VMware Horizon - Deploy and Manage (V8.8) - Lab Manual PDF
VMware Horizon - Deploy and Manage (V8.8) - Lab Manual PDF
Manage [V8.8]
Lab Manual
Copyright © 2023 VMware, Inc. All rights reserved. This manual and its accompanying
materials are protected by U.S. and international copyright and intellectual property laws.
VMware products are covered by one or more patents listed at
http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of
VMware, Inc. in the United States and/or other jurisdictions. All other marks and names
mentioned herein may be trademarks of their respective companies. VMware vSphere®
Client™, VMware vSphere® 2015, VMware vSphere®, VMware vCenter® Single Sign-On,
VMware vCenter Server®, VMware vCenter®, VMware Workstation™, VMware Workspace
ONE® Access™, VMware Workspace ONE®, VMware Workspace ONE® for React Native,
Windows OS Optimization Tool for VMware Horizon®, VMware View Agent, VMware
View®, VMware Horizon® View™, VMware Verify™, VMware Integrated Printing™,
VMware Horizon® 7, VMware Horizon® 7, VMware Horizon® 7 on VMware Cloud™ on
AWS, VMware Unified Access Gateway™, VMware Player™, VMware Horizon®
Connection Server™, VMware Horizon® Client™, VMware Horizon® Standard Edition,
VMware Go™, VMware ESXi™, and VMware ESX® are registered trademarks or
trademarks of VMware, Inc. in the United States and/or other jurisdictions.
The training material is provided “as is,” and all express or implied conditions,
representations, and warranties, including any implied warranty of merchantability, fitness
for a particular purpose or noninfringement, are disclaimed, even if VMware, Inc., has
been advised of the possibility of such claims. This material is designed to be used for
reference purposes in conjunction with a training course.
The training material is not a standalone training tool. Use of the training material for self-
study without class attendance is not recommended. These materials and the computer
programs to which it relates are the property of, and embody trade secrets and
confidential information proprietary to, VMware, Inc., and may not be reproduced,
copied, disclosed, transferred, adapted or modified without the express written approval
of VMware, Inc.
Typographical Conventions
www.vmware.com/education
Monospace Identifies user inputs:
Bold
Enter ipconfig /release.
<ESXi_host_name>
www.vmware.com/education
Contents
iii
Lab 6 Installing and Using Horizon Client ................................................. 22
Task 1: Install Horizon Client on the STUDENT-A-01 Desktop VM ......................................... 22
Task 2: Connect to a Windows Horizon Desktop ................................................................. 22
Task 3: Connect to a Linux Horizon Desktop ....................................................................... 24
Lab 7 Configuring Print and Client Drive Redirection ................................ 25
Task 1: Verify Print and Client Drive Redirection Agent Features .......................................... 25
Task 2: Test Print Redirection ............................................................................................ 26
Task 3: Verify Client Drive Redirection ................................................................................27
Lab 8 Deploying Instant Clone Pools ....................................................... 29
Task 1: Take a Baseline Snapshot of the Golden Image ........................................................ 29
Task 2: Enable Instant Clone and Authorize a Horizon Console Account for Use by ClonePrep
........................................................................................................................... 30
Task 3: Create an Automated Desktop Pool of Windows Instant Clone VMs ......................... 30
Task 4: Create an Instant Clone Pool of Linux VMs .............................................................. 33
Task 5: Test an Individual Windows Instant Clone VM ......................................................... 36
Task 6: Test a Linux Instant Clone VM ................................................................................ 37
Lab 9 Managing Instant Clone Pools ....................................................... 39
Task 1: Install WinSCP on an Instant Clone Golden Image .................................................... 39
Task 2: Deploy the Updated Instant Clone Image ................................................................ 40
Task 3: Test the Updated Instant Clone VM ......................................................................... 41
Lab 10 Creating an Automated RDSH Farm ............................................. 42
Task 1: Verify That the RDSH Role Is Installed on the RDSH VM ........................................... 42
Task 2: Set Up an RDSH for Instant Clones ......................................................................... 43
Task 3: Create an RDSH Farm ........................................................................................... 44
Lab 11 Creating RDSH Application and Desktop Pools ............................... 47
Task 1: Create an Application Pool ..................................................................................... 47
Task 2: Verify the Creation of the Application Pool .............................................................. 48
Task 3: Create an RDS Desktop Pool ................................................................................. 48
Task 4: Verify the Creation of the RDS Desktop Pool ........................................................... 49
Task 5: Delete Application Pools ....................................................................................... 50
Lab 12 Monitoring VMware Horizon......................................................... 51
Task 1: Monitor the Status of the Horizon Components with the Dashboard ........................... 51
Task 2: Monitor the Instant Clone Desktop Session with the Help Desk Tool ......................... 52
iv
Lab 13 Configuring Horizon Connection Server ........................................ 55
Task 1: Prepare the Environment ....................................................................................... 55
Task 2: Verify the VMware Horizon Software License .......................................................... 56
Task 3: Associate a vCenter Server Instance with a Horizon Connection Server ..................... 56
Task 4: Configure an Event Database ................................................................................. 57
Task 5: Install a Replica Connection Server ......................................................................... 57
Lab 14 Navigating AD LDS Databases .................................................... 60
Task 1: Back Up the AD LDS Database on SA-CONNSERV-01.............................................. 60
