0% found this document useful (0 votes)
779 views96 pages

VMware Horizon - Deploy and Manage (V8.8) - Lab Manual PDF

Uploaded by

gersonl1262
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
779 views96 pages

VMware Horizon - Deploy and Manage (V8.8) - Lab Manual PDF

Uploaded by

gersonl1262
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 96

VMware Horizon: Deploy and

Manage [V8.8]

VMware® Education Services


VMware, Inc.
www.vmware.com/education
VMware Horizon: Deploy and Manage [V8.8]

Lab Manual

Part Number EDU-EN-HDM88-LAB (05-SEP-2023)

Copyright © 2023 VMware, Inc. All rights reserved. This manual and its accompanying
materials are protected by U.S. and international copyright and intellectual property laws.
VMware products are covered by one or more patents listed at
http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of
VMware, Inc. in the United States and/or other jurisdictions. All other marks and names
mentioned herein may be trademarks of their respective companies. VMware vSphere®
Client™, VMware vSphere® 2015, VMware vSphere®, VMware vCenter® Single Sign-On,
VMware vCenter Server®, VMware vCenter®, VMware Workstation™, VMware Workspace
ONE® Access™, VMware Workspace ONE®, VMware Workspace ONE® for React Native,
Windows OS Optimization Tool for VMware Horizon®, VMware View Agent, VMware
View®, VMware Horizon® View™, VMware Verify™, VMware Integrated Printing™,
VMware Horizon® 7, VMware Horizon® 7, VMware Horizon® 7 on VMware Cloud™ on
AWS, VMware Unified Access Gateway™, VMware Player™, VMware Horizon®
Connection Server™, VMware Horizon® Client™, VMware Horizon® Standard Edition,
VMware Go™, VMware ESXi™, and VMware ESX® are registered trademarks or
trademarks of VMware, Inc. in the United States and/or other jurisdictions.

The training material is provided “as is,” and all express or implied conditions,
representations, and warranties, including any implied warranty of merchantability, fitness
for a particular purpose or noninfringement, are disclaimed, even if VMware, Inc., has
been advised of the possibility of such claims. This material is designed to be used for
reference purposes in conjunction with a training course.
The training material is not a standalone training tool. Use of the training material for self-
study without class attendance is not recommended. These materials and the computer
programs to which it relates are the property of, and embody trade secrets and
confidential information proprietary to, VMware, Inc., and may not be reproduced,
copied, disclosed, transferred, adapted or modified without the express written approval
of VMware, Inc.

Typographical Conventions

The following typographical conventions are used in this course.

Conventions Usage and Examples

Monospace Identifies command names, command options, parameters, code


fragments, error messages, filenames, folder names, directory names,
and path names:

 Run the esxtop command.

 ... found in the /var/log/messages file.

www.vmware.com/education
Monospace Identifies user inputs:
Bold
 Enter ipconfig /release.

Boldface Identifies user interface controls:


 Click the Configuration tab.

Italic Identifies book titles:

 vSphere Virtual Machine Administration

<> Indicates placeholder variables:

 <ESXi_host_name>

 ... the Settings/<Your_Name>.txt file

www.vmware.com/education
Contents

Lab 1 Creating a VMware Horizon Windows 10 Desktop .............................. 1


Task 1: Log In to the STUDENT-A-01 Desktop VM .................................................................. 1
Task 2: Create a VM with vSphere......................................................................................... 1
Task 3: Install VMware Tools on the VM ............................................................................... 2
Task 4: Join the VM to a Domain ......................................................................................... 4
Lab 2 Installing Horizon Agent in Windows Desktop Pools ..........................6
Task 1: Create a vCenter Server Resource Pool for the VMware Horizon Desktop Pool ............ 6
Task 2: Install Horizon Agent on the Win10Opt VM ............................................................... 7
Lab 3 Optimizing a VMware Horizon Windows Desktop ..............................9
Task 1: Run the OS Optimization Tool ................................................................................... 9
Task 2: Analyze the VM ...................................................................................................... 10
Task 3: Configure Common Options ................................................................................... 10
Task 4: Optimize the VM .................................................................................................... 10
Task 5: Finalize the VM ....................................................................................................... 11
Task 6: Prepare for Deployment .......................................................................................... 11
Lab 4 Installing Horizon Agent on Linux Desktops .....................................12
Task 1: Install Horizon Agent on the Linux VM ...................................................................... 12
Task 2: Deploy a Second Linux Desktop VM ........................................................................ 15
Lab 5 Creating and Entitling Desktop Pools .............................................. 17
Task 1: Create a Windows Manual Desktop Pool .................................................................. 17
Task 2: Add a VM to a Manual Desktop Pool ....................................................................... 18
Task 3: Create a Linux Manual Desktop Pool ....................................................................... 19
Task 4: Entitle the Manual Desktop Pools ........................................................................... 20

iii
Lab 6 Installing and Using Horizon Client ................................................. 22
Task 1: Install Horizon Client on the STUDENT-A-01 Desktop VM ......................................... 22
Task 2: Connect to a Windows Horizon Desktop ................................................................. 22
Task 3: Connect to a Linux Horizon Desktop ....................................................................... 24
Lab 7 Configuring Print and Client Drive Redirection ................................ 25
Task 1: Verify Print and Client Drive Redirection Agent Features .......................................... 25
Task 2: Test Print Redirection ............................................................................................ 26
Task 3: Verify Client Drive Redirection ................................................................................27
Lab 8 Deploying Instant Clone Pools ....................................................... 29
Task 1: Take a Baseline Snapshot of the Golden Image ........................................................ 29
Task 2: Enable Instant Clone and Authorize a Horizon Console Account for Use by ClonePrep
........................................................................................................................... 30
Task 3: Create an Automated Desktop Pool of Windows Instant Clone VMs ......................... 30
Task 4: Create an Instant Clone Pool of Linux VMs .............................................................. 33
Task 5: Test an Individual Windows Instant Clone VM ......................................................... 36
Task 6: Test a Linux Instant Clone VM ................................................................................ 37
Lab 9 Managing Instant Clone Pools ....................................................... 39
Task 1: Install WinSCP on an Instant Clone Golden Image .................................................... 39
Task 2: Deploy the Updated Instant Clone Image ................................................................ 40
Task 3: Test the Updated Instant Clone VM ......................................................................... 41
Lab 10 Creating an Automated RDSH Farm ............................................. 42
Task 1: Verify That the RDSH Role Is Installed on the RDSH VM ........................................... 42
Task 2: Set Up an RDSH for Instant Clones ......................................................................... 43
Task 3: Create an RDSH Farm ........................................................................................... 44
Lab 11 Creating RDSH Application and Desktop Pools ............................... 47
Task 1: Create an Application Pool ..................................................................................... 47
Task 2: Verify the Creation of the Application Pool .............................................................. 48
Task 3: Create an RDS Desktop Pool ................................................................................. 48
Task 4: Verify the Creation of the RDS Desktop Pool ........................................................... 49
Task 5: Delete Application Pools ....................................................................................... 50
Lab 12 Monitoring VMware Horizon......................................................... 51
Task 1: Monitor the Status of the Horizon Components with the Dashboard ........................... 51
Task 2: Monitor the Instant Clone Desktop Session with the Help Desk Tool ......................... 52

iv
Lab 13 Configuring Horizon Connection Server ........................................ 55
Task 1: Prepare the Environment ....................................................................................... 55
Task 2: Verify the VMware Horizon Software License .......................................................... 56
Task 3: Associate a vCenter Server Instance with a Horizon Connection Server ..................... 56
Task 4: Configure an Event Database ................................................................................. 57
Task 5: Install a Replica Connection Server ......................................................................... 57
Lab 14 Navigating AD LDS Databases .................................................... 60
Task 1: Back Up the AD LDS Database on SA-CONNSERV-01.............................................. 60
Task 2: Connect to the SA-CONNSERV-01 AD LDS Database ............................................... 61
Task 3: Navigate the SA-CONNSERV-01 AD LDS Database .................................................. 61
Task 4: Back Up the AD LDS Database on SA-CONNSERV-02 ............................................ 62
Task 5: Connect to the SA-CONNSERV-02 AD LDS Database ............................................. 63
Task 6: Navigate the SA-CONNSERV-02 AD LDS Database ................................................ 63
Lab 15 Configuring a Unified Access Gateway Appliance ........................... 65
Task 1: Connect to an External Virtual Machine ................................................................... 65
Task 2: Configure a Unified Access Gateway Appliance ....................................................... 66
Task 3: Access an Instant-Clone Desktop from an External Network .................................... 68
Lab 16 Creating an Internal CA Signed Certificate for VMware Horizon
Servers................................................................................................. 69
Task 1: Create and Publish a Certificate Template for Horizon Connection Server Certificates . 69
Task 2: Request and Configure a New Certificate for a Horizon Connection Server Instance ... 71
Task 3: Restart Services and Verify That Changes Take Effect .............................................. 73
Lab 17 Configuring Cloud Pod Architecture .............................................. 75
Task 1: Delete Local Desktop Entitlements .......................................................................... 75
Task 2: Initialize the Cloud Pod Architecture Feature in Horizon Console .............................. 76
Task 3: Join a Pod to the Pod Federation in Horizon Console .............................................. 76
Task 4: Create and Configure Global Entitlements in Horizon Console ................................... 77
Task 5: Add a Pool to a Global Entitlement in Horizon Console ............................................. 77
Task 6: Test a Cloud Pod Architecture Configuration ........................................................... 78
Lab 18 Integrating Workspace ONE Access with VMware Horizon ............. 79
Task 1: Configure the Horizon Connection Server ................................................................ 79
Task 2: Create VMware Horizon Desktop Entitlements ........................................................ 80
Task 3: Create and Entitle a VMware Horizon Application Pool ............................................. 81

v
Task 4: Configure Workspace ONE Access for VMware Horizon On-Premises Desktops ....... 82
Task 5: Verify Workspace ONE Desktop Access ................................................................. 84
Answer Key .......................................................................................... 86

vi
vii
Lab 1 Creating a VMware Horizon
Windows 10 Desktop

Objectives
You create a VMware Horizon Windows 10 desktop:

1. Log In to the STUDENT-A-01 Desktop VM

2. Create a VM with vSphere

3. Install VMware Tools on the VM

4. Join the VM to a Domain

Task 1: Log In to the STUDENT-A-01 Desktop VM


You log in to the STUDENT-A-01 desktop VM in the lab environment to set up the lab.

You use this desktop for all labs.


1. Access the STUDENT-A-01 desktop in your lab environment.

2. Log in to the STUDENT-A-01 desktop VM.

 User name: vclass\administrator

 Password: VMware1!

Task 2: Create a VM with vSphere


You create a VM in vSphere to optimize for use in a VMware Horizon environment.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

1
 Password: VMware1!

3. Click the VMs and Templates icon to go to the VMs and Templates view.

4. In the navigation pane, expand sa-vcsa-01.vclass.local, right-click Datacenter and select


New Virtual Machine.

The New Virtual Machine wizard appears.

5. Select Deploy from template to select a creation type and click NEXT.

6. Select a template.

a. Click the Data Center tab.

b. Expand Datacenter.

c. Expand Templates.

d. Select Windows10-NoTools and click NEXT.

7. Specify a name and folder for the VM.

 Name: Enter Win10Opt in the text box.

 Location: Select Datacenter.

8. Click NEXT.

9. Select a compute resource.


a. Expand Datacenter > SA-Compute and click sa-esxi-01.vclass.local.

b. Click NEXT.

10. Select HorizonStorage and click Next.

11. Keep all options unselected and click NEXT.

12. Click FINISH.

13. Monitor the VM creation.

From the Recent Tasks pane, monitor the Clone virtual machine task until it displays the
Completed status.

Task 3: Install VMware Tools on the VM


You install VMware Tools on the WinOpt VM to improve the overall performance of the VM.

2
NOTE

You perform the installation using the keyboard because the mouse performance is
suboptimal without VMware Tools.

1. If not already logged in, log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

2. To power on the Win10Opt VM, right-click Win10Opt and select Power > Power On.

3. When the VM is powered on, right-click Win10Opt, select Guest OS > Install VMware
Tools and click MOUNT.

The VMware Tools ISO image is mounted on the CD/DVD drive of Win10Opt VM.

