Setting up a VMware Horizon deployment for iOS clients involves using certain Connection Server configuration settings, meeting the system requirements for VMware Horizon servers and iOS clients, and installing the app for Horizon Client .
System Requirements iOS devices that run Horizon Client must meet certain hardware and software requirements.
Preparing Connection Server for Horizon Client Before end users can connect to a server and access a remote desktop or published application, a Horizon administrator must configure certain Connection Server settings.
Installing Horizon Client You can install Horizon Client the same way that you install other iOS apps. You can also configure VMware Workspace ONE UEM to deliver Horizon Client to end users.
Using Embedded RSA SecurID Software Tokens If you create and distribute RSA SecurID software tokens to end users, users need enter only their PIN, rather than their PIN and a token code, to authenticate.
Create a Virtual Smart Card To use the derived credentials feature, you must create a virtual smart card to use when you log in to a server and connect to a remote desktop. One virtual smart card can hold multiple certificates.
Manage a Virtual Smart Card You can reset the PIN for a virtual smart card in Horizon Client . You can also delete a virtual smart card. After you log in to a remote desktop with a virtual smart card, you can also use the Charismathics Security Token Configurator in the remote desktop to view the certificate and key, manage, and change the user PIN for the virtual smart card.
Pair a Virtual Smart Card with Smart Card Middleware To use the derived credentials feature, you must create a group policy object (GPO) in Active Directory that pairs a virtual smart card with the smart card middleware installed on the remote desktop. You then apply the GPO to the organizational unit (OU) that contains the remote desktop.
Configure Device ID Sharing with OPSWAT If OPSWAT Mobile App is installed on the client device, you are prompted to share the client device ID when you start Horizon Client . You can also enable or disable device ID sharing by configuring a setting in Horizon Client .
Configure Advanced TLS Options You can select the security protocols and cryptographic algorithms that Horizon uses to encrypt communications between Horizon Client and servers, and between Horizon Client and Horizon Agent .
Configure VMware Blast Options You can configure VMware Blast options for remote desktop and published application sessions that use the VMware Blast display protocol.
Configure the Horizon Client Default View You can configure whether recently used remote desktops and published applications shortcuts, or server shortcuts, appear when you start Horizon Client .
Configure Horizon Client Data Sharing If a Horizon administrator has opted to participate in the VMware Customer Experience Improvement Program (CEIP), VMware collects and receives anonymous data from client systems through Connection Server. You can configure whether to share this client data with Connection Server.