Task 2: Connect to the SA-CONNSERV-01 AD LDS Database ............................................... 61
Task 3: Navigate the SA-CONNSERV-01 AD LDS Database .................................................. 61
Task 4: Back Up the AD LDS Database on SA-CONNSERV-02 ............................................ 62
Task 5: Connect to the SA-CONNSERV-02 AD LDS Database ............................................. 63
Task 6: Navigate the SA-CONNSERV-02 AD LDS Database ................................................ 63
Lab 15 Configuring a Unified Access Gateway Appliance ........................... 65
Task 1: Connect to an External Virtual Machine ................................................................... 65
Task 2: Configure a Unified Access Gateway Appliance ....................................................... 66
Task 3: Access an Instant-Clone Desktop from an External Network .................................... 68
Lab 16 Creating an Internal CA Signed Certificate for VMware Horizon
Servers................................................................................................. 69
Task 1: Create and Publish a Certificate Template for Horizon Connection Server Certificates . 69
Task 2: Request and Configure a New Certificate for a Horizon Connection Server Instance ... 71
Task 3: Restart Services and Verify That Changes Take Effect .............................................. 73
Lab 17 Configuring Cloud Pod Architecture .............................................. 75
Task 1: Delete Local Desktop Entitlements .......................................................................... 75
Task 2: Initialize the Cloud Pod Architecture Feature in Horizon Console .............................. 76
Task 3: Join a Pod to the Pod Federation in Horizon Console .............................................. 76
Task 4: Create and Configure Global Entitlements in Horizon Console ................................... 77
Task 5: Add a Pool to a Global Entitlement in Horizon Console ............................................. 77
Task 6: Test a Cloud Pod Architecture Configuration ........................................................... 78
Lab 18 Integrating Workspace ONE Access with VMware Horizon ............. 79
Task 1: Configure the Horizon Connection Server ................................................................ 79
Task 2: Create VMware Horizon Desktop Entitlements ........................................................ 80
Task 3: Create and Entitle a VMware Horizon Application Pool ............................................. 81
v
Task 4: Configure Workspace ONE Access for VMware Horizon On-Premises Desktops ....... 82
Task 5: Verify Workspace ONE Desktop Access ................................................................. 84
Answer Key .......................................................................................... 86
vi
vii
Lab 1 Creating a VMware Horizon
Windows 10 Desktop
Objectives
You create a VMware Horizon Windows 10 desktop:
Password: VMware1!
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
The vCenter Single Sign-On page appears.
1
Password: VMware1!
3. Click the VMs and Templates icon to go to the VMs and Templates view.
5. Select Deploy from template to select a creation type and click NEXT.
6. Select a template.
b. Expand Datacenter.
c. Expand Templates.
8. Click NEXT.
b. Click NEXT.
From the Recent Tasks pane, monitor the Clone virtual machine task until it displays the
Completed status.
2
NOTE
You perform the installation using the keyboard because the mouse performance is
suboptimal without VMware Tools.
Password: VMware1!
2. To power on the Win10Opt VM, right-click Win10Opt and select Power > Power On.
3. When the VM is powered on, right-click Win10Opt, select Guest OS > Install VMware
Tools and click MOUNT.
The VMware Tools ISO image is mounted on the CD/DVD drive of Win10Opt VM.
Password: VMware1!
6. Click anywhere in the console window and press Tab to select the Win10Opt Start menu,
and press Enter.
a. If the User Account Control dialog box appears, use the Tab key to select Yes and
press Enter.
b. If the VMware Tools wizard does not automatically start, double-click Setup to open
it.
3
The Ready to Install VMware Tools page appears.
When the installation is complete, the Completed the VMware Tools Setup Wizard
page appears.
Password: VMware1!
a. On the Windows task bar of the Win10Opt VM, click the up arrow to show the hidden
icons.
The About VMware Tools window appears. It displays the version of VMware Tools
and The VMware Tools Service is running. message.
1. If not already connected to Win10Opt console, return to the Win10Opt console and log in.
Password: VMware1!
3. In the center pane, under Related settings, click Advanced system settings.
6. In the Computer Name text box, enter Win10Opt as the name of the computer.
4
a. Select Domain and enter vclass.local in the Domain text box.
b. Click OK.
Password: VMware1!
d. Click OK.
e. Click OK.
g. When prompted to restart the system, click Restart Now and wait for the OS to
restart.
5
Lab 2 Installing Horizon Agent in
Windows Desktop Pools
Objectives
You install Horizon Agent on Windows VM:
1. Create a vCenter Server Resource Pool for the VMware Horizon Desktop Pool
Password: VMware1!
3. Click the Hosts and Clusters icon to go to the Hosts and Clusters view.
6
Task 2: Install Horizon Agent on the Win10Opt VM
You install Horizon Agent on the Win10Opt VM.
NOTE
If Win10Opt VM flickers and then disappears, restart the VM using the vSphere console
and retry the step.
2. From the Win10Opt desktop, double-click the Class Materials and Licenses desktop
shortcut.
a. If the Open File - Security Warning dialog box opens, click Run.
5. Click Next.
a. For the VMware Audio feature, select This feature will not be available.
b. For the Horizon Performance Tracker feature, select This feature, and all
subfeatures, will be installed on local hard drive.
c. Click Next.
7
11. Click Finish.
13. After restarting the VM, double-click Win10Opt in the left pane of the mRemoteNG
window.
a. In the windows Search text box, type Services and press enter.
b. Verify that the status of the VMware Horizon View Agent service is set to Running.
8
Lab 3 Optimizing a VMware Horizon
Windows Desktop
Objectives
You optimize a VM with the Windows OS Optimization Tool for Horizon:
2. Analyze the VM
4. Optimize the VM
5. Finalize the VM
a. From the Win10Opt desktop, double-click the Class Materials and Licenses desktop
shortcut.
9
Task 2: Analyze the VM
You use the Windows OS Optimization Tool for Horizon to analyze the current settings on the
Win10Opt VM.
1. In the Windows OS Optimization Tool for Horizon, click the Analyze button.
The current Windows setting will be compared to the default, built-in template. If you
created custom templates, you can select the desired template from the Template Name
menu.