4. Right-click Win10Opt and select Open Remote Console.

a. If a pop-up blocker opens, take steps to allow pop-ups for sa-vcsa-01.vclass.local.

b. Click Open Link.

5. Log in to the Win10Opt VM.

 User name: localadmin

 Password: VMware1!

6. Click anywhere in the console window and press Tab to select the Win10Opt Start menu,
and press Enter.

The Start menu appears.

7. Enter D:\setup.exe and press Enter.

a. If the User Account Control dialog box appears, use the Tab key to select Yes and
press Enter.

b. If the VMware Tools wizard does not automatically start, double-click Setup to open
it.

The VMware Tools Setup wizard appears.

8. Install VMware Tools.

a. On the welcome page, select Next.


The Choose Setup Type page appears.

b. Verify that Typical is selected.

c. Press the Tab key to select Next and press Enter.

3
The Ready to Install VMware Tools page appears.

d. Press Enter to select Install.

When the installation is complete, the Completed the VMware Tools Setup Wizard
page appears.

e. Press Enter to select Finish.

A restart prompt window appears.

f. Press Enter to select Yes and restart the system.

g. After the OS restarts, log in as the administrator.

 User name: localadmin

 Password: VMware1!

9. Verify that VMware Tools is installed on the VM.

a. On the Windows task bar of the Win10Opt VM, click the up arrow to show the hidden
icons.

b. Double-click the VMware Tools icon.

The About VMware Tools window appears. It displays the version of VMware Tools
and The VMware Tools Service is running. message.

Task 4: Join the VM to a Domain


You join the Win10Opt VM to the vclass.local domain.

1. If not already connected to Win10Opt console, return to the Win10Opt console and log in.

 User name: localadmin

 Password: VMware1!

2. Right-click the Start menu and select System.

The Settings window appears.

3. In the center pane, under Related settings, click Advanced system settings.

The System Properties dialog box appears.

4. Select the Computer Name tab.

5. Click Change to rename the computer and change the domain.


The Computer Name/Domain Changes dialog box appears.

6. In the Computer Name text box, enter Win10Opt as the name of the computer.

7. Configure the domain settings.

4
a. Select Domain and enter vclass.local in the Domain text box.

b. Click OK.

The Windows Security Computer Name/Domain Changes window appears.

c. Log in as the domain administrator.

 User name: administrator

 Password: VMware1!

d. Click OK.

The restart prompt window appears.

e. Click OK.

f. Click Close to close the System Properties window.

g. When prompted to restart the system, click Restart Now and wait for the OS to
restart.

h. Close VMware Remote Console.

5
Lab 2 Installing Horizon Agent in
Windows Desktop Pools

Objectives
You install Horizon Agent on Windows VM:

1. Create a vCenter Server Resource Pool for the VMware Horizon Desktop Pool

2. Install Horizon Agent on the WinOpt VM

Task 1: Create a vCenter Server Resource Pool for the VMware


Horizon Desktop Pool
You create a vCenter Server resource pool to be used by the VMs in a VMware Horizon
desktop pool.
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Click the Hosts and Clusters icon to go to the Hosts and Clusters view.

4. Create a resource pool for desktop VMs in the SA-Compute cluster.

a. In the navigation pane, expand sa-vcsa-01.vclass.local > Datacenter.


b. Right-click the SA-Compute cluster and select New Resource Pool.

c. Enter Desktops for the name and click OK.

6
Task 2: Install Horizon Agent on the Win10Opt VM
You install Horizon Agent on the Win10Opt VM.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon


Win10Opt VM.

a. Under Connections, select Horizon Workstations and double-click the Win10Opt


VM.

You are automatically logged in as vclass\administrator.

NOTE

If Win10Opt VM flickers and then disappears, restart the VM using the vSphere console
and retry the step.

2. From the Win10Opt desktop, double-click the Class Materials and Licenses desktop
shortcut.

3. Navigate to Downloads\Horizon 8.8 (2212).

4. Double-click the VMware-Horizon-Agent-x86_64-[x.x.x-xxxxxx].exe file.

a. If the Open File - Security Warning dialog box opens, click Run.

The VMware Horizon Agent welcome page appears.

5. Click Next.

6. Accept the license agreement and click Next.

7. Verify that IPv4 is selected as the protocol and click Next.

8. Customize Horizon Agent.

a. For the VMware Audio feature, select This feature will not be available.

b. For the Horizon Performance Tracker feature, select This feature, and all
subfeatures, will be installed on local hard drive.

c. Click Next.

The Remote Desktop Protocol Configuration page appears.


9. Keep the default settings and click Next.

The Ready to Install the Program page appears.

10. Click Install.

7
11. Click Finish.

12. When prompted, click Yes to restart the system.

13. After restarting the VM, double-click Win10Opt in the left pane of the mRemoteNG
window.

You are automatically logged in as vclass\administrator.

14. Verify the VMware Agent Service is started.

a. In the windows Search text box, type Services and press enter.

b. Verify that the status of the VMware Horizon View Agent service is set to Running.

c. Close the Services window.

15. Verify your remote desktop access.

a. Right-click the Start menu and select System.

b. Under Related settings, select Remote Desktop.

c. Verify that Enable remote desktop is set to On.

For this lab, this setting cannot be modified by the user.

16. Log out of the Win10Opt VM.

8
Lab 3 Optimizing a VMware Horizon
Windows Desktop

Objectives
You optimize a VM with the Windows OS Optimization Tool for Horizon:

1. Run the OS Optimization Tool

2. Analyze the VM

3. Configure Common Options

4. Optimize the VM

5. Finalize the VM

6. Prepare for Deployment

Task 1: Run the OS Optimization Tool


You install and run the Windows OS Optimization Tool for Horizon on the Win10Opt VM.

1. Return to the mRemoteNG connection to Win10Opt.

You are automatically logged in as vclass\administrator.

2. Run the Windows OS Optimization tool for VMware Horizon.

a. From the Win10Opt desktop, double-click the Class Materials and Licenses desktop
shortcut.

b. Open the Downloads folder and double-click the


VMwareHorizonOSOptimizationTool_xxxx.exe file.
c. If a security warning opens, click Run.

d. Accept the license agreement and click Next.

The Windows OS Optimization tool for VMware Horizon opens.

9
Task 2: Analyze the VM
You use the Windows OS Optimization Tool for Horizon to analyze the current settings on the
Win10Opt VM.

1. In the Windows OS Optimization Tool for Horizon, click the Analyze button.

The current Windows setting will be compared to the default, built-in template. If you
created custom templates, you can select the desired template from the Template Name
menu.

2. In the Optimizations section, review the listed optimizations.

The selected items indicate the settings that are included for optimization. Some items are
not selected for optimization by default because they can cause undesirable results.

Task 3: Configure Common Options


You use the Windows OS Optimization Tool for Horizon to customize common Windows
options for the Win10Opt VM.

1. In the Windows OS Optimization Tool for Horizon, access the Common Options settings.

a. Click Common Options.

The Common Options window opens.

2. Set a background color.

a. In the Common Options window navigation pane, click Background.

b. Select Set default background to solid color.

c. Select a color.

3. Disable Windows Update.

a. In the Common Options window navigation pane, select Update.

b. Ensure that Disable Windows Update is selected.

4. Click OK.

Task 4: Optimize the VM


You use the Windows OS Optimization Tool for Horizon to analyze the current settings on the
Win10Opt VM.
1. In this optimizations list, collapse Security and User Experience.

2. Under Programs, deselect Media Player.

3. Click the Optimize button and wait for the optimization to finish.

10
4. On the Result tab, analyze the optimization results.

Each optimization lists the SUCCESS or FAILED status.

5. Click Export.

6. Save the optimization report, using the default name, on the Win10Opt desktop.

7. In the Information dialog box, click OK.

Task 5: Finalize the VM


You finalize the Win10Opt VM.

1. In the Windows OS Optimization Tool for Horizon, click the Finalize tab.

2. Scroll down and deselect Release IP address.

3. Click the Finalize button.

Wait for the Finalization tasks to complete.

4. On the Information window, click OK.

5. Close the Windows OS Optimization tool window.

Task 6: Prepare for Deployment


You prepare the Win10Opt VM to deploy VMware Horizon.

1. Return to the vSphere Client and, if necessary, log in.

 User name: [email protected]

 Password: VMware1!

2. Shutdown the Win10Opt VM.

3. After Win10Opt VM powers off, right-click the VM and select Edit Settings.

4. Remove the virtual CD/DVD drive.

a. Click the vertical ellipsis icon at the end of the CD/DVD drive 1 row.

b. Click Remove Device to remove the virtual CD/DVD drive from the VM.

5. Remove the virtual SATA controller.

a. Click the vertical ellipsis icon at the end of the SATA Controller 0 row.
b. Click Remove Device to remove the SATA controller from the VM.

6. Click OK.

7. Power on the Win10Opt VM

11
Lab 4 Installing Horizon Agent on
Linux Desktops

Objectives
You install Horizon Agent on a Linux VM:

1. Install Horizon Agent on the Linux VM

2. Deploy a Second Linux Desktop VM

Task 1: Install Horizon Agent on the Linux VM


You install Horizon Agent on the LinuxDT1 VM to configure communications with Horizon
Connection Server.

1. Return to the vSphere Client and, if necessary, log in.


 User name: [email protected]

 Password: VMware1!

2. Click the VMs and Templates icon and expand Datacenter > Horizon Workstations.

3. Right-click LinuxDT1 and select Power > Power On to power on the LinuxDT1 VM.

4. On the STUDENT-A-01 desktop, open mRemoteNG.

5. Select Connections > SSH > LinuxDT1

6. Double-click LinuxDT1 to connect.

a. If prompted with a security alert, click Yes.

b. If required, log in with the following credentials.


 User name: root

 Password: VMware1!

12
NOTE

The password does not display.

7. Join the domain using the following command:

sudo realm join vclass.local


a. When prompted enter password: VMware1!

8. Configure the automatic home directory using the following command:

pam-auth-update --enable mkhomedir


9. Reboot the VM using the following command:

reboot
Your SSH session disconnects.

10. After the VM restarts, reconnect your SSH session and, if necessary, log in.

 User name: root

 Password: VMware1!

11. Install krb5:

sudo apt-get install krb5-user


a. When prompted, enter 'y'

12. Install the Horizon Agent software on the LinuxDT1 VM.

a. To change the directory to Downloads, enter the following command.

cd /home/vmware/Downloads
b. To extract the Horizon Agent from the archive bundle, enter the following command.

tar -xzvf ./VMware-horizonagent-linux-x86_64-2212-8.8.0-


21071111.tar.gz
c. To change the directory to the Horizon Agent file, enter the following command.

cd VMware-horizonagent-linux-x86_64-2212-8.8.0-21071111/
d. To install Horizon Agent, enter the following command.

./install_viewagent.sh -A yes
e. After the Horizon Agent is installed, enter the following command.

reboot
Your SSH session disconnects.

13
f. After the VM restarts, reconnect your SSH session and, if necessary, log in.

 User name: root

 Password: VMware1!

13. Modify the /etc/sssd/sssd.conf configuration file, using the following command.

nano /etc/sssd/sssd.conf
a. Modify the setting, use_fully_qualified_names to False

b. Append the file with following commands:

ad_gpo_map_interactive = +gdm-vmwcred
ad_gpo_access_control = permissive
The sssd.conf file should look like following:

[sssd]
domains = vclass.local
config_file_version = 2
services = nss, pam

[domain/vclass.local]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = VCLASS.LOCAL
realmd_tags = manages-system joined-with-adcli
id_provider = ad
fallback_homedir = /home/%u@%d
ad_domain = vclass.local
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = ad
ad_gpo_map_interactive = +gdm-vmwcred
ad_gpo_access_control = permissive
c. Press Control + X.

d. Enter Y to the prompt and press Enter to save the file.

14. Reboot using the command: reboot

15. After the VM restarts, reconnect your SSH session and, if necessary, log in.
16. Modify the Horizon Agent file etc/vmware/viewagent-custom.conf, using the following
command.

nano /etc/vmware/viewagent-custom.conf

14
a. Remove the hash “#” preceeding the following 3 lines

SSOUserFormat=[domain]\\[username]
SSODesktopType=UseMATE
OfflineJoinDomain=sssd
b. Press Control + X.

c. Enter Y to the prompt and press Enter to save the file.

