Horizon HTML Access 4.9 | 6 September 2018
These release notes cover the following topics:
- Key Features
- What's New in This Release
- Before You Begin
- Resolved Issues
- Known Issues
HTML Access makes it easy to access your remote desktops (Windows and Linux) and published applications from an HTML5-based browser. No need to install any software.
- Work the way you want to - Access Horizon 7 desktops and applications from device platforms where no native client is available, or from any computer on which you do not want to install software. You can also select HTML Access from a VMware Workspace Catalog.
- Simple connectivity - HTML Access is tightly integrated with VMware Horizon 7 for simple setup and connectivity. Open a browser, enter a server URL, and log in to see a list of available remote desktops and published applications.
- Secure from any location - At your desk or away from the office, your data is always secure. Enhanced certificate checking is performed on the client. HTML Access also supports optional RADIUS and RSA SecurID authentication.
- Configuring Horizon Client data sharing
If your Horizon administrator has opted to participate in the customer experience improvement program, VMware collects and receives anonymous data on client systems to prioritize hardware and software compatibility. You can configure whether to share information about your client system by enabling or disabling a setting in Horizon Client.
For HTML Access, both the user interface and the documentation are available in English, Japanese, French, German, Simplified Chinese, Traditional Chinese, Korean, and Spanish.
- For a list of the supported browsers, supported client operating systems, HTML Access system requirements, and installation instructions, see VMware Horizon HTML Access Installation and Setup Guide.
- HTML Access 4.9 supports Horizon Agent 7.6
- With HTML Access 4.9 and Horizon 7.6, if you connect to Connection Server through a load balancer or a gateway such as F5 or Unified Access Gateway (previously Access Point), you must first configure a security setting in Horizon 7. For more information, see "Origin Checking" in Horizon 7 Security.
- On iOS Safari, if you connect to a remote desktop and play audio or video on the desktop, and switch to playing audio or video with a native application without disconnecting from Connection Server, and switch back to the remote desktop on Safari, audio will no longer work.
Workaround: Disconnect or logoff from Connection Server and connect to the desktop again.
- When you use any version of HTML Access with Firefox 40, 41, 42, or 50.0, audio does not work. Note that these versions of Firefox are not supported by any version of HTML Access.
Workaround: Use a supported version of Firefox.
- The location-based printing feature does not work if you set your browser to use a proxy or if the client system is in a vLAN that is different from the vLAN in which the Horizon 7 environment is located.
Location-based printing policies that use the MAC Address or client name are not supported.
- Sometimes the virtual printing feature and location-based printing feature are not able to display the correct list of printers in the Devices and Printers window of a remote, session-based desktop. This issue can occur with desktops provided by Windows Server 2012 RDS hosts and Windows Server 2012 R2 RDS hosts. The printers shown within applications are correct, however.
Workaround: Log off the desktop running on the server and reconnect to it.
- VMware recommends not using RDS Per Device Client Access Licenses (CALs) for HTML Access. If you do so, the licensing mechanism treats each browser as a device, and if cookies are cleared, the browser will use another license.
Workaround: Use RDS Per User CALs for HTML Access.
- Sound playback quality is best on browsers that have Web Audio API support. Chrome, Safari, and Firefox 25 and later browsers have Web Audio API support. Browsers that do not have this support include Internet Explorer (up to and including Internet Explorer 11) and Firefox 24 and earlier.
- On Chrome, Safari, and Edge browsers, if audio is playing and you switch to another tab in the browser or minimize the browser, audio processing becomes intermittent. After you re-focus on the Horizon 7 desktop tab, audio might be out of sync with video for a few seconds.
Workaround: Either refresh the page or pull the Horizon 7 desktop's tab out of the browser so that it has its own window.
- The Linkclump Google Chrome extension interferes with proper right-click behavior. If you right-click something in the remote desktop, you might see the right click behave like a left-click-and-drag action.
Workaround: Either disable the extension or go into the Google Chrome browser's Linkclump Options page and in the Blacklist section, enter the address of the Horizon Connection Server.
- If you are using a Firefox browser and your HTML Access desktop session gets disconnected immediately upon connecting, verify that your Firefox browser proxy settings are configured correctly.
Do not configure desktops to be suspended after users disconnect. This setting does not work correctly with HTML Access.
- Connecting to a desktop or application fails if Blast Secure Gateway (BSG) is enabled on both the VMware Unified Access Gateway server (formerly named VMware Access Point) and the Horizon Connection Server.
Workaround: Disable BSG on the Horizon Connection Server.
In VMware Unified Access Gateway (formerly named VMware Access Point), if you set the Horizon Edge Setting "Enable Blast" to False, you will not be able to access remote desktops and applications through HTML Access. Generally, because Unified Access Gateway is deployed in a DMZ, the "Enable Blast" option is set to True, and this issue does not occur.
Workaround: In Unified Access Gateway, if you set "Enable Blast" to False and also use HTML Access, you must also set the "proxyPattern" option to "/|/portal(.*)".