The selected items indicate the settings that are included for optimization. Some items are
not selected for optimization by default because they can cause undesirable results.
1. In the Windows OS Optimization Tool for Horizon, access the Common Options settings.
c. Select a color.
4. Click OK.
3. Click the Optimize button and wait for the optimization to finish.
10
4. On the Result tab, analyze the optimization results.
5. Click Export.
6. Save the optimization report, using the default name, on the Win10Opt desktop.
1. In the Windows OS Optimization Tool for Horizon, click the Finalize tab.
Password: VMware1!
3. After Win10Opt VM powers off, right-click the VM and select Edit Settings.
a. Click the vertical ellipsis icon at the end of the CD/DVD drive 1 row.
b. Click Remove Device to remove the virtual CD/DVD drive from the VM.
a. Click the vertical ellipsis icon at the end of the SATA Controller 0 row.
b. Click Remove Device to remove the SATA controller from the VM.
6. Click OK.
11
Lab 4 Installing Horizon Agent on
Linux Desktops
Objectives
You install Horizon Agent on a Linux VM:
Password: VMware1!
2. Click the VMs and Templates icon and expand Datacenter > Horizon Workstations.
3. Right-click LinuxDT1 and select Power > Power On to power on the LinuxDT1 VM.
Password: VMware1!
12
NOTE
reboot
Your SSH session disconnects.
10. After the VM restarts, reconnect your SSH session and, if necessary, log in.
Password: VMware1!
cd /home/vmware/Downloads
b. To extract the Horizon Agent from the archive bundle, enter the following command.
cd VMware-horizonagent-linux-x86_64-2212-8.8.0-21071111/
d. To install Horizon Agent, enter the following command.
./install_viewagent.sh -A yes
e. After the Horizon Agent is installed, enter the following command.
reboot
Your SSH session disconnects.
13
f. After the VM restarts, reconnect your SSH session and, if necessary, log in.
Password: VMware1!
13. Modify the /etc/sssd/sssd.conf configuration file, using the following command.
nano /etc/sssd/sssd.conf
a. Modify the setting, use_fully_qualified_names to False
ad_gpo_map_interactive = +gdm-vmwcred
ad_gpo_access_control = permissive
The sssd.conf file should look like following:
[sssd]
domains = vclass.local
config_file_version = 2
services = nss, pam
[domain/vclass.local]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = VCLASS.LOCAL
realmd_tags = manages-system joined-with-adcli
id_provider = ad
fallback_homedir = /home/%u@%d
ad_domain = vclass.local
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = ad
ad_gpo_map_interactive = +gdm-vmwcred
ad_gpo_access_control = permissive
c. Press Control + X.
15. After the VM restarts, reconnect your SSH session and, if necessary, log in.
16. Modify the Horizon Agent file etc/vmware/viewagent-custom.conf, using the following
command.
nano /etc/vmware/viewagent-custom.conf
14
a. Remove the hash “#” preceeding the following 3 lines
SSOUserFormat=[domain]\\[username]
SSODesktopType=UseMATE
OfflineJoinDomain=sssd
b. Press Control + X.
Password: VMware1!
3. Right-click LinuxDT1 and select, Power > Shut Down Guest OS.
4. After the VM completly shuts down, right-click LinuxDT1 and select Clone > Clone to
Virtual Machine....
c. Click NEXT.
a. Select HorizonStorage.
b. For Select Virtual disk format, select Thin Provision from the drop-down menu.
c. Click NEXT.
15
8. Select clone options.
a. Click to select the Customize the operating system and the Power on virtual
machine after creation check boxes.
b. Click NEXT.
b. Click NEXT.
NOTE
The VM restarts twice, as part of the customization process. This process can take more
than 10 minutes to complete.
16
Lab 5 Creating and Entitling Desktop
Pools
Objectives
You create and entitle Windows and Linux manual desktop pools:
Password: VMware1!
a. On the Desktop Pools page, select New Access Group from the Access Groups
drop-down menu.
The New Access Group window opens.
17
a. Select New Access Group from the Access Groups drop-down menu.
7. On the Type page, click Manual Desktop Pool and click Next.
8. On the Machine Source page, verify that vCenter Virtual Machines is selected and click
Next.
9. On the vCenter Server page, verify that sa-vcsa-01.vclass.local is selected and click Next.
10. On the User Assignment page, verify that both Dedicated and Enable Automatic
Assignment are selected, and click Next.
11. On the Desktop Pool Identification page, configure the pool identity settings and then
click Next.
Option Value
ID Payroll-Pool
a. Scroll-down to the setting Allow Users to Restart Machines and select Yes from the
drop-down menu.
13. On the Remote Display Settings page, accept all defaults and click Next.
14. On the Add Virtual Machine page, select DT1 and click Next.
15. On the Advanced Storage Options page, accept all defaults and click Next.
16. On the Ready to Complete page, review the summary and click Submit.
18
1. Return to Horizon Console and, if necessary, log in.
Password: VMware1!
3. Click Payroll-Pool.
5. Click Add.
7. Click the refresh button to display the Win10Opt VM in the machines list.
8. Wait for the Win10Opt status to display as Available before continuing to the next
task.
NOTE
If the status does not change to Available after a few minutes, log in and then log out
the Win10Opt VM.
Password: VMware1!
4. On the Type page, click Manual Desktop Pool and click Next.
5. On the Machine Source page, verify that the vCenter virtual machines is selected and
click Next.
6. On the vCenter Server page, verify that sa-vcsa-01.vclas.local vCenter Server is selected
and click Next.
19
8. On the Desktop Pool Identification page, configure the following pool identity settings
and then click Next.
