To set up VMware Horizon 8 in FIPS mode, you must first enable FIPS mode in the Windows environment. Then you install all the VMware Horizon 8 components in FIPS mode.
The option to install
VMware Horizon 8 in FIPS mode is available only if FIPS mode is enabled in the Windows environment. For more information about enabling FIPS mode in Windows, see
https://support.microsoft.com/en-us/kb/811833.
Note:
Horizon Console does not indicate whether
VMware Horizon 8 is running in FIPS mode.
To install VMware Horizon 8 in FIPS mode, perform the following administrative tasks.
- When installing Connection Server, select the FIPS mode option. See Install Horizon Connection Server with a New Configuration.
- When installing a replica server, select the FIPS mode option. See Install a Replicated Instance of Horizon Connection Server.
- Disable weak ciphers for Horizon Agent machines. See Deactivate Weak Ciphers in SSL/TLS.
- When installing Horizon Agent on a Windows machine, select the FIPS mode option. See the Horizon Agent installation topics in the Windows Desktops and Applications in Horizon 8 document.
- When installing Horizon Agent on a Linux machine, include the parameter to enable FIPS support. See the Horizon Agent installation topics in the Linux Desktops and Applications in Horizon 8 document.
- For Windows clients, enable FIPS mode in the client operating system and select the FIPS mode option when installing Horizon Client for Windows. See the Horizon Client for Windows Guide document.
- For Linux clients, enable FIPS mode in the client operating system. See the Horizon Client for Linux Guide document.