17. Reboot using the command: reboot

Task 2: Deploy a Second Linux Desktop VM


You clone the LinuxDT1 VM.

1. Return to the vSphere Client connection and, if necessary, log in.

 User name: [email protected]

 Password: VMware1!

2. From VMs and Templates, expand Datacenter > Horizon Workstations.

3. Right-click LinuxDT1 and select, Power > Shut Down Guest OS.

4. After the VM completly shuts down, right-click LinuxDT1 and select Clone > Clone to
Virtual Machine....

The cloning wizard opens.

5. Select a name and folder for the new VM.

a. Enter UbuntuIC for the virtual machine name.

b. Select Datacenter for the virtual machine location.

c. Click NEXT.

The Select a compute resource page appears.

6. Expand Datacenter, select SA-Compute and click NEXT.

The Select storage page appears.

7. Select storage for the new VM.

a. Select HorizonStorage.
b. For Select Virtual disk format, select Thin Provision from the drop-down menu.

c. Click NEXT.

The Select clone options page appears.

15
8. Select clone options.

a. Click to select the Customize the operating system and the Power on virtual
machine after creation check boxes.

b. Click NEXT.

The Customize guest OS page appears.

9. Customize guest OS.

a. Under Name, select Linux.

b. Click NEXT.

The Ready to complete page appears.

10. Click FINISH to deploy the VM.

11. Monitor the VM deployment in the Recent Tasks pane.

NOTE

The VM restarts twice, as part of the customization process. This process can take more
than 10 minutes to complete.

16
Lab 5 Creating and Entitling Desktop
Pools

Objectives
You create and entitle Windows and Linux manual desktop pools:

1. Create a Windows Manual Desktop Pool

2. Add a VM to a Manual Desktop Pool

3. Create a Linux Manual Desktop Pool

4. Entitle the Manual Desktop Pools

Task 1: Create a Windows Manual Desktop Pool


You create a manual desktop pool for payroll users.
1. From the STUDENT-A-01 desktop, open the Firefox browser and select the Connection
Servers > SA-ConnServ-01 bookmark.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. From the navigation pane, expand Inventory and select Desktops.

4. Create an access group.

a. On the Desktop Pools page, select New Access Group from the Access Groups
drop-down menu.
The New Access Group window opens.

b. Enter Marketing Desktops for the name and click Submit.

5. Create another access group.

17
a. Select New Access Group from the Access Groups drop-down menu.

The New Access Group window opens.

b. Enter Payroll Desktops for the name and click Submit.

6. On the Desktop Pools page, click Add.

The Add Pool window opens.

7. On the Type page, click Manual Desktop Pool and click Next.

8. On the Machine Source page, verify that vCenter Virtual Machines is selected and click
Next.

9. On the vCenter Server page, verify that sa-vcsa-01.vclass.local is selected and click Next.

10. On the User Assignment page, verify that both Dedicated and Enable Automatic
Assignment are selected, and click Next.

11. On the Desktop Pool Identification page, configure the pool identity settings and then
click Next.

Option Value

ID Payroll-Pool

Display Name Payroll Desktops

Access Group Payroll Desktops

Description Dedicated desktop

12. On the Desktop Pool Settings page, configure settings.

a. Scroll-down to the setting Allow Users to Restart Machines and select Yes from the
drop-down menu.

b. Accept all other defaults and click Next.

13. On the Remote Display Settings page, accept all defaults and click Next.

14. On the Add Virtual Machine page, select DT1 and click Next.

15. On the Advanced Storage Options page, accept all defaults and click Next.

16. On the Ready to Complete page, review the summary and click Submit.

Task 2: Add a VM to a Manual Desktop Pool


You add the Win10Opt VM to the manual Payroll-Pool desktop pool.

18
1. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Desktops.

3. Click Payroll-Pool.

Click on the the Payroll-Pool hyperlink.

4. Select the Machines tab.

5. Click Add.

6. Select the Win10Opt VM and click OK.

7. Click the refresh button to display the Win10Opt VM in the machines list.

8. Wait for the Win10Opt status to display as Available before continuing to the next
task.

NOTE

If the status does not change to Available after a few minutes, log in and then log out
the Win10Opt VM.

Task 3: Create a Linux Manual Desktop Pool


You create a manual desktop pool for marketing users.

1. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Desktops.

3. In the Desktop Pools pane, click Add.

The Add Pool window opens.

4. On the Type page, click Manual Desktop Pool and click Next.

5. On the Machine Source page, verify that the vCenter virtual machines is selected and
click Next.

6. On the vCenter Server page, verify that sa-vcsa-01.vclas.local vCenter Server is selected
and click Next.

7. On the User Assignment page select Floating and click Next.

19
8. On the Desktop Pool Identification page, configure the following pool identity settings
and then click Next.

Option Value

ID Linux-Pool

Display Name Linux Desktops

Description Floating Linux Desktop

9. On the Desktop Pool Settings page, select Yes from the Allow Users to Restart Machines
drop-down menu, accept all other defaults, and click Next.

10. On the Remote Display Settings page, accept all default values and click Next.

11. On the Add Virtual Machine page, select LinuxDT1 and click Next.

12. On the Advance Storage Options page, accept all default values and click Next.

13. On the Ready to Complete page, review the summary and click Submit.

Task 4: Entitle the Manual Desktop Pools


You entitle the two manual pools that you created.

Entitlement permits any user in the Horizon Users or Horizon Admins groups to connect to the
desktops. After a connection is made to a desktop, the desktop is dedicated to that user.

1. On the Desktop Pools page, select the check box for the Payroll-Pool row.

2. Entitle the Horizon Admins group and the Horizon Users groups.

a. From the Entitlements drop-down menu, select Add Entitlement.

The Add Entitlements page appears.

b. Click Add.

c. Enter horizon for Name/User Name.

d. Click Find.

e. Select both the Horizon Admins and the Horizon Users rows and click OK.

The Add Entitlements page appears.


f. Verify that both groups are listed and click OK.

g. On the Desktop Pools page, verify that the number 2 appears in the Entitled column
for the Payroll-Pool manual pool.

20
3. Repeat the step to entitle the Linux-Pool for the Horizon Users and Horizon Admins
domain groups.

4. Minimize Firefox.

21
Lab 6 Installing and Using Horizon
Client

Objectives
You install and configure Horizon Client on your STUDENT-A-01 desktop VM and connect to a
desktop:

1. Install Horizon Client on the STUDENT-A-01 Desktop VM

2. Connect to a Windows Horizon Desktop

3. Connect to a Linux Horizon Desktop

Task 1: Install Horizon Client on the STUDENT-A-01 Desktop VM


You install Horizon Client on a Windows Server 2019 VM that operates as a client system.
1. From the STUDENT-A-01 desktop VM, double-click the Class Materials and Licenses
desktop shortcut.

2. Open the Downloads folder and double-click VMware-Horizon-Client-[x.x.x-


xxxxxx].exe.

The Horizon Client installation dialog box opens.

3. Click Agree & Install.

4. When the installation is done, click Finish.

5. When prompted, restart the system.

Task 2: Connect to a Windows Horizon Desktop


You connect to the desktop in the Payroll-Pool.

1. Log in to the STUDENT-A-01 desktop VM.

22
 User name: vclass\administrator

 Password: VMware1!

2. Double-click the VMware Horizon Client shortcut on the desktop.

3. Add a connection server.

a. In the VMware Horizon Client, click Add Server.

b. For Name of the Connection Server, enter sa-connserv-01.vclass.local.

c. Click Connect.

4. Log in to VMware Horizon.

 User name: HorizonUserA

 Password: VMware1!

5. Click Payroll Desktops.

6. In the upper-right corner, click Settings.

7. From the Display drop-down menu, select Window - Large.

8. To return to the previous page, click the < icon in the upper-left corner.

9. Double-click Payroll Desktops.

10. If asked to enable local file access, click Allow.

11. Verify that the VMware Horizon desktop is configured correctly.

a. On the VMware Horizon desktop, right-click the Start menu.

b. Select Apps and Features, and verify that both VMware Horizon Agent and VMware
Tools are installed.

c. Close the Apps and Features page.

12. Verify background processes.

a. Open Task Manager.

b. Click More Details.

c. Verify that VMware Horizon Agent JMS 64-bit, VMware Horizon Session Manager
64-bit, and VMware Tools Core Service appear as background processes.

d. Close Task Manager.


13. Verify your access to Remote Desktop.

a. Right-click the Start menu.

b. Select System.

23
c. Scroll down and click Remote desktop, and verify that you are blocked from using
this application.

14. Exit the VMware Horizon desktop.

a. To distinguish between the Horizon Client VM and the VMware Horizon desktop, find
the menu bar at the top of the VMware Horizon desktop window.

b. On the desktop menu bar, click the See more (ellipsis) icon and select Logoff
Desktop.

c. Click OK.

Task 3: Connect to a Linux Horizon Desktop


You connect to the desktop in the Linux Desktop manual pool.

1. Return to Horizon Client, logged in as HorizonUserA.

2. Click Linux Desktops.

3. In the upper-right corner, click the Settings icon.

4. From the Display drop-down menu, select Window - Large.

5. To return to the previous page, click the < icon in the upper-left corner.

6. Double-click Linux Desktops.

7. Verify that the session is connected.

If prompted, skip Ubuntu upgrade.

8. Exit the VMware Horizon desktop.

a. To distinguish between the Horizon Client VM and the VMware Horizon desktop, find
the menu bar at the top of the VMware Horizon desktop window.

b. On the desktop menu bar, click the See more icon (ellipsis) and select Logoff
Desktop.

c. Click OK.

24
Lab 7 Configuring Print and Client
Drive Redirection

Objectives
You configure and verify integrated print and client drive redirection:

1. Verify Print and Client Drive Redirection Agent Features

2. Test Print Redirection

3. Verify Client Drive Redirection

Task 1: Verify Print and Client Drive Redirection Agent Features


You install Horizon Agent with VMware Integrated Printing and Client Drive Redirection
enabled.
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Click the VMs and Templates icon to go to VMs and Templates view.

4. If it is not already powered on, right-click Win10Opt and select Power > Power On.

5. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon


Win10Opt VM.

6. Verify that the selected Horizon features were installed during VMware Horizon agent
installation.

25
a. In the Start menu search box, enter regedit and press Enter.

b. Select HKEY_LOCAL_MACHINE > Software > VMware,Inc. > Installer >


Features_HorizonAgent.

c. Verify that the Data value for ClientDriveRedirection and PrintRedir are set to
Local.
d. Close the Registry Editor.

7. Log out of the Win10Opt desktop.

8. Repeat this task for the DT1 VM to verify that the selected Horizon features are installed
during the VMware Horizon agent installation.

Task 2: Test Print Redirection


You test the Print Redirection feature.

1. Verify that PDF24 is not installed on the STUDENT-A-01 desktop VM.

a. On the STUDENT-A-01 desktop VM, enter Control Panel in the Start menu
search box, and press Enter.

b. From the results, select Control Panel.

c. Click Devices and printers and verify that PDF24 is not installed on the VM.

2. Install PDF24.

a. On the STUDENT-A-01 desktop, navigate to the Class Materials and Licenses >
Downloads folder.

b. Double-click the pdf24-creator-11.12.1-x64.exe file.

c. If the Open File - Security warning page appears, click Run.

d. Accept the license agreement and click Next.

e. Install the PDF24 Creator application with all the default settings.

f. If the Setup - PDF24 Creator x.x.x Account creation window opens, click Skip and
click Finish.

3. Open Devices and Printers and set PDF24 PDF as the default printer.

a. On the STUDENT-A-01 desktop VM, enter Control Panel in the Start menu
search box.
b. Select Control Panel.

c. Select Devices and Printers.

d. Right-click PDF24 and select Set as default printer.

26
e. Click OK.

f. Close the window.

4. On the STUDENT-A-01 desktop VM, open VMware Horizon Client.

5. If you are not already logged in as HorizonUserA, log in to Horizon.

a. In the Horizon Client, double-click sa-connserv-01.vclass.local.

b. Log in to VMware Horizon.