Option Value
ID Linux-Pool
9. On the Desktop Pool Settings page, select Yes from the Allow Users to Restart Machines
drop-down menu, accept all other defaults, and click Next.
10. On the Remote Display Settings page, accept all default values and click Next.
11. On the Add Virtual Machine page, select LinuxDT1 and click Next.
12. On the Advance Storage Options page, accept all default values and click Next.
13. On the Ready to Complete page, review the summary and click Submit.
Entitlement permits any user in the Horizon Users or Horizon Admins groups to connect to the
desktops. After a connection is made to a desktop, the desktop is dedicated to that user.
1. On the Desktop Pools page, select the check box for the Payroll-Pool row.
2. Entitle the Horizon Admins group and the Horizon Users groups.
b. Click Add.
d. Click Find.
e. Select both the Horizon Admins and the Horizon Users rows and click OK.
g. On the Desktop Pools page, verify that the number 2 appears in the Entitled column
for the Payroll-Pool manual pool.
20
3. Repeat the step to entitle the Linux-Pool for the Horizon Users and Horizon Admins
domain groups.
4. Minimize Firefox.
21
Lab 6 Installing and Using Horizon
Client
Objectives
You install and configure Horizon Client on your STUDENT-A-01 desktop VM and connect to a
desktop:
22
User name: vclass\administrator
Password: VMware1!
c. Click Connect.
Password: VMware1!
8. To return to the previous page, click the < icon in the upper-left corner.
b. Select Apps and Features, and verify that both VMware Horizon Agent and VMware
Tools are installed.
c. Verify that VMware Horizon Agent JMS 64-bit, VMware Horizon Session Manager
64-bit, and VMware Tools Core Service appear as background processes.
b. Select System.
23
c. Scroll down and click Remote desktop, and verify that you are blocked from using
this application.
a. To distinguish between the Horizon Client VM and the VMware Horizon desktop, find
the menu bar at the top of the VMware Horizon desktop window.
b. On the desktop menu bar, click the See more (ellipsis) icon and select Logoff
Desktop.
c. Click OK.
5. To return to the previous page, click the < icon in the upper-left corner.
a. To distinguish between the Horizon Client VM and the VMware Horizon desktop, find
the menu bar at the top of the VMware Horizon desktop window.
b. On the desktop menu bar, click the See more icon (ellipsis) and select Logoff
Desktop.
c. Click OK.
24
Lab 7 Configuring Print and Client
Drive Redirection
Objectives
You configure and verify integrated print and client drive redirection:
Password: VMware1!
3. Click the VMs and Templates icon to go to VMs and Templates view.
4. If it is not already powered on, right-click Win10Opt and select Power > Power On.
6. Verify that the selected Horizon features were installed during VMware Horizon agent
installation.
25
a. In the Start menu search box, enter regedit and press Enter.
c. Verify that the Data value for ClientDriveRedirection and PrintRedir are set to
Local.
d. Close the Registry Editor.
8. Repeat this task for the DT1 VM to verify that the selected Horizon features are installed
during the VMware Horizon agent installation.
a. On the STUDENT-A-01 desktop VM, enter Control Panel in the Start menu
search box, and press Enter.
c. Click Devices and printers and verify that PDF24 is not installed on the VM.
2. Install PDF24.
a. On the STUDENT-A-01 desktop, navigate to the Class Materials and Licenses >
Downloads folder.
e. Install the PDF24 Creator application with all the default settings.
f. If the Setup - PDF24 Creator x.x.x Account creation window opens, click Skip and
click Finish.
3. Open Devices and Printers and set PDF24 PDF as the default printer.
a. On the STUDENT-A-01 desktop VM, enter Control Panel in the Start menu
search box.
b. Select Control Panel.
26
e. Click OK.
Password: VMware1!
9. Verify that PDF24(vdi) is selected as the default printer and click Print.
11. Name the file VirtualPrintSample and save it in the Desktop folder.
12. Click the See more (...) icon on the desktop main menu and select Disconnect.
13. Verify that the VirtualPrintSample file is on the STUDENT-A-01 desktop VM.
a. On the STUDENT-A-01 desktop VM, click the Start menu and enter C:\.
b. Right-click on the file explorer and select New > Text Document.
27
c. Name the file <your_name>.txt.
Password: VMware1!
5. Click the Settings (gear) icon in the upper-right corner of the page.
7. Verify that only the user’s local files are being redirected from the client desktop to the
virtual desktop.
8. Click Add.
11. Click the < icon in the upper-left corner of the settings window to return to the desktop
list.
14. From the navigation pane, expand This PC and then locate and open TestClientDrive on
STUDENT-A-01.
15. Verify that the <your_name>.txt file is present, open it, and verify its content.
16. Add the text Adding content from the client to the <your_name>.txt
file, and then save and close the text file.
20. Click the See more (...) icon in the upper-right corner of the page, click Logoff Desktop,
and click OK.
28
Lab 8 Deploying Instant Clone Pools
Objectives
You create a golden image and deploy instant clone pools:
2. Enable Instant Clone and Authorize a Horizon Console Account for Use by ClonePrep
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
Password: VMware1!
29
7. Name the snapshot Baseline and click CREATE.
1. From the STUDENT-A-01 VM, open the Firefox browser and click the Connection Server
> SA-ConnServ-01 bookmark.
Password: VMware1!
7. From the navigation pane, expand Settings, select Domains, and click the Domain
Accounts tab.
8. Click Add.
Password: VMware1!
10. Verify that vclasss.local and HorizonAdmin appear in the Domain list.
30
Password: VMware1!
5. Verify that Instant Clone and your sa-vcsa-01.vclass.local are selected, and click Next.
7. Click Next.
ID: InstantClone-Pool
Access group: /
12. Under Desktop Pool Sizing, enter 4 in the Maximum Machines text box and click Next.
13. To configure the vCenter Settings, configure the following settings. Keep rest of the
settings to default and click Next.