- When you connect to a Linux desktop with the Japanese keyboard, the keyboard mapping might be incorrect. For example, the key positions \| and \_ will be incorrect.
Workaround: Keep the client input language as Japanese and switch the desktop input language to English for the two key positions \| and \_ only. Keep the desktop input language as Japanese and switch the client input language to English for all other key positions.
- When connecting to a Linux desktop, some keyboard input does not work. For example, (1) with English keyboard, the * key on the numeric keypad is display as 8, (2) with English keyboard, the + key on the numeric keypad is displayed as =, and (3) with non-English IME on both client and desktop, some non-English keys are not displayed correctly.
Workaround: For issues #1 and #2, use the typewriter keys * and + in the main keyboard area instead of the numeric keypad. For issue #3, set English IME on the HTML Access client and non-English IME on the desktop.
- With Safari 9 and with Blast Secure Gateway (BSG) disabled, when a user launches a desktop for the first time, a gray blank screen appears instead of the desktop. If the user closes the session by clicking the Close button on the sidebar and reconnects to it by clicking the desktop on the sidebar, the desktop launches correctly but the logoff function will not work and will cause the desktop window to freeze. This issue only happens the first time the user launches a desktop.
Workaround: Close the Connection Server session by logging out of the Connection Server or by closing the browser, and log in to the Connection Server again.
- After Horizon 7 is upgraded from 7.0 to 7.0.1 or a later version, users who have previously connected to a version of Horizon that is older than 7.0.1 do not see the new feature RTAV or File Transfer.
Workaround: Perform one of the following actions:
- Clear the browser's cache before logging in to the Connection Server.
- Launch a desktop and refresh the browser.
- Intermittently, autofit of an application does not work. This can happen if you launch an application and then activate full-screen mode for the browser, or launch an application from the sidebar and activate full-screen mode, or launch an application and then enlarge the size of the browser window.
Workaround: Activate full-screen mode or resize the browser window before launching an application.
- On ChromeBook, when connecting to an Access Point server that uses a self-signed certificate, HTML Access reports the error ERR_CERT_INVALID.
Workaround: Install a CA-signed certificate on the Access Point server.
- Users can still upload files when the remote desktop is locked.
- If you use HTML Access with Firefox 46, you might encounter problems. Note Firefox 46 is not a supported version.
Workaround: Use a supported version of the Firefox browser, for example, Firefox 47, or use a different browser that is supported.
- On iOS, if you attempt to connect to a remote desktop using a self-signed certificate, Safari reports the error "Your desktop has been disconnected. Unable to reconnect to desktop." This problem occurs because self-signed certificates are not supported on iOS.
Workaround: An administrator must install a CA-signed certificate on the Horizon 7 server and you must trust the certificate on your iOS device. For information about installing certificates on a Horizon 7 server, see the Horizon 7 Administration document. For information about trusting certificates on an iOS device, see the VMware Horizon HTML Access Installation and Setup Guide. If the Blast Secure Gateway is disabled on the Horizon 7 server, an administrator must perform the following additional steps on the remote desktop to connect from iOS:
- Use mmc to import the CA-signed certificate into the Windows certificate store.
- Replace the sslHash key in HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware Blast\Config with the key from the thumbprint of the certificate issued to the Blast Agent Hostname or IP address.
- Restart the Blast Agent VM.
- When the "Clean up credential when tab closed for HTML Access" global setting is enabled in Horizon 7, the cache is not cleared if a user closes a tab when the network connection is not available.
- When an administrator enables a clipboard format restriction, the text in the Copy & Paste window does not describe the format limitation. For example, if an administrator enables the "Filter text out of the incoming clipboard data" clipboard policy setting, the Copy & Paste window does not notify the user that text cannot be transferred from the client to the remote desktop or application.
- If you access a remote desktop or application through HTML Access that is connected via an Access Point server, the remote desktop or application session does not get disconnected after the Access Point server session timeout is reached..
- Occasionally, RTAV video redirect does not work when using it for a second time with Chrome on a Mac OS system.
Workaround: Referesh the browser.
- When using Horizon 7 that is connected via a VMware Unified Access Gateway server (formerly named VMware Access Point), using the URI format "
https://<AP-address>/?domainName=finance&userName=fred"in a Web browser results in the following error:
"This <AP-Address> page can’t be found. No webpage was found for the web address: https://<AP-Address>/?domainName=finance&userName=fred", where <AP-Address> is the IP or FQDN of the Access Point server."
Workaround: Modify the URI format by adding "
portal/webclient/index.html" after the <AP-Address> part. For example, use
- On Internet Explorer 11.0.9600.18537 or earlier, prior to logging into a VMware Blast session, if the user launches an HTML Access Agent that does not have a certificate, a certificate confirmation page appears. After confirming the certificate, the user is returned to the desktop and application selection page instead of the Blast session page.
Workaround: On the desktop and application selection page, click the desktop again and the connection will succeed.
- After a user connects to an HTML Access Agent and opens an Internet Explorer 11 or Edge browser, attempts to resize the browser window fails.
Workaround: Use a Firefox or Chrome browser instead.