 User name: HorizonUserA

 Password: VMware1!

6. Double-click Payroll Desktops.

7. On the Payroll Desktop VM, open a web browser and go to


https://techzone.vmware.com/.
8. In the upper-right corner of the page, click Menu and select Print.

The Print dialog box opens.

9. Verify that PDF24(vdi) is selected as the default printer and click Print.

The PDF24 Assistant dialog box opens.

10. Select Save as PDF.

11. Name the file VirtualPrintSample and save it in the Desktop folder.

12. Click the See more (...) icon on the desktop main menu and select Disconnect.

13. Verify that the VirtualPrintSample file is on the STUDENT-A-01 desktop VM.

Task 3: Verify Client Drive Redirection


You test the Client Drive Redirection feature so that folders and files are sent across the
network with encryption.

1. Create a folder named TestClientDrive on the student VM.

a. On the STUDENT-A-01 desktop VM, click the Start menu and enter C:\.

b. Right-click in File Explorer and select New > Folder.

c. Name the folder TestClientDrive.

2. Create a text file in the TestClientDrive folder.


a. Open the TestClientDrive folder.

b. Right-click on the file explorer and select New > Text Document.

27
c. Name the file <your_name>.txt.

d. Add the text Testing Horizon Client Drive Redirection to the


<your_name>.txt file.

e. Save and close the text file.

3. On the STUDENT-A-01 desktop VM, open VMware Horizon Client.

4. If you are not already logged in as HorizonUserA, log in to Horizon.

a. In the Horizon Client, double-click sa-connserv-01.vclass.local.

b. Log in to VMware Horizon.

 User name: HorizonUserA

 Password: VMware1!

5. Click the Settings (gear) icon in the upper-right corner of the page.

6. From the navigation pane, select Drive & Folder Sharing.

7. Verify that only the user’s local files are being redirected from the client desktop to the
virtual desktop.

8. Click Add.

9. Select the C:\TestClientDrive folder on your local VM.

10. Click Select Folder.

11. Click the < icon in the upper-left corner of the settings window to return to the desktop
list.

12. Double-click Payroll Desktop.

13. Open File Explorer on the Payroll pool desktop.

14. From the navigation pane, expand This PC and then locate and open TestClientDrive on
STUDENT-A-01.

15. Verify that the <your_name>.txt file is present, open it, and verify its content.

16. Add the text Adding content from the client to the <your_name>.txt
file, and then save and close the text file.

17. On the STUDENT-A-01 desktop VM, open the


C:\TestClientDrive\<your_name>.txt file.
18. Verify that the content that you added in the client was saved and close the text file.
19. Return your Payroll Desktops window.

20. Click the See more (...) icon in the upper-right corner of the page, click Logoff Desktop,
and click OK.

28
Lab 8 Deploying Instant Clone Pools

Objectives
You create a golden image and deploy instant clone pools:

1. Take a Baseline Snapshot of the Golden Image

2. Enable Instant Clone and Authorize a Horizon Console Account for Use by ClonePrep

3. Create an Automated Desktop Pool of Windows Instant Clone VMs

4. Create an Instant Clone Pool of Linux VMs

5. Test an Individual Windows Instant Clone VM

6. Test a Linux Instant Clone VM

Task 1: Take a Baseline Snapshot of the Golden Image


You configure a Windows 10 VM to be the golden image for a pool of instant clone desktops
and then you take a snapshot that is used to create instant clones.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Go to the VMs and Templates view.


4. Navigate to the Horizon Golden VMs > Win10Golden desktop VM.

5. Ensure that the Win10Golden desktop VM is powered off.

6. Right-click the VM and select Snapshots > Take Snapshot....

29
7. Name the snapshot Baseline and click CREATE.

Task 2: Enable Instant Clone and Authorize a Horizon Console


Account for Use by ClonePrep
You enable Horizon Storage Accelerator and authorize a Horizon Administrator account with
domain join, and remove permissions for use by ClonePrep.

1. From the STUDENT-A-01 VM, open the Firefox browser and click the Connection Server
> SA-ConnServ-01 bookmark.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. From the navigation pane, expand Settings and select Servers.

4. Click to select the sa-vcsa-01.vclass.local([email protected]) vCenter Server


instance and click Edit.

5. Click the Storage tab.

6. Ensure Enable View Storage Accelerator is selected and click OK.

7. From the navigation pane, expand Settings, select Domains, and click the Domain
Accounts tab.

8. Click Add.

The Add Domain Admin dialog box opens.

9. Configure the domain admin and click OK.

 Full domain name: vclass.local

 User name: HorizonAdmin

 Password: VMware1!

10. Verify that vclasss.local and HorizonAdmin appear in the Domain list.

Task 3: Create an Automated Desktop Pool of Windows Instant


Clone VMs
You create an automated pool of instant clone desktops and entitle the desktops for all
VMware Horizon users.

1. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

30
 Password: VMware1!

2. From the navigation pane, expand Inventory and select Desktops.

The Desktop Pools page appears.

3. To start the Add Desktop Pool wizard, click Add.

The Type page appears.

4. Verify that Automated Desktop Pool is selected and click Next.

The vCenter Server page appears.

5. Verify that Instant Clone and your sa-vcsa-01.vclass.local are selected, and click Next.

The User Assignment page appears.

6. Click Floating and click Next.

The Storage Policy Management page appears.

7. Click Next.

The Desktop Pool Identification page appears.

8. Configure the desktop pool settings and then click Next.

 ID: InstantClone-Pool

 Display name: Instant Clone Desktop Pool

 Access group: /

 Description: Automated pool of floating, instant clone


desktops
The Provisioning Settings page appears.

9. Enter ICDT-{n:fixed=2} in the Naming Pattern text box.

10. Under Provision Machines, select Machines on demand.

11. Enter 2 in the Min Number of Machines text box.

12. Under Desktop Pool Sizing, enter 4 in the Maximum Machines text box and click Next.

The vCenter Settings page appears.

13. To configure the vCenter Settings, configure the following settings. Keep rest of the
settings to default and click Next.
 Golden Image in vCenter: Win10Golden

 Snapshot: Baseline

 VM folder location: Datacenter

31
 Cluster: SA-Compute

 Resource pool: Desktops

 Datastores: HorizonStorage

 VM Compute Profile Settings: CPU 4

The Desktop Pool Settings page appears.

14. From the State drop-down menu, verify that Enabled is selected and click Next.

The Remote Display Settings page appears.

15. For Allow Session Collaboration, select Enabled and click Next.

The Guest Customization page appears.

16. Leave the default and click Next.

The Ready to Complete page appears.

17. Select the Entitle Users After Adding Pool check box.

18. Review the settings and click Submit.

The Add Entitlements page appears.

19. Click Add.

The Find User or Group page appears.

20. Entitle this pool for the Horizon Users and Horizon Admins domain groups.

a. Use the Name/User name text box and the Find button to find and display Horizon
Users and Horizon Admins.

b. Click to select both Horizon Users and Horizon Admins, and click OK.

The Add Entitlements page appears.

c. Click OK.

21. Monitor the progress of the instant clone creation in the vSphere Client.

a. Use the vSphere Client to review the activity in the


ClonePrepReplicaVmFolder folder.

NOTE

This VM folder is visible only in the VMs and Templates view.


Any activity might take several minutes to start, and you might need to refresh the
vSphere Client several times during this process.

32
b. In the vSphere Client, go to the VMs and Templates view and examine the
InstantClone-Pool VM folder and verify that the instant clone VM name
conforms to the VM naming pattern that you selected.

NOTE

The provisioning process can take 20 minutes or more because the golden image
goes through a preparation process. You can ignore error messages unless the
process fails.

c. Monitor instant clone provisioning in the Recent Tasks pane, in the VMs and
Templates view of the vSphere Client.

22. Monitor the instant clone provisioning in Horizon Console.

a. From the navigation pane, expand Inventory and select Desktops.

b. Click the InstantClone-Pool hyperlink.

c. Scroll down to vCenter Server and monitor the Secondary Image progress bar.

d. Monitor the state of the instant clone.

Task 4: Create an Instant Clone Pool of Linux VMs


You create an automated pool of Linux instant clone desktops and entitle the desktops for all
VMware Horizon users.

1. Return to the vSphere Client and, if necessary, log in.

 User name: [email protected]

 Password: VMware1!

2. Create a snapshot of the UbuntuGolden VM.

a. Click the VMs and Templates icon and expand Datacenter

b. If UbuntuGolden VM is powered-on, shutdown the guest OS for the UbuntuGolden


VM.

c. Right-click the UbuntuGolden VM and select Snapshots > Take Snapshot.

d. Name the snapshot Baseline and click CREATE.

3. Add an automated desktop pool.


a. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

33
b. From the navigation pane, expand Inventory and select Desktops.

The Desktop Pools page opens.

c. Click Add.

The Add Pool wizard opens to the Type page.

d. Click Automated Desktop Pool and click Next.

The vCenter Server page opens.

e. Verify that Instant Clone and the [vCenter Server system name] are selected and
click Next.

The User Assignment page opens.

f. Select Floating and click Next.

The Storage Optimization page opens.

g. Click Next.

The Desktop Pool Identification page opens.

4. Configure the desktop pool and then click Next.

 ID: Ubuntu-InstantClone-Pool

 Display name:Ubuntu Instant Clone Desktop Pool

 Access group: /

 Description: Automated pool of floating, Ubuntu instant clone desktops

The Provisioning Settings page opens.

5. Configure the provisioning settings.

a. Enter UbuntuIC-{n:fixed=2} for Naming Pattern.

b. Under Provisioning Machines, click Machines on Demand.

c. Enter 2 in the Min number of Machines text box.

d. Enter 3 in the Maximum Machines text box.

e. Click Next.

The vCenter Settings page opens.

6. Configure the settings and then click Next.


 Golden Image in vCenter: UbuntuGolden

 Snapshot: Baseline

 Virtual Machine Location: Datacenter

34
 Cluster: SA-Compute

 Resource pool: Desktops

 Datastores: HorizonStorage

The Desktop Pool Settings page opens.

7. Click Next.

The Remote Display Settings page opens.

8. Click Next.

The Guest Customization page opens.

9. Select vClass.local(HorizonAdmin) from the Domain drop-down menu and click Next.

The Ready to Complete page opens.

10. Select the Entitle Users After Adding Pool check box.

11. Review the settings and click Submit.

The Add Entitlements page opens.

12. Click Add.

13. Entitle this pool for the Horizon Users domain group and click OK.

a. Use the Name/User Name text box and the Find button to locate and display
Horizon Users.

b. Click to select Horizon Users and click OK.

c. Click OK.

14. Use the vSphere Client to review the activity in the ClonePrepReplicaVmFolder
folder.

NOTE

This VM folder is visible only in the VMs and Templates view.

Any activity might take several minutes to start, and you might have to refresh the
vSphere Client several times during this process.

15. Go to the VMs and Templates view and examine the Ubuntu-InstantClone-Pool
VM folder and verify that the instant clone VM name conforms to your VM naming
pattern.

35
NOTE

The provisioning process can take 20 minutes or more because the golden image goes
through a preparation process. You can ignore error messages unless the process fails.

16. Monitor the instant clone provisioning in the vSphere Client in the Recent Tasks pane in
the VMs and Templates view.

17. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

18. Monitor the instant clone provisioning in Horizon Console.

a. From the navigation pane, expand Inventory and select Desktops.

b. Click the Ubuntu-InstantClone-Pool hyperlink.

c. Scroll down to vCenter Server and monitor the Secondary Image progress bar.

d. Monitor the State of the instant clone.

Task 5: Test an Individual Windows Instant Clone VM


You test two instant clone desktops by logging in to them from the STUDENT-A-01 desktop
VM.

1. Return to Horizon Console and, if necessary, log in.

2. Monitor instant clone provisioning in Horizon Console.

a. From the navigation pane, expand Inventory and select Desktops.

b. Click the pool name InstantClone-Pool.

c. Monitor the State of the instant clone pool until it displays as Enabled.

3. Click the Events tab to view the events that occurred during the deployment.

4. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client.

5. Log in to sa-connserv-01.vclass.local.

 User name: HorizonUserA


 Password: VMware1!