Golden Image in vCenter: Win10Golden
Snapshot: Baseline
31
Cluster: SA-Compute
Datastores: HorizonStorage
14. From the State drop-down menu, verify that Enabled is selected and click Next.
15. For Allow Session Collaboration, select Enabled and click Next.
17. Select the Entitle Users After Adding Pool check box.
20. Entitle this pool for the Horizon Users and Horizon Admins domain groups.
a. Use the Name/User name text box and the Find button to find and display Horizon
Users and Horizon Admins.
b. Click to select both Horizon Users and Horizon Admins, and click OK.
c. Click OK.
21. Monitor the progress of the instant clone creation in the vSphere Client.
NOTE
32
b. In the vSphere Client, go to the VMs and Templates view and examine the
InstantClone-Pool VM folder and verify that the instant clone VM name
conforms to the VM naming pattern that you selected.
NOTE
The provisioning process can take 20 minutes or more because the golden image
goes through a preparation process. You can ignore error messages unless the
process fails.
c. Monitor instant clone provisioning in the Recent Tasks pane, in the VMs and
Templates view of the vSphere Client.
c. Scroll down to vCenter Server and monitor the Secondary Image progress bar.
Password: VMware1!
Password: VMware1!
33
b. From the navigation pane, expand Inventory and select Desktops.
c. Click Add.
e. Verify that Instant Clone and the [vCenter Server system name] are selected and
click Next.
g. Click Next.
ID: Ubuntu-InstantClone-Pool
Access group: /
e. Click Next.
Snapshot: Baseline
34
Cluster: SA-Compute
Datastores: HorizonStorage
7. Click Next.
8. Click Next.
9. Select vClass.local(HorizonAdmin) from the Domain drop-down menu and click Next.
10. Select the Entitle Users After Adding Pool check box.
13. Entitle this pool for the Horizon Users domain group and click OK.
a. Use the Name/User Name text box and the Find button to locate and display
Horizon Users.
c. Click OK.
14. Use the vSphere Client to review the activity in the ClonePrepReplicaVmFolder
folder.
NOTE
Any activity might take several minutes to start, and you might have to refresh the
vSphere Client several times during this process.
15. Go to the VMs and Templates view and examine the Ubuntu-InstantClone-Pool
VM folder and verify that the instant clone VM name conforms to your VM naming
pattern.
35
NOTE
The provisioning process can take 20 minutes or more because the golden image goes
through a preparation process. You can ignore error messages unless the process fails.
16. Monitor the instant clone provisioning in the vSphere Client in the Recent Tasks pane in
the VMs and Templates view.
Password: VMware1!
c. Scroll down to vCenter Server and monitor the Secondary Image progress bar.
c. Monitor the State of the instant clone pool until it displays as Enabled.
3. Click the Events tab to view the events that occurred during the deployment.
5. Log in to sa-connserv-01.vclass.local.
36
8. Verify that the VMware Horizon desktop is configured correctly.
b. Select Apps and features, and verify that VMware Horizon Agent and VMware Tools
are installed.
Password: VMware1!
NOTE
b. Select Apps and features, and verify that VMware Horizon Agent and VMware Tools
are installed.
3. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.
37
User name: HorizonUserA
Password: VMware1!
38
Lab 9 Managing Instant Clone Pools
Objectives
You update the golden image and push the new image to existing instant clones:
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
Password: VMware1!
5. From the STUDENT-A-01 desktop, open mRemoteNG and connect to the Horizon
Win10Golden VM.
39
c. Double-click the WinSCP-x.xx.x-Setup.exe.
d. Select Install for all users (recommended) and install WinSCP with default settings.
9. After the Win10Golden VM is powered off, right-click it and select Snapshots >Take
Snapshot.
Password: VMware1!
7. Click Finish.
Password: VMware1!
9. Monitor the progress of the instant clone creation in the Recent Tasks pane of the
vSphere Client.
10. To monitor the instant clone creation in more detail, return to Horizon Console and, if
necessary, log in to SA-Connserv-01.
11. From the navigation pane, expand Inventory, select Desktops, and click the
InstantClone-Pool ID link.
40
12. Click the Summary tab, scroll down to vCenter Server and monitor the Secondary Image
status.
13. Record the Snapshot names for the Default Image and the Secondary Image.
15. To view the status of the instant clones, click the Machines (Instant Clone Details) tab.
NOTE
Instant clones are ready when they display the Published status. The provisioning process
can take 40 minutes or more to complete.
16. Monitor the state of the instant clones until their State changes to Available.
1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.
Password: VMware1!
b. Close WinSCP.
41
Lab 10 Creating an Automated RDSH
Farm
Objectives
As part of the process to give users access to applications or RDS desktops, you create an
automated instant clone farm:
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
Password: VMware1!
42
6. Verify that the Remote Desktop Session Host role is installed.
a. Click the Windows Start icon and click the Server Manager tile.
b. From the Server Manager Dashboard, verify that Remote Desktop Services is
running.
You might have to wait for a few minutes for the Remote Desktop Services tile to
appear.
d. Scrolldown to Roles and Features and verify that the Remote Desktop Session Host
is installed.
a. Click Next.
d. For VMware Horizon Instant Clone Agent and Horizon Performance Tracker, select
This feature, and all subfeatures, will be installed on the local hard drive.
e. Click Next.
The Ready to Install the Program page appears.
f. Click Install.
43
h. When prompted, click Yes to restart the RDSHICGolden VM.
5. In the vSphere Client, right-click the RDSHICGolden VM and select Snapshots > Take
Snapshot.
Password: VMware1!
