screen.

    Horizon Client 3.1 and later

    • To connect to a new server, type the name of a server, type a description (optional), and tap Connect.

    • To connect to an existing server, tap the server shortcut on the Servers tab.

    Connections between Horizon Client and servers always use SSL. The default port for SSL connections is 443. If the View server is not configured to use the default port, use the format shown in this example:

  4. If a smart card is required or optional, select the smart card certificate to use and enter your PIN.

    If your smart card has only one certificate, that certificate is already selected. If there are many certificates, you can scroll through them if necessary.

  5. If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, either type your credentials or, if you plan to use an embedded RSA SecurID token, install an embedded token.



    Existing token

    If you use a hardware authentication token or software authentication token on a smart phone, enter your user name and passcode. The passcode might include both a PIN and the generated number on the token.

    Install software token

    Click External Token. In the Install Software Token dialog box, paste the CT-KIP URL or CTFString URL that your administrator sent to you in email. If the URL contains an activation code, you do not need to enter anything in the Password or Activation Code text box.

  6. If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials, enter the next generated number on the token.

    Do not enter your PIN and do not enter the same generated number entered previously. If necessary, wait until a new number is generated.

  7. If you are prompted for a user name and password, supply Active Directory credentials.
    1. Type the user name and password as instructed by your View administrator.
    2. Select a domain.
    3. (Optional) If the Enable Fingerprint check box is available, select it to use fingerprint authentication.

      The Enable Fingerprint check box is available only if biometric authentication is enabled on the server and you have not previously authenticated with fingerprint authentication.

    4. (Optional) Select the Save Password check box if your administrator has enabled this feature and if the server certificate can be fully verified.

      If this is the first time you are saving a password, you are prompted to activate the device administrator, which is required to save a password on Android devices.

    5. Tap Connect.

    If fingerprint authentication is enabled and you are logging in for the first time, your Active Directory credentials are stored securely in the Android device's database for future use.

  8. If you are prompted for fingerprint authentication, place your finger on the fingerprint sensor.

    If you do not want to use fingerprint authentication, tap Cancel. You can connect to the server again and tap Use password to enter a user name and password.

  9. (Optional) Tap the display protocol settings icon in the upper-right corner of the screen to select the display protocol to use.

    PCoIP provides an optimized PC experience for delivery of images, audio, and video content on the LAN or across the WAN. VMware Blast provides better battery life and is the best protocol for high-end 3D and mobile device users. The default display protocol is PCoIP.

    You can select a display protocol in Horizon Client 4.0 and later. Horizon Client 3.x releases always use the PCoIP display protocol.

  10. Tap a desktop or application to connect to it.

    If you are using smart card authentication, you are not prompted to supply your PIN again, but the login process takes longer than if you use Active Directory authentication.

    If you are connecting to a session-based remote desktop, which is hosted on a Microsoft RDS host, and if the desktop is already set to use the Microsoft RDP display protocol, you will not be able to connect immediately. You will be prompted to have the system log you off of the remote operating system so that a connection can be made with the PCoIP display protocol or the VMware Blast display protocol. VMware Blast requires Horizon Client 4.0 or later and Horizon Agent 7.0 or later.


After you connect to a desktop or application for the first time, a shortcut for the desktop or application is saved to the Recent Connections screen (Horizon Client 3.0) or Recent tab (Horizon Client 3.1 and later). The next time you want to connect to the remote desktop or application, you can tap the shortcut instead of typing the server's name.