Table of Contents
Certificate Requirements
When you install VMware Horizon Connection Server, a self-signed certificate will be installed into the Personal certificate store.
You should use a Certificate Authority (CA) signed certificate for the computer account and store it in the Personal certificate store before installing VMware Horizon Connection server. During the installation, if a machine certificate is already installed, it will be used. If you are going to use a load balancer, ensure the load balanced fully qualified domain name is in the Common Name (CN) attribute of the certificate and each Horizon Connection server’s fully qualified domain name is added to the Subject Alternative Name (SAN) attribute of the certificate.
Open the Certificates – Local Machine (certlm.msc) console and install the machine certificate. Make sure that you check the box to Mark this key as exportable. If you forget this step, just import the certificate again. The private key is required to bring up the VMware Horizon View Blast Secure Gateway service. Blast Secure Gateway logs (C:\ProgramData\VMware\VDM\logs\Blast Secure Gateway) will report that the private key is not accessible if this step is forgotten.
Once installed, right-click the certificate, choose properties, and change the Friendly name to vdm, making sure vdm is lowercase.
Click the OK button.
Service Accounts
A service account should be added to the local administrator security group as a fail-safe way to log in.
Open the Computer Management console (compmgmt.msc). Expand System Tools > expand Local Users and Groups > click Groups folders.
Double-click the Administrators folder and add the Active Directory Service Account. A user account on the local computer cannot be used.
Installing VMware Horizon Connection Server Software
Using an administrative account, double-click the VMware Horizon Connection Server installer.
Answer the optional User Account Control window.
The Installation Wizard opens.
Click the Next button.
Review the License Agreement.
Choose the I accept the terms in the license agreement radio button.
Click the Next button.
Leave the default installation location or change if necessary.
Click the Next button.
For the first Connection Server, choose Horizon 7 Standard Server. For subsequent, or replica servers, choose Horizon 7 Replica Server. This same dialog works for Horizon 8, the UI will just say Horizon Standard Server instead of Horizon 7 Standard Server and Horizon Replica Server instead of Horizon 7 Replica Server.
You can leave the Install HTML Access checkbox selected, but know that if your users use Smart Cards, they will not be able to use HTML. The VMware Horizon Client must be used.
Choose IPv4 for the IP Protocol.
If you are in the Federal Government, your systems most likely are Federal Information Processing Standards (FIPS) compliant. You will likely want to choose Enabled for FIPS compliant cryptography. If FIPS is not configured in your operating system, this option will not display for you.
Click the Next button.
Enter a data recovery password and re-enter it.
Optionally, enter a password reminder.
Click the Next button.
Leave the Configure Windows Firewall automatically radio button selected.
Click the Next button.
Choose the Authorize the local Administrators group radio button. An administrative security group can be configured later after the installation.
Click the Next button.
Choose to Join the VMware Customer Experience Improvement Program or not.
Click the Next button.
Review the installation location.
Click the Install button.
Choose to Show the documentation or not.
Click the Finish button.
Repeat the installation on all subsequent connection servers. Be sure to choose Horizon 7 Replica Server (for Horizon 7) or Horizon Replica Server (for Horizon 8) depending on the version of VMware Horizon Connection server you are installing.
Continue to Configuring VMware Horizon Connection Server – Windows Server.
References
Install Horizon Connection Server with a New Configuration: https://docs.vmware.com/en/VMware-Horizon-7/7.13/horizon-installation/GUID-9F93A59F-C35F-4388-B3D6-CE4F50D8BAFD.html