Before you begin
Create a network share with the appropriate configuration and store the ThinApp packages in the appropriate location in that network share. See Create a Network Share for ThinApp Packages That VMware Identity Manager Manages.
Verify that you have the UNC path to the network share folder where the ThinApp packages are located.
Verify that you have an Active Directory domain name and the username and password of an account in that Active Directory that has the rights to join the domain. Even if you are using account-based access, the administration console require the completion of the Join Domain page before you can use the ThinApp Packages page.
To enable domain-based access, you must also join VMware Identity Manager to the same Active Directory domain to which the ThinApp package repository is joined. Verify that you have the Active Directory domain name for the domain that the network share uses and the username and password of an account in that Active Directory that has the rights to join the domain. The Active Directory account is used to join VMware Identity Manager to the domain.
When enabling account-based access, verify that you have a username and password that has permission to read the network share. See VMware Identity Manager Requirements for ThinApp Packages and the Network Share Repository.Note:
Unless you want to restrict use of the ThinApp packages to domain-joined Windows systems for all runtime situations, you should enable account-based access in addition to domain-based access. This combination provides the most flexibility for supporting runtime situations where users need to use their entitled ThinApp packages without joining their Windows systems to the domain.
- Join the Active Directory domain.
- Log in to the administration console.
- Select the Identity & Access Management tab.
- Click Setup.
- In the Connectors page, click Join Domain in the appropriate connector row.
- On the Join Domain page, type the information for the Active Directory domain and click Join Domain.
Do not use non-ASCII characters when you enter the Active Directory (AD) domain name, AD username, or AD password. Non-ASCII characters are not supported in these entry fields in the administration console.
Type the fully qualified domain name of the Active Directory. An example is HS.TRDOT.COM.
Type the username of an account in the Active Directory that has permissions to join systems to that Active Directory domain.
Type the password associated with the AD Username. This password is not stored by VMware Identity Manager.Important:
Each time you import the VMware Identity Manager configuration you must rejoin VMware Identity Manager to the domain.
The Join Domain page refreshes and displays a message that you are currently joined to the domain.
- Enable access to the stored ThinApp packages.
- Select the Catalog tab.
- Click Manage Desktop Applications and select ThinApp Applications.
- Select the Enable packaged applications check box.
- Complete the information and click Save.
Do not use non-ASCII characters for entries in the fields on this page. Non-ASCII characters are not supported in these entry fields in the administration console.
Type the path to the shared folder where the ThinApp packages' folders are located, in the UNC path format \\server\share\subfolder. For example: \\DirectoryHost\ThinAppFileShare . For DirectoryHost, provide the hostname, not the IP address.
For both CIFS and DFS network shares, this path must be a directory under the namespace, and not the namespace itself.
Select the interval at which you want VMware Identity Manager to synchronize the information about the ThinApp packages located at the network share location with VMware Identity Manager.
For a weekly interval, set the day and time of day at which the syncing occurs. For a daily interval, set the time.
Enable account based access
Select this option if you want to use account based access.Note:
If your ThinApp package repository is a DFS network share, you must select this option. If you want the ability for users to use their entitled ThinApp packages on non-domain-joined Windows systems, you must enable account based access.Note:
Account based access is required if you are using NetApp share.
Type the username for a user account that has read access to the network share. This information is used when Enable account based access is selected.
Type the password associated with the Share User user account.
A message appears stating that the values are saved, and a summary of the last sync status is displayed.
- Sync the ThinApp packages with VMware Identity Manager by clicking Sync Now.
The time it takes to complete the sync process depends on the number of ThinApp packages.
When the sync process is done, a list of the ThinApp packages that were synced appears.
VMware Identity Manager is now configured so that you can entitle groups and users to ThinApp packages, and those users can run their entitled ThinApp packages using the VMware Identity Manager Desktop application installed on their Windows systems.
What to do next
Entitle groups and users to ThinApp packages. See the VMware Identity Manager Administration Guide.