Access is denied when Horizon Client connects with RADIUS two-factor authentication.

Problem

A Horizon Client connection using RADIUS two-factor authentication displays Access Denied.

Cause

RADIUS does not receive a reply from the RADIUS server, causing VMware Horizon to time out.

Solution

The following common configuration mistakes most often lead to this situation:

  • The RADIUS server has not been configured to accept the Connection Server instance as a RADIUS client. Each Connection Server instance using RADIUS must be set up as a client on the RADIUS server. See the documentation for your RADIUS two-factor authentication product.
  • The shared secret values on the Connection Server instance and the RADIUS server do not match.