6. Double-click Instant Clone Desktop Pool.

7. If a Drive Sharing Window appears, click Allow.

36
8. Verify that the VMware Horizon desktop is configured correctly.

a. On the VMware Horizon desktop, right-click the Start menu.

b. Select Apps and features, and verify that VMware Horizon Agent and VMware Tools
are installed.

c. Close the Apps and features page.

9. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client to open a


second instance of the Horizon Client.

10. Log in to sa-connserv-01.vclass.local.

 User name: HorizonUserB

 Password: VMware1!

11. Double-click Instant Clone Desktop Pool.

NOTE

The VMware Horizon desktop is available immediately.

12. Verify that the VMware Horizon desktop is correctly configured.

a. On the VMware Horizon desktop, right-click the Start menu.

b. Select Apps and features, and verify that VMware Horizon Agent and VMware Tools
are installed.

c. Close the Programs and Features page.

13. Log out of all instant clone desktop.

14. Close all instances of Horizon Client.

Task 6: Test a Linux Instant Clone VM


You test the connection to the Linux instant clone desktop by logging in to it.

1. Return to Horizon Console and, if necessary, log in.

2. Monitor the instant clone provisioning in Horizon Console.

a. From the navigation pane, expand Inventory and select Desktops.


b. Click the Ubuntu-InstantClone-Pool pool name.

c. Monitor the state of the instant clone until it displays as Enabled.

3. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.

37
 User name: HorizonUserA

 Password: VMware1!

4. Double-click Ubuntu Instant Clone Desktop Pool.

5. If prompted, click Agree.

6. Select Disconnect to disconnect from the desktop.

38
Lab 9 Managing Instant Clone Pools

Objectives
You update the golden image and push the new image to existing instant clones:

1. Install WinSCP on an Instant Clone Golden Image

2. Deploy the Updated Instant Clone Image

3. Test the Updated Instant Clone VM

Task 1: Install WinSCP on an Instant Clone Golden Image


You install WinSCP on an instant clone golden image.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

The VMware vSphere login page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Click the Hosts and Clusters icon.

4. Power on the Win10Golden desktop VM.

5. From the STUDENT-A-01 desktop, open mRemoteNG and connect to the Horizon
Win10Golden VM.

You are automatically logged in as vclass\administrator.


6. Install WinSCP.

a. On the desktop, double-click the Class Materials and Licenses shortcut.

b. Open the Downloads folder.

39
c. Double-click the WinSCP-x.xx.x-Setup.exe.

d. Select Install for all users (recommended) and install WinSCP with default settings.

7. Return to the vSphere Client.

8. Shut down the Win10Golden desktop VM.

9. After the Win10Golden VM is powered off, right-click it and select Snapshots >Take
Snapshot.

10. Name the snapshot WinSCPSnap and click CREATE.

Task 2: Deploy the Updated Instant Clone Image


You change the image of an instant clone desktop pool and push the changed image.

1. Return to Horizon Console and, if necessary, log in to SA-Connserv-01.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Desktops.

3. Click the InstantClone-Pool hyperlink.

4. From the Maintain drop-down menu, select Schedule.

The Schedule Push Image window opens.

5. Select the snapshot WinSCPSnap and click Next.

6. Select Force users to log off and click Next.

7. Click Finish.

8. Return to the vSphere Client and, if necessary, log in.

 User name: [email protected]

 Password: VMware1!

9. Monitor the progress of the instant clone creation in the Recent Tasks pane of the
vSphere Client.

10. To monitor the instant clone creation in more detail, return to Horizon Console and, if
necessary, log in to SA-Connserv-01.

 User name: HorizonAdmin


 Password: VMware1!

11. From the navigation pane, expand Inventory, select Desktops, and click the
InstantClone-Pool ID link.

40
12. Click the Summary tab, scroll down to vCenter Server and monitor the Secondary Image
status.

13. Record the Snapshot names for the Default Image and the Secondary Image.

14. Click the Events tab to view events.

15. To view the status of the instant clones, click the Machines (Instant Clone Details) tab.

NOTE

Instant clones are ready when they display the Published status. The provisioning process
can take 40 minutes or more to complete.

16. Monitor the state of the instant clones until their State changes to Available.

Task 3: Test the Updated Instant Clone VM


You test the updated instant clone VM to verify that WinSCP is available.

1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.

 User name: HorizonUserA

 Password: VMware1!

2. Double-click Instant Clone Desktop Pool.

3. If prompted to accept the license agreement, click Agree.

4. Verify that the VMware Horizon desktop is configured correctly.

a. On the VMware Horizon desktop, double-click the WinSCP shortcut.

b. Close WinSCP.

5. Disconnect and log out from the desktop.

41
Lab 10 Creating an Automated RDSH
Farm

Objectives
As part of the process to give users access to applications or RDS desktops, you create an
automated instant clone farm:

1. Verify That the RDSH Role Is Installed on the RDSH VM

2. Set Up an RDHS for Instant Clones

3. Create an RDSH Farm

Task 1: Verify That the RDSH Role Is Installed on the RDSH VM


You verify that Remote Desktop Services (RDS) is installed on the RDSHICGolden Remote
Desktop Session Host (RDSH) server.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Click to open the Hosts and Clusters view.

4. Expand SA-Compute to locate and power on the RDSHICGolden VM.


5. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon
RDSHICGolden VM.

You are automatically logged in as vclass\administrator.

42
6. Verify that the Remote Desktop Session Host role is installed.

a. Click the Windows Start icon and click the Server Manager tile.

b. From the Server Manager Dashboard, verify that Remote Desktop Services is
running.

You might have to wait for a few minutes for the Remote Desktop Services tile to
appear.

c. Click the Remote Desktop Services tile.

d. Scrolldown to Roles and Features and verify that the Remote Desktop Session Host
is installed.

e. Close the Server Manager window.

Task 2: Set Up an RDSH for Instant Clones


You install Horizon Agent on the RDSH and take a snapshot to be used for clone creation.

1. Install Horizon Agent on the RDSHICGolden.vclass.local desktop.

a. On the desktop, double-click the Class Materials and Licenses shortcut.

b. Open the Downloads > Horizon 8.8 (2212) folder.

c. Double-click the VMware-Horizon-Agent-x86_64-[xxxxx]-.exe file.

d. If the Open File Security warning page appears, click Run.

The welcome page appears.

2. Complete the installation process.

a. Click Next.

b. Accept the license agreement and click Next.

The Network protocol configuration dialog box opens.

c. Select IPv4 and click Next.

The Custom Setup page appears.

d. For VMware Horizon Instant Clone Agent and Horizon Performance Tracker, select
This feature, and all subfeatures, will be installed on the local hard drive.

e. Click Next.
The Ready to Install the Program page appears.

f. Click Install.

g. When the installation is complete, click Finish.

43
h. When prompted, click Yes to restart the RDSHICGolden VM.

3. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon


RDSHICGolden VM.

You are automatically logged in as vclass\administrator.

4. Shut down the RDSHICGolden VM.

5. In the vSphere Client, right-click the RDSHICGolden VM and select Snapshots > Take
Snapshot.

6. Name the snapshot Baseline and click CREATE.

Task 3: Create an RDSH Farm


You create an RDSH farm.

1. Return to Horizon Console and, if necessary, log in to SA-Connsev-01.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Farms.

The Farms page appears.

3. Click Add.

4. Select Automated Farm and click Next.

The vCenter Server page appears.

5. Verify that Instant Clone and your [vCenter Server system name] are selected and click
Next.

The Storage Optimization page appears.

6. Click Next.

The Identification and Settings page appears.

7. Configure the farm with the following values.

a. ID: Marketing-Apps-Farm

b. Description: Marketing applications

c. Access group: /
d. Click Next.

8. Under Load Balancing Settings, accept the default values and click Next.

The Provisioning Settings page appears.

44
9. Enter the following provisioning settings.

a. Naming Pattern: ICRD-{n:fixed=2}

b. Maximum Machines: 3

c. Minimum Number of Ready (Provisioned) Machines during Instant Clone Maintenance


Operations: 1

d. Click Next.

The vCenter Settings page appears.

10. Configure the vCenter Server settings and then click Next.

 Golden Image VM: RDSHICGolden

 Snapshot: Baseline

 VM Folder location: Datacenter

 Cluster: SA-Compute

 Resource pool: Desktops

 Datastores: HorizonStorage

The Guest Customization page appears.

11. Accept all default values on the Guest Customization page and click Next.

The Ready to Complete page appears.

12. Click Submit.

13. On the Farms page, review the columns.

14. Monitor the instant clone creation process in the vSphere Client.

a. If necessary, log in.

 User name: [email protected]

 Password: VMware1!

b. Review the activity in the ClonePrepReplicaVmFolder folder.

c. Go to the VMs and Templates view to examine the Marketing-Apps-Farm VM


folder and verify that the instant clone VM name conforms to the VM naming pattern
that you configured.

d. Monitor the instant clone provisioning in the Recent Tasks pane.


15. Monitor instant clone provisioning in Horizon Console.

a. From the navigation pane, expand Inventory and select Farms.

b. Click the Marketing-Apps-Farm hyperlink.

45
c. Scroll to vCenter Server and monitor the Secondary Image progress bar.

d. Click the RDS Hosts tab.

e. Monitor the status until it displays as Available.

46
Lab 11 Creating RDSH Application
and Desktop Pools

Objectives
To give users remote access to RDSH desktops and applications, you create desktop and
application pools:

1. Create an Application Pool

2. Verify the Creation of the Application Pool

3. Create an RDS Desktop Pool

4. Verify the Creation of the Remote Desktop Services Desktop Pool

5. Delete Application Pools

Task 1: Create an Application Pool


You create an application pool and entitle users to access it.

1. Return to Horizon Console and, if necessary, log in to SA-Connserv-01.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Applications.

The Application Pools page appears.

3. Click Add > Add from Installed Applications.

The Add Application Pool wizard opens.


4. Verify that RDS Farm and Marketing-Apps-Farm are selected.

5. From the list of installed applications, select Calculator, Paint, and Notepad.

47
6. Click Next.

The Edit Applications Pool page appears.

7. Accept the default IDs and display names and click Submit.

NOTE

The IDs and the display names are editable.

8. Click Add.

9. Use the Name/User Name text box and the Find button to locate and select the Horizon
Admins group, and then click OK.

The Add Entitlements page appears.

10. Click to select Horizon Admins and click OK.

11. From the navigation pane, expand Inventory and select Applications to display the
Application Pools page.

Task 2: Verify the Creation of the Application Pool


You verify the creation of the application pool by connecting to one of the remote
applications.

1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client.

2. In Horizon Client, log in to the sa-connserv-01.vclass.local Horizon Connection Server.

 User name: HorizonAdmin

 Password: VMware1!

3. Start Notepad.

NOTE

If you do not see the RDSH applications, log out of Horizon Client and then log back in.

4. Enter some text in Notepad and save it to the default directory.

5. Close Notepad and Horizon Client.

Task 3: Create an RDS Desktop Pool


You create a Remote Desktop Services (RDS) desktop pool and entitle users to access it.

48
1. Return to Horizon Console and, if necessary, log in to SA-Connserv-01.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Desktops.

3. Click Add.

The Add Pool wizard open.

4. On the Type page, click RDS Desktop Pool and click Next.

The Desktop Pool Identification page appears.

5. Identify the pool.

a. ID: RDS-Desktop-Pool

b. Display name: Sales Desktop Session

c. Description: RDS desktops for sales

d. Click Next.

The Desktop Pool Settings page appears.

6. Click Next.

The Select RDS Farms page appears.

7. Select Marketing-Apps-Farm and click Next.

The Ready to Complete page appears.

8. Select the Entitle Users After Adding Pool check box, review the settings, and click
Submit.

9. Click Add.

10. Use the Name/User Name text box and the Find button to locate and select the Horizon
Admins and Horizon Users groups, and then click OK.

11. Click to select the Horizon Admins and Horizon Users groups and click OK.

Task 4: Verify the Creation of the RDS Desktop Pool


You verify the creation of the RDS desktop pool by connecting to one of the desktop sessions.

1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client.


