To set up VMware Horizon in FIPS mode, you must first enable FIPS mode in the Windows environment. Then you install all the VMware Horizon components in FIPS mode.
The option to install
VMware Horizon in FIPS mode is available only if FIPS mode is enabled in the Windows environment. For more information about enabling FIPS mode in Windows, see
https://support.microsoft.com/en-us/kb/811833.
Note:
Horizon Console does not indicate whether
VMware Horizon is running in FIPS mode.
To install VMware Horizon in FIPS mode, perform the following administrative tasks.
- When installing Connection Server, select the FIPS mode option. See Install Horizon Connection Server with a New Configuration.
- When installing a replica server, select the FIPS mode option. See Install a Replicated Instance of Horizon Connection Server.
- Disable weak ciphers for Horizon Agent machines. See Disable Weak Ciphers in SSL/TLS.
- When installing Horizon Agent, select the FIPS mode option. See the Horizon Agent installation topics in the Setting Up Virtual Desktops in Horizon or Setting Up Published Desktops and Applications in Horizon document.
- For Windows clients, enable FIPS mode in the client operating system and select the FIPS mode option when installing Horizon Client for Windows. See the VMware Horizon Client for Windows Installation and Setup Guide document.
- For Linux clients, enable FIPS mode in the client operating system. See the VMware Horizon Client for Linux Installation and Setup Guide document.