3. Click Add.
5. Verify that Instant Clone and your [vCenter Server system name] are selected and click
Next.
6. Click Next.
a. ID: Marketing-Apps-Farm
c. Access group: /
d. Click Next.
8. Under Load Balancing Settings, accept the default values and click Next.
44
9. Enter the following provisioning settings.
b. Maximum Machines: 3
d. Click Next.
10. Configure the vCenter Server settings and then click Next.
Snapshot: Baseline
Cluster: SA-Compute
Datastores: HorizonStorage
11. Accept all default values on the Guest Customization page and click Next.
14. Monitor the instant clone creation process in the vSphere Client.
Password: VMware1!
45
c. Scroll to vCenter Server and monitor the Secondary Image progress bar.
46
Lab 11 Creating RDSH Application
and Desktop Pools
Objectives
To give users remote access to RDSH desktops and applications, you create desktop and
application pools:
Password: VMware1!
5. From the list of installed applications, select Calculator, Paint, and Notepad.
47
6. Click Next.
7. Accept the default IDs and display names and click Submit.
NOTE
8. Click Add.
9. Use the Name/User Name text box and the Find button to locate and select the Horizon
Admins group, and then click OK.
11. From the navigation pane, expand Inventory and select Applications to display the
Application Pools page.
Password: VMware1!
3. Start Notepad.
NOTE
If you do not see the RDSH applications, log out of Horizon Client and then log back in.
48
1. Return to Horizon Console and, if necessary, log in to SA-Connserv-01.
Password: VMware1!
3. Click Add.
4. On the Type page, click RDS Desktop Pool and click Next.
a. ID: RDS-Desktop-Pool
d. Click Next.
6. Click Next.
8. Select the Entitle Users After Adding Pool check box, review the settings, and click
Submit.
9. Click Add.
10. Use the Name/User Name text box and the Find button to locate and select the Horizon
Admins and Horizon Users groups, and then click OK.
11. Click to select the Horizon Admins and Horizon Users groups and click OK.
49
Password: VMware1!
4. If you do not see Sales Desktop Session, click the Refresh button.
NOTE
The desktop looks and behaves the same as do Horizon desktops that are based on VMs.
Password: VMware1!
6. Expand Monitor > Sessions to view information about the desktop session.
7. Disconnect from the Sales Desktop Session and log off of the Horizon Client session.
Password: VMware1!
b. Click OK.
50
Lab 12 Monitoring VMware Horizon
Objectives
To view the status of VMware Horizon user sessions, you use the VMware Horizon dashboard
and the Help Desk tool:
2. Monitor the Instant Clone Desktop Session with the Help Desk Tool
1. On the STUDENT-A-01 desktop VM, double-click VMware Horizon Client and log in.
Password: VMware1!
Password: VMware1!
Password: VMware1!
51
7. Select Monitor > Dashboard.
b. View the CPU Consumption column and the Memory Consumption column, and
record both values consumed by the connection server.
c. Click the Gateway Servers, Event Database, and TrueSSO tabs to view the details.
10. From the navigation pane, click RDS Farms to review details.
Review the load index value for each of the RDS servers.
12. Click the Datastores, ESX Hosts, and vCenter Servers tabs to view the details.
14. Click the Domains, SAML 2.0, and License Service tabs to view the details.
17. To view additional details, such as current use for the data store, click HorizonStorage
datastore.
19. Under Total Sessions, click VIEW to view desktop session details.
From the Sessions drop-down menu, select Desktops to view the desktop session
details.
From the Sessions drop-down menu, select Applications to view the application
session details.
Task 2: Monitor the Instant Clone Desktop Session with the Help
Desk Tool
You monitor desktops by using the Horizon Help Desk Tool.
52
User name: HorizonAdmin
Password: VMware1!
3. In the User Search text box, enter HorizonUserA, press Enter, and select the
HorizonUserA search result.
4. Click the Sessions tab to view basic information about the active sessions and verify that
the instant clone session displays.
NOTE
The details of the session, such as client information, connection protocol, session
duration, VDI performance display.
d. In the Message text box, enter the message Hello from HelpDesk tool!
and click OK.
e. Return to the instant clone active session, verify the message, and click OK.
a. Select WordPad.
b. Click End Application.
c. Click OK.
9. Return to the instant clone session and verify that WordPad is not running.
53
10. Return to Horizon Console.
The Desktops page shows the pool names and desktop types that have been entitled to
the user.
13. Verify that VMware Blast is the default protocol for the desktop pool.
d. Verify that HorizonUserA logged in and logged out of the VM multiple times.
54
Lab 13 Configuring Horizon
Connection Server
The domain controller system hosts the database for Horizon events. The domain controller
system is already running.
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the vSphere
bookmark.
Password: VMware1!
55
b. If not already powered on, power on SA-ConnServ-01, SA-ConnServ-02, SA-
ConnServ-03, and SA-Connector-01.
1. From the STUDENT-A-01 desktop, open a new Firefox tab and select Connection
Servers > SA-ConnServ-02.
NOTE
If a warning is displayed, follow the instructions to continue past the warning about self-
signed certificates.
Password: VMware1!
3. In the navigation pane, expand Settings and select Product Licensing and Usage.
a. Verify that the license expiration date is later than the ending date of this course.
b. Verify that Desktop License and Application Remoting License are enabled.
1. Return to the Horizon Console for SA-ConnServ-02 and, if necessary, log in.
Password: VMware1!
c. Password: VMware1!
56
d. Enter a description for the vCenter Server instance.
e. Accept the default values for the other settings on this page and click Next.
5. On the Storage page, keep all default settings and click Next.
6. On the Ready to Complete page, review all details and click Submit.
7. On the Servers page, verify that the vCenter Server instance is listed.
1. Return to the Horizon Console for SA-ConnServ-02 and, if necessary, log in.
Password: VMware1!
