Smart Card Authentication – Bits and Bytes

November 22, 2023November 30, 2023

Configuring Smart Card | Common Access Card (CAC) | Personal Identity Verification (PIV) in VMware vSphere and VMware Horizon

Overview

I use a YubiKey 5Ci (by Yubico) in my lab. This allows me to log in with a smart card interface. If you are looking for information on how to configure smart card access in your lab, please reference the following post: MyLab: Smart Card Authentication

October 30, 2023October 30, 2023

MyLab: Smart Card Authentication

I use a YubiKey 5 Series security key (from Yubico) in my lab. This allows me to use strong authentication and test out security scenarios that I usually find myself in while on the job. I did use the reference material from Yubico to get this working, but am going to transcribe and document this for future use for myself.

October 27, 2023October 27, 2023

MyLab: VMware Horizon True SSO

An Enterprise Certificate Authority needs to be accessible. Certificates are a big part of True SSO. There are going to be short term certificates that will be issued. True SSO will require the following servers and services:

A deployed and configured Workspace ONE Access appliance
A configured Workspace ONE Access connector with the VMware Virtual App Sync service configured
A synced Virtual Apps Collection in Workspace ONE Access
An Enterprise Certificate Authority
Smart Cards authentication configured in Active Directory
VMware Horizon Connection Server
VMware Horizon Enrollment Server
VMware Workspace ONE Access appliance
VMware Workspace ONE Access Connector

Familiarity with the command line is helpful, but not necessary as well.