To connect to a remote desktop or application, you must provide the name of a server and supply credentials for your user account.

Before you begin

  • Obtain login credentials, such as an Active Directory user name and password, RSA SecurID user name and passcode, or RADIUS authentication user name and passcode.

  • Perform the administrative tasks described in Preparing Connection Server for Horizon Client.

  • If you are outside the corporate network and are not using a security server to access the remote desktop or application, verify that your client device is set up to use a VPN connection and turn on that connection.


    In most cases, use a security server rather than a VPN.

  • Verify that you have the fully qualified domain name (FQDN) of the server that provides access to the remote desktop or application. Underscores (_) are not supported in server names. If the port is not 443, you also need the port number.

  • If you plan to use embedded RSA SecurID software, verify that you have the correct CT-KIP URL and activation code. See Using Embedded RSA SecurID Software Tokens.

  • Configure the certificate checking mode for the SSL certificate presented by Connection Server. See Setting the Certificate Checking Mode for Horizon Client.


  1. If a VPN connection is required, turn on the VPN.
  2. On your Chrome OS device, tap the Chrome App Launcher icon in the taskbar and tap the Horizon Client for Chrome OS app.

    The Horizon Client window opens.

  3. Connect to a server.



    Connect to a new server

    Enter the name of a server, enter a description (optional), and tap Connect.

    Connect to a existing server

    Tap the server shortcut on the Servers tab.

    Connections between Horizon Client and servers always use SSL. The default port for SSL connections is 443. If the sever is not configured to use the default port, use the format shown in this example:

  4. If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, either type your credentials or, if you plan to use an embedded RSA SecurID token, install an embedded token.



    Existing token

    If you use a hardware authentication token or software authentication token on a smart phone, enter your user name and passcode. The passcode might include both a PIN and the generated number on the token.

    Install software token

    Click External Token. In the Install Software Token dialog box, paste the CT-KIP URL or CTFString URL that your administrator sent to you in email. If the URL contains an activation code, you do not need to enter anything in the Password or Activation Code text box.

  5. If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials, enter the next generated number on the token.

    Do not enter your PIN and do not enter the same generated number entered previously. If necessary, wait until a new number is generated.

    If this step is required, it is required only when you mistype the first passcode or when configuration settings in the RSA server change.

  6. In the login dialog box, type your user name and password, select a domain, and tap Connect.

    If the Domain drop-down menu is hidden, you must type the user name as username@domain or domain\username.

  7. (Optional) : Tap the display protocol settings icon in the upper-right corner of the screen to select the display protocol to use.

    VMware Blast provides better battery life and is the best protocol for high-end 3D and mobile device users. The default display protocol is PCoIP.

  8. Tap a remote desktop or application icon to connect to it.


After you connect to a remote desktop or application for the first time, a shortcut for the desktop or application is saved to the Recent tab. The next time you want to connect to the remote desktop or application, you can tap this shortcut.

If Horizon Client cannot connect to the remote desktop, perform the following tasks:

  • Determine whether Connection Server is configured not to use SSL. Horizon Client requires SSL connections. Check whether the global setting in Horizon Administrator for the Use SSL for client connections check box is deselected. If so, you must either select the check box, so that SSL is used, or set up your environment so that clients can connect to an HTTPS enabled load balancer or other intermediate device that is configured to make an HTTP connection to Connection Server.

  • Verify that the security certificate for Connection Server is working properly. If it is not, in Horizon Administrator, you might also see that the agent on desktops is unreachable.

  • Verify that the tags set on the Connection Server instance allow connections from this user. See the View Administration document.

  • Verify that the user is entitled to access the desktop or application. See the Setting Up Virtual Desktops in Horizon 7 or Setting Up Published Desktops and Applications in Horizon 7 document.