3. Click Edit, configure access to the event database, and then click OK.
Port: 1433
User Name: sa
Password: VMware1!
57
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-03 VM.
2. On the desktop, double-click the Class Materials and Licenses shortcut to the following
folder.
\\dc\materials
3. Navigate to Downloads > Horizon 8.8 (2212) folder.
f. On the Installation Options page, configure the following settings and click Next >.
i. On the Ready to Install the Program page, click Install and wait for the installation
process to complete.
j. Click Finish.
58
a. Open the Firefox browser and go to https://localhost/admin/#/login to
access Horizon Console.
Password: VMware1!
59
Lab 14 Navigating AD LDS
Databases
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the Connection
Server > SA-ConnServ-01 bookmark.
Password: VMware1!
60
The Backup Now window opens.
The Manual backup in progress message displays in the Last Backup column
until the backup is complete.
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-01 VM.
2. Click Start and enter adsi edit in the Search text box.
d. Click OK to connect.
1. From the ADSI Edit window, expand Horizon AD LDS DB in the navigation pane.
61
a. Click OU=Server Groups.
b. Double-click each entry and review the attribute information, such as display name,
descriptions, and default protocol.
a. Click OU=Servers.
One entry per VMware Horizon VM displays, regardless of which pool they belong to.
b. Double-click one of the entries and review the attributes, such as distinguished name
and name.
a. Click CN=Roles.
This page displays one entry per role. The roles are administrators, users, and
readers.
b. Double-click CN=Administrators.
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the SA-ConnServ-
02.
62
4. Select the Connection Servers tab.
The Manual backup in progress message displays in the Last Backup column
until the backup is complete.
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-02 VM.
2. Click Start and enter adsi edit in the Search text box.
d. Click OK to connect.
1. In the ADSI Edit window, expand Horizon AD LDS DB in the navigation pane.
63
2. Double-click the DC=vdi,dc=vmware,dc=int folder.
a. Click CN=Roles.
One entry per role displays. The roles are administrators, users, and readers.
b. Double-click CN=Administrators.
64
Lab 15 Configuring a Unified Access
Gateway Appliance
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
Client-03 VM.
NOTE
You must include the dot that comes before the backslash (.\) in the User name.
Client-03 is not a member of a domain.
ping 172.20.10.21
The ping is unsuccessful.
65
4. Ping the Unified Access Gateway to verify connectivity.
b. Click Security.
c. From the drop-down, select the Do not verify server identity certificates.
9. For the name of the connection server, enter the IP address 10.0.0.85 and click
Connect.
10. The connection fails to complete. After a minute, cancel the connection and close Horizon
Client.
a. From the STUDENT-A-01 desktop, open the Firefox browser and click the
Connectionn Server > SA-ConnServ-01 bookmark.
Password: VMware1!
c. To the left of the URL, click the site information icon (lock) and click the angle bracket
(>) to the right of Connection Secure.
2. To access the Unified Access Gateway administrator, on the Firefox Favorites bar, right-
click the Unified Access Gateway bookmark and select Open in new tab.
66
3. If a security warning appears, permit the website to be accessed.
Password: VMware1!
c. Connection Server URL Thumbprint: Enter sha1= and paste the fingerprint that you
copied in the earlier step.
7. Click Save.
8. Return to the Horizon console for Connection Server 01 and, log in:
Password: VMware1!
c. Click Edit.
67
d. Select the Do not use Blast Secure Gateway.
e. Click OK.
1. From the STUDENT-A-01 desktop, return to the mRemoteNG connection to the Horizon
SA-Client-03 VM.
4. For the name of the connection server, enter the IP address 10.0.0.85 and click
Connect.
Password: VMware1!
9. From the Horizon Menu bar, click Options and select Log off Desktop.
10. From the VMware Horizon Client, reconnect to Horizon Connection Server at
10.0.0.85 and if necessary, log in:
User name: HorizonUserA
Password: VMware1!
11. Right-click Instant Clone Desktop Pool and select VMware Blast.
12. To verify that the Blast protocol can be used with the Unified Access Gateway, connect to
the Instant Clone Desktop pool as HorizonUserA.
68
Lab 16 Creating an Internal CA
Signed Certificate for VMware
Horizon Servers
1. Create and Publish a Certificate Template for Horizon Connection Server Certificates
2. Request and Configure a New Certificate for a Horizon Connection Server Instance
2. Enter mmc.exe in the Start menu search box and click mmc.exe.
69
d. Click OK.
b. From the Certificate Authority drop-down menu, select Windows Server 2008 R2.
c. Click OK.
d. From the Certificate recipient drop-down menu, select Windows 7 / Server 2008
R2.
e. Click OK.
8. In the Properties of New Template window, click the General tab and configure the
settings.
a. Click Add....
f. Click Add....
70
h. Click OK.
j. From the Permissions for Authenticated Users list, verify that Allow is selected for
Read permission.
l. Click Apply.
11. On the Security tab, repeat the previous substeps to allow Read and Enroll permissions
for sa-connserv-02 and sa-connserv-03 .
13. From the navigation pane, expand Certificate authority > vclass-DC-CA.
14. Right-click Certificate templates and select New > Certificate Template to Issue.
b. Click OK.
1. From the STUDENT-A-01 desktop, open an mRemoteNG connection to the Horizon SA-
ConnServ-02 VM.
2. Enter mmc.exe in the Start menu search box and double-click mmc.exe.
d. Click OK.
71
6. Expand Personal and click Certificates.
8. On the General tab, change the Friendly name to vdm.old and click OK.
9. From the navigation pane, right-click Certificates and select All Tasks > Request New
Certificate.