2. In Horizon Client, log in to the sa-connserv-01.vclass.local Horizon Connection Server.

 User name: HorizonAdmin

49
 Password: VMware1!

3. Double-click Sales Desktop Session to start an RDS desktop session.

4. If you do not see Sales Desktop Session, click the Refresh button.

NOTE

The desktop looks and behaves the same as do Horizon desktops that are based on VMs.

5. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

6. Expand Monitor > Sessions to view information about the desktop session.

7. Disconnect from the Sales Desktop Session and log off of the Horizon Client session.

Task 5: Delete Application Pools


You use Horizon Console to delete application pools.

1. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Applications.

3. Delete the application pools.

a. Select all listed applications and click Delete.

b. Click OK.

50
Lab 12 Monitoring VMware Horizon

Objectives
To view the status of VMware Horizon user sessions, you use the VMware Horizon dashboard
and the Help Desk tool:

1. Monitor the Status of the Horizon Components with the Dashboard

2. Monitor the Instant Clone Desktop Session with the Help Desk Tool

Task 1: Monitor the Status of the Horizon Components with the


Dashboard
You monitor the status of VMware Horizon and vSphere components by using the Horizon
Console dashboard.

1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.

 User name: HorizonUserA

 Password: VMware1!

2. Double-click Instant Clone Desktop Pool.

3. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client to open a


second instance of Horizon Client.

4. Log in to Horizon Client.

 User name: HorizonUserB

 Password: VMware1!

5. Double-click Instant Clone Desktop Pool.


6. Return to Horizon Console and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

51
7. Select Monitor > Dashboard.

8. Monitor the System Health, Workload, and Total Sessions panes.

9. Under System Health, click VIEW.

The Components page appears.

a. Click the Connection Servers tab.

b. View the CPU Consumption column and the Memory Consumption column, and
record both values consumed by the connection server.

You may have to scroll right to view the columns.

c. Click the Gateway Servers, Event Database, and TrueSSO tabs to view the details.

10. From the navigation pane, click RDS Farms to review details.

 Click Marketing-Apps-Farm to view farm details.

 Review the load index value for each of the RDS servers.

11. From the navigation pane, click vSphere.

12. Click the Datastores, ESX Hosts, and vCenter Servers tabs to view the details.

13. From the navigation pane, click Other Components.

14. Click the Domains, SAML 2.0, and License Service tabs to view the details.

15. Click OK.

16. In the Workload pane, click VIEW.

17. To view additional details, such as current use for the data store, click HorizonStorage
datastore.

18. Click OK.

19. Under Total Sessions, click VIEW to view desktop session details.

 From the Sessions drop-down menu, select Desktops to view the desktop session
details.

 From the Sessions drop-down menu, select Applications to view the application
session details.

Task 2: Monitor the Instant Clone Desktop Session with the Help
Desk Tool
You monitor desktops by using the Horizon Help Desk Tool.

1. Return to Horizon Console and, if necessary, log in.

52
 User name: HorizonAdmin

 Password: VMware1!

2. Select Monitor > Help Desk.

3. In the User Search text box, enter HorizonUserA, press Enter, and select the
HorizonUserA search result.

HorizonUserA is currently logged in to the instant clone desktops.

4. Click the Sessions tab to view basic information about the active sessions and verify that
the instant clone session displays.

5. Click the computer name of any instant clone active session.

Details for the instant clone session display.

6. View details of the instant clone session.

a. Monitor the details of the desktop.

NOTE

The details of the session, such as client information, connection protocol, session
duration, VDI performance display.

b. Click More to expand the User Experience Metrics section.

c. Click Send Message.

d. In the Message text box, enter the message Hello from HelpDesk tool!
and click OK.

e. Return to the instant clone active session, verify the message, and click OK.

7. Review information about the active applications running on the desktop.

a. Return to the HorizonUserA instant clone desktop connection.

b. Open the WordPad and WinSCP applications.

c. Return to Horizon Console and click the Applications tab.

d. Verify that the WordPad and WinSCP applications display.

8. Use the Help Desk Tool to stop an application.

a. Select WordPad.
b. Click End Application.

c. Click OK.

9. Return to the instant clone session and verify that WordPad is not running.

53
10. Return to Horizon Console.

11. Click the X to close instant clone details page.

12. Click the Desktops tab.

The Desktops page shows the pool names and desktop types that have been entitled to
the user.

13. Verify that VMware Blast is the default protocol for the desktop pool.

14. Click the Activities tab.

a. From the time frame drop-down menu, select Last week.

b. Click to deselect Help Desk Event Only.

c. Enter logged in the Filter text box.

d. Verify that HorizonUserA logged in and logged out of the VM multiple times.

15. Click the X to close the page.

54
Lab 13 Configuring Horizon
Connection Server

Objective and Tasks


You configure the Horizon Connection Server:

1. Prepare the Environment

2. Verify the VMware Horizon Software License

3. Associate a vCenter Server Instance with a Horizon Connection Server

4. Configure an Event Database

5. Install a Replica Connection Server

Task 1: Prepare the Environment


You verify that Connection Server Systems are powered on.

The domain controller system hosts the database for Horizon events. The domain controller
system is already running.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Navigate to the Hosts and Clusters view.


4. Power on your connection servers.

a. Expand sa-vcsa-01.vclass.local > Datacenter > SA-Compute.

55
b. If not already powered on, power on SA-ConnServ-01, SA-ConnServ-02, SA-
ConnServ-03, and SA-Connector-01.

Task 2: Verify the VMware Horizon Software License


You verify the VMware Horizon license using Horizon Console.

1. From the STUDENT-A-01 desktop, open a new Firefox tab and select Connection
Servers > SA-ConnServ-02.

NOTE

If a warning is displayed, follow the instructions to continue past the warning about self-
signed certificates.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. In the navigation pane, expand Settings and select Product Licensing and Usage.

4. On the Licensing and Usage page, verify licensing details.

a. Verify that the license expiration date is later than the ending date of this course.

b. Verify that Desktop License and Application Remoting License are enabled.

Task 3: Associate a vCenter Server Instance with a Horizon


Connection Server
You associate Horizon Connection Server with the vCenter Server instance.

1. Return to the Horizon Console for SA-ConnServ-02 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. In the navigation pane, expand Settings and select Servers.

3. On the vCenter Servers tab, click Add.

4. On the vCenter Information page, configure vCenter Server settings.


a. Server address: sa-vcsa-01.vclass.local

b. User name: [email protected]

c. Password: VMware1!

56
d. Enter a description for the vCenter Server instance.

e. Accept the default values for the other settings on this page and click Next.

5. On the Storage page, keep all default settings and click Next.

6. On the Ready to Complete page, review all details and click Submit.

7. On the Servers page, verify that the vCenter Server instance is listed.

Task 4: Configure an Event Database


You configure an event database for use by Horizon Console.

The event database is already created for this task.

1. Return to the Horizon Console for SA-ConnServ-02 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. In the navigation pane, expand Settings and select Event Configuration.

The Event Configuration page appears.

3. Click Edit, configure access to the event database, and then click OK.

 Database Server: dc.vclass.local

 Database Type: Microsoft SQL Server

 Port: 1433

 Database Name: HorizonEventDB02

 User Name: sa

 Password: VMware1!

 Table Prefix: HE_

4. Verify the connection to the event database.

a. In the navigation pane, select Monitor > Events.

b. Verify that the vclass.local\HorizonAdmin has added database


configuration message displays.
5. If the page requires refreshing, click the Refresh icon.

Task 5: Install a Replica Connection Server


You install a replica connection server using the Connection Server 03 VM.

57
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-03 VM.

You are automatically logged in as vclass\administrator.

2. On the desktop, double-click the Class Materials and Licenses shortcut to the following
folder.

\\dc\materials
3. Navigate to Downloads > Horizon 8.8 (2212) folder.

4. Install the replica server.

a. Double-click the VMware-Horizon-Connection-Server-x86_64-8.x.x-xxxxxxxx.exe


file.

b. In the Security Warning window, click Run.

The VMware Horizon Connection Server window opens.

c. On the welcome page, Click Next >.

d. Accept the license agreement and click Next >.

e. Accept the default destination folder and click Next >.

f. On the Installation Options page, configure the following settings and click Next >.

 Select Horizon Replica Server for the instance type.

 Verify that Install HTML Access is selected.

g. On the Source Server page, enter sa-connserv-01.vclass.local the server


and click Next >.

h. On the Firewall Configuration page, select Configure Windows Firewall


automatically and click Next >.

i. On the Ready to Install the Program page, click Install and wait for the installation
process to complete.

The installation process can take approximately 15 minutes.

j. Click Finish.

i. If prompted with a feedback or Internet Explorer request, decline or close the


pop-up window and continue.

The Documentation page appears automatically.


k. Close the Documentation page.

5. From the sa-connserv-03 desktop, open Horizon Console.

58
a. Open the Firefox browser and go to https://localhost/admin/#/login to
access Horizon Console.

b. Follow the instructions to continue past the Warning: Potential Security


Risk Ahead warning.
6. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

7. Verify that the connection server replica was installed.

a. In the navigation pane, expand Settings and select Servers.

b. Click the Connection Servers tab.

c. Verify that sa-connserv-01 and sa-connserv-03 are listed and enabled.

59
Lab 14 Navigating AD LDS
Databases

Objective and Tasks


You back up, connect to, and navigate the AD LDS databases:

1. Back Up the AD LDS Database on SA-CONNSERV-01

2. Connect to the SA-CONNSERV-01 AD LDS Database

3. Navigate the SA-CONNSERV-01 AD LDS Database

4. Back Up the AD LDS Database on SA-CONNSERV-02

5. Connect to the SA-CONNSERV-02 AD LDS Database

6. Navigate the SA-CONNSERV-02 AD LDS Database

Task 1: Back Up the AD LDS Database on SA-CONNSERV-01


You back up the AD LDS database on SA-CONNSERV-01 before navigating the AD LDS
database.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the Connection
Server > SA-ConnServ-01 bookmark.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. From the navigation pane, expand Settings and select Servers.


4. Click the Connection Servers tab.

5. From the Connection Server list, select SA-CONNSERV-01.

6. Click Backup Now.

60
The Backup Now window opens.

7. Click OK and wait for the process to complete.

The Manual backup in progress message displays in the Last Backup column
until the backup is complete.

a. If necessary, click the Refresh icon to refresh the page.

Task 2: Connect to the SA-CONNSERV-01 AD LDS Database


You connect to the AD LDS database using the ADSI Edit tool.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-01 VM.

You are automatically logged in as vclass\administrator.

2. Click Start and enter adsi edit in the Search text box.

3. Select ADSI Edit.

4. Click Action and select Connect to...

The Connection Settings window opens.

5. Configure the connection settings.

a. Enter Horizon AD LDS DB in the Name text box.

The label helps navigation.

b. Under Connection Point, select Select or type a Distinguished Name or Naming


Context: and enter dc=vdi,dc=vmware,dc=int in the text box.

c. Under Computer, select Select or type a domain or server: (Server | Domain


[:port]) and enter localhost:389 in the text box.

d. Click OK to connect.

Task 3: Navigate the SA-CONNSERV-01 AD LDS Database


You navigate the SA-CONNSERV-01 AD LDS database.

1. From the ADSI Edit window, expand Horizon AD LDS DB in the navigation pane.

The DC=vdi,dc=vmware,dc=int folder displays.


2. Double-click the DC=vdi,dc=vmware,dc=int folder.

A list of folders displays.

3. Review the desktop pool information.

61
a. Click OU=Server Groups.

An entry displays for each desktop pool.

b. Double-click each entry and review the attribute information, such as display name,
descriptions, and default protocol.

Avoid making changes. Changes can corrupt the configuration.

c. Click Cancel to close the attributes page without saving changes.

4. Review VMware Horizon VMs information.

a. Click OU=Servers.

One entry per VMware Horizon VM displays, regardless of which pool they belong to.

b. Double-click one of the entries and review the attributes, such as distinguished name
and name.

c. Click Cancel to close the page without saving changes.

5. Review Horizon roles information.

a. Click CN=Roles.

This page displays one entry per role. The roles are administrators, users, and
readers.

b. Double-click CN=Administrators.

The CN=Administrators Properties window opens.

c. Scroll down and review each of the attributes.

d. Click Cancel to close the page without saving changes.