While using Safari 10.1 to upload a file, the reconnect dialog box might pop up. The file transfer is interrupted and sometimes the remote session will be disconnected. This a known Safari bug: https://bugs.webkit.org/show_bug.cgi?id=170463
Workaround: Update your Safari browser to version 10.1.2 or later.
After an administrator sets the 'change password at next logon' option for a user's account and the user's idle session times out, the application that was active during the session timeout is not re-launched automatically after the user re-authenticates and changes the password successfully.
Workaround: Refresh the page and launch the application again from the sidebar.
The remote desktop or applications can not be launched successfully from an iOS device if the iOS device is using an intermediate CA-signed certificate.
Workaround: Install a root CA-signed certificate on your iOS device.
After you launch a remote application on a Safari 10 browser, when you move the mouse pointer to the remote application's content area, the pointer changes from the arrow pointer to the I-cursor. However, the I-cursor does not revert back to the arrow pointer even after you move the pointer away from remote application's content area.
Workaround: Return to the the desktop and application selector screen, and launch the remote application again. Alternatively, reset the remote application by clicking the Settings toolbar button in the upper-right corner of the desktop and application selector screen, click Reset, and launch the remote applicaiton again. Note that these workaround steps may not resolve the issue every time.
When you use a web browser on a Mac OS 10.13 system in a Horizon Collaboration shadow session, if Fit to Viewer is disabled and the shadow session's screen resolution is less than the primary session's screen resolution, no scroll bar is displayed. This issue occurs because the scroll bars are hidden by default in Mac OS 10.13 systems.
Workaround: Modify the System Preferences to always display the scroll bars.
- Choose Apple menu > System Preferences.
- Click General.
- In the Show scroll bars section, select Always.
If you launch HTML Access from a Chrome Web browser on a Mac OS 10.13.3 system and you change the system time zone, the changed time is not reflected in the HTML Access session.
Workaround: Exit and restart the Chrome browser session, and relaunch HTML Access.
If you use a self-signed certificate with Unified Access Gateway, you might not be able to access a Horizon desktop when you use a Microsoft Edge Web browser for your HTML Access session.
Workaround: Use one of the following workarounds to resolve this issue.
- Use a valid CA-signed certificate.
- Do not use port 8443 for the Blast External URL property. Use port 443 instead.
When you launch HTML Access from a Google Chrome Web browser on Android 8.1 or Safari Web browser on iOS 11, the desktop screen sometimes disappears while using the software keyboard in a remote session. The issue often occurs when you are rotating the device, then closing, and reopening the software keyboard. Once the error has occurred, all subsequent desktop sessions opened are not visible either.
Workaround: Reload the Web browser page.
The Web browser from which you launch a desktop might hang if you repeat the following steps multiple times: enter multiple-monitor mode, open Real-Time Audio-Video (RTAV), move the camera window to the second display, exit multiple-monitor mode, or launch another desktop from the sidebar.
The sidebar and sometimes the remote desktop disappear after you unplug the extended display monitor while using the multiple monitor feature with a Google Chrome Web browser.
Workaround: Relaunch the HTML Access Web client, resize the application window, or replug the extended display monitor.
If you configured Unified Access Gateway with a root certificate that is signed by a Certificate Authority (CA) and the Blast External URL property value is set to blank or to port 8443, you might not be able to connect to a Horizon desktop if you are using a Microsoft Edge browser. Once the error happens, all new connected sessions are not visible.
Workaround: Use one of the following workarounds to resolve the issue.
- Set the Blast External URL property to port 443.
- Close the Micrrosoft Edge browser, then relaunch the HTML Access Web Client and connect to a desktop.
Smart Policy changes do not take effect immediately after reconnecting to a remote desktop. After you change the Smart Policy Clipboard and File Transfer from Allow all to Disable, the functions are disabled, but the text for the the Copy & Paste displays the incorrect text. Also, if you are connected to a desktop from an HTML Access session when the Smart Policy Clipboard and File Transfer setting is changed and you disconnect, the changes do not take affect after you reconnect to the desktop.
Workaround: Log off from the remote desktop and reconnect to the remote desktop, then disconnect from the remote desktop and reconnect to the remote desktop again.
When H.264 decoding is enabled, if you use the sidebar to switch between remote desktops, or between remote desktops and published applications, the remote sessions become unresponsive. The remote sessions are still connected, but mouse clicks and other actions do not work.
Workaround: Close and reconnect to the remote desktop or published application sessions.
After an upgrade from Horizon 6 version 6.x to Horizon 7 version 7.x, the published applications that are entitled to domain users are no longer visible after a login from the VMware Horizon HTML Access client.
Workaround: In Horizon Administrator, select Resources > Farms, edit a farm, disable Allow HTML Access to desktops and applications on this farm, and then enable it again.
When using Google Chrome Web browser version 67 or later, you might get an empty session after you launch a remote desktop, enter multiple-monitor mode, move the mouse pointer to the second display monitor, and exit multiple-monitor mode.
Workaround: Manually resize the Google Chrome Web browser or refresh the page.