11. Verify that Active Directory Enrollment Policy is selected and click Next.
c. Click Properties.
When you repeat this task for sa-connserv-03, verify that the subject name is sa-
connserv-03.vclass.local.
c. Click Add.
NOTE
You can have an Alternative name in your certificate properties. In this step, the
asterisk is used to make the Alternative name Value a wildcard.
f. Click Add.
14. Click the General tab and configure the settings.
This Friendly name is a keyword that informs VMware Horizon to use this certificate.
72
Leave all other default settings.
You must perform this entire task once for sa-connserv-02, and then again for sa-
connserv-03.
2. Enter view local services in the Start menu search box and double-click View
local services to open it.
3. Right-click the VMware Horizon View Connection Server service and select Restart.
Before you proceed to the next step, you must wait for 5 minutes till the Horizon
Connection Server service restarts.
b. Go to https://sa-connserv-02.vclass.local/admin/#/login to
open Horizon console.
Password: VMware1!
73
7. In the navigation pane, click Dashboard and click VIEW under System Health to review
the System Health information.
74
Lab 17 Configuring Cloud Pod
Architecture
1. From the STUDENT-A-01 desktop, open the Firefox browser and click the Connection
Server > SA-ConnServ-01 bookmark.
Password: VMware1!
75
6. Select all the listed entitlements.
1. Return to Horizon Console for Connection Server 01 and, if necessary, log in.
Password: VMware1!
2. From the navigation pane, expand Settings and select Cloud Pod Architecture.
4. Click Initialize to confirm the process and wait for the process to complete.
1. From the STUDENT-A-01 desktop, open the Firefox browser and select Connection
Servers > SA-ConnServ-02.
Password:VMware1!
3. From the navigation pane, expand Settings and select Cloud Pod Architecture.
c. Password: VMware1!
76
d. Click Join and wait for the process to complete.
1. Return to Horizon Console for Connection Server 01 and, if necessary, log in.
Password: VMware1!
2. From the navigation pane, expand Inventory and select Global Entitlements.
3. Click Add.
9. Click the Allow Users to Choose Protocol drop-down menu, and select Yes.
13. In the Name/Username text box, enter HorizonUserA and click Find.
Password: VMware1!
77
2. From the navigation pane, expand Inventory and select Global Entitlements.
5. Click Add.
6. Select Linux-Pool.
7. Click Add.
Password: VMware1!
You get a Connection Failed error message stating that the user is not entitled
to use the system. SA-CONNSERV-02 has no local pools and Horizon User B is not a
member of the global entitlement.
4. Log in as HorizonUserA.
Password: VMware1!
a. Right-click the Marketing Global Desktop pool and select VMware Blast as the
display protocol.
NOTE
78
Lab 18 Integrating Workspace ONE
Access with VMware Horizon
1. From the STUDENT-A-01 desktop, open the Firefox browser and select Connection
Servers > SA-ConnServ-01.
Password: VMware1!
4. Click the Connection Servers tab, click to select the SA-CONNSERV-01 server, and click
Edit.
79
6. Change Delegation of authentication to VMware Horizon (SAML 2.0 Authenticator) to
Allowed.
IMPORTANT
The setting does not enable the SAML-only mode. The SAML-only mode is enabled by
setting it to Required.
a. Click Add.
d. In the Metadata URL text box, replace <YOUR SAML AUTHENTICATOR NAME>
with sa-vidm-01.vclass.local.
IMPORTANT
The Metadata URL text box is prepopulated. Do not completely erase the URL, but edit it.
9. Click OK.
1. Return to the Horizon Console for Connection Server 01 and, if necessary, log in.
Password: VMware1!
2. From the navigation pane, select Users and Groups.
80
4. Configure the following settings.
Domain: vclass.local
5. Click Find.
You now have one virtual desktop entitlement for the WSO User domain account.
The Users and Groups page displays the [email protected] entry with 1 Desktop
Entitlement.
1. Return to the Horizon Console for Connection Server 01 and, if necessary, log in.
Password: VMware1!
3. From the Add drop-down menu, select Add from Installed Applications.
c. Paint: Select.
d. Notepad: Select.
e. Click Next.
5. Accept the default application ID naming and click Submit.
6. Click Add.
81
The Find User or Group page appears.
b. Click Find.
d. Click OK.
8. Click OK and verify that the applications added are listed in the Application Pools.
1. From the STUDENT-A-01 desktop, open Firefox browser and click the vSphere
bookmark.
The vCenter Single Sign-On page appears.
Password: VMware1!
a. Click Yes.
5. In the Firefox browser, open a new tab and click the WorkspaceONE bookmark, and
select VMware Workspace ONE.
6. From the Select your domain drop-down menu, select System Domain.
8. Click Next.
82
12. Scroll-down and click GET STARTED.
a. Name: Horizon
c. Click Next.
d. Password: VMware1!
f. Click Next.
17. Review the configuration summary and click SAVE & CONFIGURE.
A message appears, stating that Collection 'Horizon' has been added successfully.
19. To run an initial synchronization, click the Overview tab and select Sync without
safeguards from the Sync drop-down menu.
20. Click Virtual Apps Collection from the left navigation pane.
83
23. Click the i icon beside Completed to view the Sync Action Summary page, showing the
added Applications, Desktop, and Assignment.
24. Log out from the VMware Workspace ONE management console.
b. Click Logout.
a. From the STUDENT-A-01 desktop, open Firefox browser and click the Workspace
bookmark and select VMware Workspace ONE.
c. Click Next.
2. Log in.
Password: VMware1!
You see the VMware Horizon virtual applications synced to the catalog.
6. Click the Unity Touch Sidebar to open the application and click Notepad.
9. Select Logout.
10. Select OK.
84
85
Answer Key
86