6. Close the ADSI Edit window.

Task 4: Back Up the AD LDS Database on SA-CONNSERV-02


You back up the AD LDS database on SA-CONNSERV-02 before navigating the AD LDS
database.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the SA-ConnServ-
02.

2. Log in to the Horizon Console.

 User name: HorizonAdmin


 Password: VMware1!

3. From the navigation pane, expand Settings and select Servers.

62
4. Select the Connection Servers tab.

5. From the Connection Server list, select SA-CONNSERV-02.

6. Click Backup Now.

The Backup Now window opens.

7. Click OK and wait for the process to complete.

The Manual backup in progress message displays in the Last Backup column
until the backup is complete.

a. If necessary, click the Refresh icon to refresh the page.

Task 5: Connect to the SA-CONNSERV-02 AD LDS Database


You connect to the AD LDS database using the ADSI Edit tool.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-02 VM.

You are automatically logged in as vclass\administrator.

2. Click Start and enter adsi edit in the Search text box.

3. Select ADSI Edit.

4. Click Action and select Connect to...

The Connection Settings window opens.

5. Configure the connection settings.

a. Enter Horizon AD LDS DB in the Name text box.

The label helps navigation.

b. Under Connection Point, select Select or type a Distinguished Name or Naming


Context: and enter dc=vdi,dc=vmware,dc=int in the text box.

c. Under Computer, Select Select or type a domain or server: (Server | Domain


:[port]) and enter localhost:389 in the text box.

d. Click OK to connect.

Task 6: Navigate the SA-CONNSERV-02 AD LDS Database


You navigate the SA-CONNSERV-02 AD LDS database.

1. In the ADSI Edit window, expand Horizon AD LDS DB in the navigation pane.

The DC=vdi,dc=vmware,dc=int folder displays.

63
2. Double-click the DC=vdi,dc=vmware,dc=int folder.

A list of folders displays.

3. Click OU=Server Groups to review desktop pool information.

No entries display because no desktop pools were created in SA-CONNSERV-02.

4. Review VMware Horizon roles information.

a. Click CN=Roles.

One entry per role displays. The roles are administrators, users, and readers.

b. Double-click CN=Administrators.

The CN=Administrators Properties window opens.

c. Scroll down and review each of the settings.

d. Click Cancel to close the window without saving changes.

5. Close the ADSI Edit window.

64
Lab 15 Configuring a Unified Access
Gateway Appliance

Objective and Tasks


In this lab, you configure a Unified Access Gateway and use it to connect to a VMware Horizon
desktop:

1. Connect to an External Virtual Machine

2. Configure a Unified Access Gateway Appliance

3. Access an Instant-Clone Desktop from an External Network

Task 1: Connect to an External Virtual Machine


In this task, you open a console to Client 03 and verify that you cannot connect to a VMware
Horizon desktop through a Unified Access Gateway appliance.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
Client-03 VM.

You are automatically logged in as .\localadmin

NOTE

You must include the dot that comes before the backslash (.\) in the User name.
Client-03 is not a member of a domain.

2. On the taskbar, click the Command Prompt icon.


3. Ping the Horizon Connection Server sa-connserv-01 by entering the following command:

ping 172.20.10.21
The ping is unsuccessful.

65
4. Ping the Unified Access Gateway to verify connectivity.

Enter: ping 10.0.0.85


5. Close the command prompt.

6. Open the VMware Horizon Client application.

7. Configure Horizon Client SSL proxy:

a. Click Settings on the menu bar.

b. Click Security.

c. From the drop-down, select the Do not verify server identity certificates.

d. Click < (top left)to return to Horizon Client home.

8. Click + Add Server.

9. For the name of the connection server, enter the IP address 10.0.0.85 and click
Connect.

10. The connection fails to complete. After a minute, cancel the connection and close Horizon
Client.

Task 2: Configure a Unified Access Gateway Appliance


In this task, you configure a Unified Access Gateway (UAG) appliance.

1. Obtain the Horizon Connection Server thumbprint:

a. From the STUDENT-A-01 desktop, open the Firefox browser and click the
Connectionn Server > SA-ConnServ-01 bookmark.

b. If necessary, log in to the Horizon Console:

 User name: HorizonAdmin

 Password: VMware1!

c. To the left of the URL, click the site information icon (lock) and click the angle bracket
(>) to the right of Connection Secure.

d. Click More Information.

e. Select View Certificate.

f. Copy the SHA-1 fingerprint ID.


g. Close the Certificate tab.

2. To access the Unified Access Gateway administrator, on the Firefox Favorites bar, right-
click the Unified Access Gateway bookmark and select Open in new tab.

66
3. If a security warning appears, permit the website to be accessed.

4. Log in to the Unified Access Gateway:

 User name: admin

 Password: VMware1!

5. Configure the Unified Access Gateway for VMware Horizon connections:

a. Under Configure Manually, click Select.

b. To the right of Edge Service Settings, click the toggle button.

The toggle turns green.

c. To the right of Horizon Settings, click the settings icon (gear).


The VMware Horizon dialog box opens.

6. Configure the settings:

a. Click the toggle button Enable Horizon.

The toggle turns green.

b. Connection Server URL: https://sa-connserv-01.vclass.local

c. Connection Server URL Thumbprint: Enter sha1= and paste the fingerprint that you
copied in the earlier step.

d. Connection Server IP: IPv4

e. Enable PCOIP: Select Yes.

f. PCOIP External URL: 10.0.0.85:4172

g. Enable Blast: Select Yes.

h. Blast External URL: 10.0.0.85:8443

i. Leave all other settings at their default value.

7. Click Save.

8. Return to the Horizon console for Connection Server 01 and, log in:

 User name: HorizonAdmin

 Password: VMware1!

9. Configure Horizon Console for Blast Unified Access Gateway connections:


a. From the left navigation pane, expand Settings and select Servers.

b. Click Connection Servers and select SA-CONNSERV-01.

c. Click Edit.

67
d. Select the Do not use Blast Secure Gateway.

e. Click OK.

Task 3: Access an Instant-Clone Desktop from an External Network


In this task, you use the Client-03 VM to test the operation of the Unified Access Gateway to
access a VMware Horizon desktop from an external network.

1. From the STUDENT-A-01 desktop, return to the mRemoteNG connection to the Horizon
SA-Client-03 VM.

You are automatically logged in as .\localadmin

2. Click the VMware Horizon Client icon.

3. Click + Add Server.

4. For the name of the connection server, enter the IP address 10.0.0.85 and click
Connect.

5. Log in to Horizon Client:

 User name: HorizonUserA

 Password: VMware1!

6. Right-click InstantClone-Pool and select PCoIP protocol.

7. Connect to InstantClone-Pool pool.

8. If prompted, click Agree to the Sysinternals software license terms.


You must wait to be fully logged in to the VMware Horizon desktop.

9. From the Horizon Menu bar, click Options and select Log off Desktop.

10. From the VMware Horizon Client, reconnect to Horizon Connection Server at
10.0.0.85 and if necessary, log in:
 User name: HorizonUserA

 Password: VMware1!

11. Right-click Instant Clone Desktop Pool and select VMware Blast.

12. To verify that the Blast protocol can be used with the Unified Access Gateway, connect to
the Instant Clone Desktop pool as HorizonUserA.

13. Close Horizon Client.


14. Close the connection to the Client-03 VM.

68
Lab 16 Creating an Internal CA
Signed Certificate for VMware
Horizon Servers

Objective and Tasks


You work with CA certificates:

1. Create and Publish a Certificate Template for Horizon Connection Server Certificates

2. Request and Configure a New Certificate for a Horizon Connection Server Instance

3. Restart Services and Verify That Changes Take Effect

Task 1: Create and Publish a Certificate Template for Horizon


Connection Server Certificates
You create and publish a certificate template for Horizon Connection certificates in the
vclass.local domain controller.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the DC VM.

You are automatically logged in as vclass\administrator.

2. Enter mmc.exe in the Start menu search box and click mmc.exe.

3. Select File > Add/Remove Snap-in....

4. Add snap-ins from the Available snap-ins list.

a. Select Certificate Templates and click Add.


b. Select Certification Authority and click Add.

The Certification Authority window opens.

c. Select Local Computer and click Finish.

69
d. Click OK.

5. In the navigation pane, select Certificate Templates.

6. Right-click Web Server and select Duplicate Template.

The Properties of New Template window opens.

7. Click the Compatibility tab and configure the settings.

a. Verify that Show resulting changes is selected.

b. From the Certificate Authority drop-down menu, select Windows Server 2008 R2.

The Resulting changes page appears.

c. Click OK.

d. From the Certificate recipient drop-down menu, select Windows 7 / Server 2008
R2.

The Resulting changes window opens.

e. Click OK.

8. In the Properties of New Template window, click the General tab and configure the
settings.

a. Enter Horizon Connection Server 2 in the Template display name text


box.

b. Keep all other default settings.

9. Click the Request Handling tab and configure the settings.

a. Verify that Purpose is set to Signature and encryption.

b. Select Allow private key to be exported.

c. Keep all other defaults.

10. Click the Security tab and configure the settings.

a. Click Add....

b. Click Object Types....

The Object Types window opens.

c. Select Computers and click OK.

d. Enter sa-connserv-02 in the text box and click Check Names.


e. Click OK.

f. Click Add....

g. Enter sa-connserv-03 in the text box and click Check Names.

70
h. Click OK.

i. From the Group or user names list, select Authenticated Users.

j. From the Permissions for Authenticated Users list, verify that Allow is selected for
Read permission.

k. Click Allow for Enroll permission.

l. Click Apply.

11. On the Security tab, repeat the previous substeps to allow Read and Enroll permissions
for sa-connserv-02 and sa-connserv-03 .

12. Click OK.

13. From the navigation pane, expand Certificate authority > vclass-DC-CA.

14. Right-click Certificate templates and select New > Certificate Template to Issue.

The Enable Certificate Templates page appears.

15. Scroll to find your recently created certificate template.

a. Select Horizon Connection Server 2.

b. Click OK.

Task 2: Request and Configure a New Certificate for a Horizon


Connection Server Instance
You request and configure a new certificate for Horizon Connection Server instances.

1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-02 VM.

You are automatically logged in as vclass\administrator.

2. Enter mmc.exe in the Start menu search box and double-click mmc.exe.

3. Select File > Add/Remove Snap-in....

4. Add snap-ins from the Available snap-ins list.

a. Select Certificates and click Add.

The Certificates snap-in window opens.

b. Select Computer account and click Next.


c. Select Local Computer: (the computer this console is running on) and click Finish.

d. Click OK.

5. From the navigation pane, expand Certificates (Local Computer).

71
6. Expand Personal and click Certificates.

7. Locate and right-click the Sa-ConnServ-02.vclass.local self-signed certificate, and select


Properties.

The certificate properties window opens.

8. On the General tab, change the Friendly name to vdm.old and click OK.

9. From the navigation pane, right-click Certificates and select All Tasks > Request New
Certificate.

The Certificate Enrollment window opens.

10. Click Next.

11. Verify that Active Directory Enrollment Policy is selected and click Next.

12. Select a template.

a. Select Horizon Connection Server 2.

b. Click the Details down arrow for Horizon Connection Server 2.

c. Click Properties.

The Certificate Properties window opens.

13. Click the Subject tab and configure the settings.

a. Subject name Type: Common name

b. Subject name Value: sa-connserv-02.vclass.local

When you repeat this task for sa-connserv-03, verify that the subject name is sa-
connserv-03.vclass.local.

c. Click Add.

d. Alternative name Type: DNS

e. Alternative name Value: *.vclass.local

NOTE

You can have an Alternative name in your certificate properties. In this step, the
asterisk is used to make the Alternative name Value a wildcard.

f. Click Add.
14. Click the General tab and configure the settings.

 Friendly name: vdm

This Friendly name is a keyword that informs VMware Horizon to use this certificate.

72
 Leave all other default settings.

15. Click the Private Key tab.

a. Expand Key options.

b. Verify that Make private key exportable is selected.

16. Click OK.

17. Click Enroll.

18. Click Finish.

19. Close the mmc page.

If a prompt save the console setting appears, click No.

20. Repeat this task for the SA-ConnServ-03 VM.

Task 3: Restart Services and Verify That Changes Take Effect


You restart VMware Horizon services and verify that the changes take effect in the VMware
Horizon environment for both sa-connserv-02 and sa-connserv-03.

1. Return to the mRemoteNG connection, if necessary.

You must perform this entire task once for sa-connserv-02, and then again for sa-
connserv-03.

2. Enter view local services in the Start menu search box and double-click View
local services to open it.

3. Right-click the VMware Horizon View Connection Server service and select Restart.

4. Close the Services window.

Before you proceed to the next step, you must wait for 5 minutes till the Horizon
Connection Server service restarts.

5. Log in to Horizon Console.

a. From the sa-connserv-02 desktop, open the Firefox browser.

b. Go to https://sa-connserv-02.vclass.local/admin/#/login to
open Horizon console.

c. If prompted, bypass the security warning.

6. Log in to Horizon Administration Console


 User name: HorizonAdmin

 Password: VMware1!

73
7. In the navigation pane, click Dashboard and click VIEW under System Health to review
the System Health information.

74
Lab 17 Configuring Cloud Pod
Architecture

Objective and Tasks


You set up and configure your cloud pod architecture:

1. Delete Local Desktop Entitlements

2. Delete Local Application Entitlements

3. Initialize the Cloud Pod Architecture Feature in Horizon Console

4. Join a Pod to the Pod Federation in Horizon Console

5. Create and Configure Global Entitlements in Horizon Console

6. Add a Pool to a Global Entitlement in Horizon Console


7. Test a Cloud Pod Architecture Configuration

Task 1: Delete Local Desktop Entitlements


You remove all local entitlements before creating Global Entitlements using Horizon Console.

1. From the STUDENT-A-01 desktop, open the Firefox browser and click the Connection
Server > SA-ConnServ-01 bookmark.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. From the navigation pane, expand Inventory and select Desktops.


4. Click Linux-Pool.

5. Click the Entitlements tab.

75
6. Select all the listed entitlements.

7. Click Remove Entitlements.

The Remove Entitlements window opens.

8. Click OK to confirm the deletion.

9. If the Terminate User Sessions window opens, click OK.

Task 2: Initialize the Cloud Pod Architecture Feature in Horizon


Console
You initialize the Cloud Pod Architecture feature in sa-connserv-01 using Horizon Console.

1. Return to Horizon Console for Connection Server 01 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Settings and select Cloud Pod Architecture.

3. Click Initialize the Cloud Pod Architecture feature.

The Initialize window opens.

4. Click Initialize to confirm the process and wait for the process to complete.

Task 3: Join a Pod to the Pod Federation in Horizon Console


You join the sa-connserv-02 pod to the Pod Federation using Horizon Console.

1. From the STUDENT-A-01 desktop, open the Firefox browser and select Connection
Servers > SA-ConnServ-02.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password:VMware1!

3. From the navigation pane, expand Settings and select Cloud Pod Architecture.

4. Click Join the pod federation and configure the settings.

The Join window opens.

a. Connection Server (host name or IP address): sa-connserv-01.vclass.local


b. User name (domain\username): vclass\HorizonAdmin

c. Password: VMware1!

76
d. Click Join and wait for the process to complete.

Task 4: Create and Configure Global Entitlements in Horizon


Console
You create and configure Global Entitlements using Horizon Console.

1. Return to Horizon Console for Connection Server 01 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Global Entitlements.

3. Click Add.

The Add Global Entitlement window opens.

4. Select Desktop Entitlement and click Next.

5. Enter Marketing Global Desktop in the Name text box.

6. For User Assignment, select Floating.

7. For Scope, select All Sites.

8. For Default Display Protocol, select VMware Blast.

9. Click the Allow Users to Choose Protocol drop-down menu, and select Yes.

10. Select Allow Users to Restart Machines.

11. Accept all other default values and click Next.

12. Click Add.

The Find User or Group window opens.

13. In the Name/Username text box, enter HorizonUserA and click Find.

14. Select Horizon User A and click OK.

15. Click Next and click Finish.

Task 5: Add a Pool to a Global Entitlement in Horizon Console


You add a local desktop pool to a previously created global entitlement.
1. Return to Horizon Console for Connection Server 01 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

77
2. From the navigation pane, expand Inventory and select Global Entitlements.

3. Click Marketing Global Desktop.

4. Click the Local Pools tab.

5. Click Add.

The Assign Pools - Marketing Global Desktop window opens.

6. Select Linux-Pool.

7. Click Add.

Task 6: Test a Cloud Pod Architecture Configuration


You test the connection to Cloud Pod Architecture using the credentials for Horizon Users A
and B.

1. From the STUDENT-A-01 desktop, double-click VMware Horizon Client.

2. Click the + Add Server button, enter sa-connserv-02.vclass.local, and click


Connect.

3. To connect, log in as HorizonUserB.

 User name: HorizonUserB

 Password: VMware1!

You get a Connection Failed error message stating that the user is not entitled
to use the system. SA-CONNSERV-02 has no local pools and Horizon User B is not a
member of the global entitlement.

4. Log in as HorizonUserA.

 User name: HorizonUserA

 Password: VMware1!

a. Right-click the Marketing Global Desktop pool and select VMware Blast as the
display protocol.

b. Double-click the Marketing Global Desktop pool.

NOTE

SA-CONNSERV-02 has no local pools. However, HorizonUserA is a member of the


Marketing Global Desktop global entitlement and therefore receives a desktop
session.

5. Disconnect and log off the session.

78
Lab 18 Integrating Workspace ONE
Access with VMware Horizon

Objective and Tasks


Integrate VMware Horizon with Workspace ONE Access:

1. Configure the Horizon Connection Server

2. Create VMware Horizon Desktop Entitlements

3. Create and Entitle a VMware Horizon Application Pool

4. Configure Workspace ONE Access for VMware Horizon On-Premises Desktops

5. Verify Workspace ONE Desktop Access

Task 1: Configure the Horizon Connection Server


You configure a Horizon Connection Server instance for integration with Workspace ONE
Access.

1. From the STUDENT-A-01 desktop, open the Firefox browser and select Connection
Servers > SA-ConnServ-01.

2. Log in to Horizon Console.

 User name: HorizonAdmin

 Password: VMware1!

3. From the navigation pane, expand Settings and select Servers.

4. Click the Connection Servers tab, click to select the SA-CONNSERV-01 server, and click
Edit.

5. Click the Authentication tab.

79
6. Change Delegation of authentication to VMware Horizon (SAML 2.0 Authenticator) to
Allowed.

IMPORTANT

The setting does not enable the SAML-only mode. The SAML-only mode is enabled by
setting it to Required.

7. Click Manage SAML Authenticators.

The Manage SAML Authenticators window opens.

8. Add a SAML Authenticator.

a. Click Add.

b. For Type, select Dynamic.

c. For Label, enter WS1.

d. In the Metadata URL text box, replace <YOUR SAML AUTHENTICATOR NAME>
with sa-vidm-01.vclass.local.

IMPORTANT

The Metadata URL text box is prepopulated. Do not completely erase the URL, but edit it.

e. Select Enabled for Connection Server.


f. Click OK.

9. Click OK.

10. Click OK.

Task 2: Create VMware Horizon Desktop Entitlements


You create a VMware Horizon virtual resource entitlement for a domain user.

1. Return to the Horizon Console for Connection Server 01 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!
2. From the navigation pane, select Users and Groups.

3. From the Entitlements drop-down menu, select Add Desktop Entitlement.

The Add Desktop Entitlement window opens.

80
4. Configure the following settings.

 Domain: vclass.local

 Name/User name: wso

 Description: Leave the default.

5. Click Find.

The WSO User account displays.

6. Select the WSO User account and click Next.

The Desktop Pools page appears.

7. Select InstantClone-Pool and click Submit.

You now have one virtual desktop entitlement for the WSO User domain account.

The Users and Groups page displays the [email protected] entry with 1 Desktop
Entitlement.

Task 3: Create and Entitle a VMware Horizon Application Pool


You create a VMware Horizon application pool and assign it to a domain user.

1. Return to the Horizon Console for Connection Server 01 and, if necessary, log in.

 User name: HorizonAdmin

 Password: VMware1!

2. From the navigation pane, expand Inventory and select Applications.

3. From the Add drop-down menu, select Add from Installed Applications.

The Add Application Pool window opens.

4. Configure the Desktop Pool settings.

a. Select RDS Farm.

b. From the drop-down menu, select Marketing-Apps-Farm.

c. Paint: Select.

d. Notepad: Select.

e. Click Next.
5. Accept the default application ID naming and click Submit.

The Add Entitlements page appears.

6. Click Add.

81
The Find User or Group page appears.

7. Find the user.

a. Name/User name: Enter wsouser

b. Click Find.

c. Select the WSO User user from the search result.

d. Click OK.

The Add Entitlements page appears.

8. Click OK and verify that the applications added are listed in the Application Pools.

Task 4: Configure Workspace ONE Access for VMware Horizon On-


Premises Desktops
You configure Workspace ONE for integration with VMware Horizon desktops.

1. From the STUDENT-A-01 desktop, open Firefox browser and click the vSphere
bookmark.
The vCenter Single Sign-On page appears.

2. Log in to the vSphere Client.

 User name: [email protected]

 Password: VMware1!

3. Go to the Hosts and Clusters view and expand SA-Compute.

4. Right click SA-Connector-01 VM and select Power > Restart Guest OS .

a. Click Yes.

5. In the Firefox browser, open a new tab and click the WorkspaceONE bookmark, and
select VMware Workspace ONE.

6. From the Select your domain drop-down menu, select System Domain.

7. Deselect Remember this setting.

8. Click Next.

9. Log in to Workspace ONE Access.

 User name: admin


 Password: VMware1!

10. Click the the Resources tab.

11. From the navigation pane, select Virtual Apps Collections.

82
12. Scroll-down and click GET STARTED.

The Select the Source Type page appears.

13. Under Horizon, click SELECT.

The New Horizon Collection page appears.

14. Configure the following collection settings.

a. Name: Horizon

b. From the Connector drop-down menu, select SA-Connector-01.vclass.local


(active).

c. Click Next.

The Pod and Federation page appears.

15. Configure the following pod settings.

a. Click ADD A POD.

b. Enter sa-connserv-01.vclass.local in the Horizon Connection Server text


box.

c. User name: HorizonAdmin

d. Password: VMware1!

e. Keep all the other default settings and click ADD.

f. Click Next.

The Configuration page appears.

16. Keep all the configuration defaults and click Next.

The Summary page appears.

17. Review the configuration summary and click SAVE & CONFIGURE.

18. Wait until the process finishes.

A message appears, stating that Collection 'Horizon' has been added successfully.

19. To run an initial synchronization, click the Overview tab and select Sync without
safeguards from the Sync drop-down menu.

20. Click Virtual Apps Collection from the left navigation pane.

The Virtual Apps Collection page displays.


21. Refresh until the Sync Status displays as Completed.

22. Click the More link.

83
23. Click the i icon beside Completed to view the Sync Action Summary page, showing the
added Applications, Desktop, and Assignment.

24. Log out from the VMware Workspace ONE management console.

a. Click Local Admin in the upper-right corner.

b. Click Logout.

25. Click Go back to login page.

Task 5: Verify Workspace ONE Desktop Access


You login to VMware Workspace ONE as a Workspace One user and access the virtual
desktop that was added in the previous task .

1. Connect to the Workspace ONE Access console.

a. From the STUDENT-A-01 desktop, open Firefox browser and click the Workspace
bookmark and select VMware Workspace ONE.

b. From the Select your domain drop-down menu, select vclass.local.

c. Click Next.

2. Log in.

 User name: wsouser

 Password: VMware1!

3. Click Sign in.

You are logged in to the Workspace ONE Catalog.

4. Click Apps tab.

You see the VMware Horizon virtual applications synced to the catalog.

5. To open a desktop, click Instant Clone Desktop Pool.

a. Accept the license agreement.

6. Click the Unity Touch Sidebar to open the application and click Notepad.

7. Close the Notepad application.

8. In the top-right corner of Unity Touch Sidebar, click Open Menu.

9. Select Logout.
10. Select OK.

84
85
Answer Key

No table of contents entries found.

86

You might also like