Using HTML Access VMware Horizon HTML Access 4.3 VMware Horizon 7 7.0.
Using HTML Access You can find the most up-to-date technical documentation on the VMware Web site at: https://docs.vmware.com/ The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: docfeedback@vmware.com Copyright © 2013–2016 VMware, Inc. All rights reserved. Copyright and trademark information. VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com 2 VMware, Inc.
Contents Using HTML Access 5 1 Setup and Installation 7 System Requirements for HTML Access 7 Preparing View Connection Server and Security Servers for HTML Access 9 Firewall Rules for HTML Access 10 Configure View to Remove Credentials From Cache 11 Prepare Desktops, Pools, and Farms for HTML Access 11 Configure HTML Access Agents to Use New SSL Certificates 13 Add the Certificate Snap-In to MMC on a View Desktop 13 Import a Certificate for the HTML Access Agent into the Windows Certificate Store Import
Using HTML Access Transferring Files Between the Client and a Remote Desktop 41 Download Files from a Desktop to the Client 41 Upload Files from the Client to a Desktop 42 Using the Real-Time Audio-Video Feature for Webcams and Microphones 42 Log Off or Disconnect 43 Reset a Remote Desktop or Application 43 Index 4 45 VMware, Inc.
Using HTML Access This guide, Using HTML Access, provides information about installing and using the HTML Access feature of VMware Horizon™ 7 to connect to virtual desktops without having to install any software on a client system. The information in this document includes system requirements and instructions for installing HTML Access software on a View server and in a remote desktop virtual machine so that end users can use a Web browser to access remote desktops.
Using HTML Access 6 VMware, Inc.
1 Setup and Installation Setting up a View deployment for HTML Access involves installing HTML Access on View Connection Server, opening the required ports, and installing the HTML Access component in the remote desktop virtual machine. End users can then access their remote desktops by opening a supported browser and entering the URL for View Connection Server.
Using HTML Access Client operating systems Browser Version Firefox 49, 50 Microsoft Edge 25, 38 Operating System Version Windows 7 SP1 (32- and 64-bit) Windows 8.x (32- and 64-bit) Windows 10 (32- and 64-bit) Mac OS X 10.11 (El Capitan) macOS 10.12.x (Sierra) iOS 9 iOS 10 Chrome OS 28.x and later Remote desktops HTML Access requires Horizon Agent 7.0 or later, and supports all the desktop operating systems that Horizon 7.0 supports.
Chapter 1 Setup and Installation n Display protocol for View Remote desktop virtual machines: inbound traffic (from servers) to TCP port 22443. VMware Blast When you use a Web browser to access a remote desktop, the VMware Blast protocol is used rather than PCoIP or Microsoft RDP. VMware Blast uses HTTPS (HTTP over SSL/TLS).
Using HTML Access of the secure tunnel external URL and the default port number, 8443. The URL must contain the FQDN and port number that a client system can use to reach this View Connection Server host or security server host. For more information, see "Set the External URLs for a View Connection Server Instance," in the View Installation documentation. Note You can use HTML Access in conjunction with VMware Workspace Portal to allow users to connect to their desktops from an HTML5 browser.
Chapter 1 Setup and Installation Configure View to Remove Credentials From Cache You can configure View to remove a user's credentials from cache when a user closes a tab that connects to a remote desktop or application, or closes a tab that connects to the desktop and application selection page, in the HTML Access client. When this feature is disabled (the default setting), the credentials remain in cache.
Using HTML Access n Familiarize yourself with the procedures for creating pools and farms and entitling users. See the topics about creating pools and farms in Setting Up Desktops and Applications in View. n To verify that the remote desktop or application is accessible to end users, verify that you have Horizon Client software installed on a client system. You will test the connection by using the Horizon Client software before attempting to connect from a browser.
Chapter 1 Setup and Installation Configure HTML Access Agents to Use New SSL Certificates To comply with industry or security regulations, you can replace the default SSL certificates that are generated by the HTML Access Agent with certificates that are signed by a Certificate Authority (CA). When you install the HTML Access Agent on View desktops, the HTML Access Agent service creates default, self-signed certificates.
Using HTML Access 3 In the Add or Remove Snap-ins window, select Certificates and click Add. 4 In the Certificates snap-in window, select Computer account, click Next, select Local computer, and click Finish. 5 In the Add or Remove snap-in window, click OK. What to do next Import the SSL certificate into the Windows local computer certificate store. See “Import a Certificate for the HTML Access Agent into the Windows Certificate Store,” on page 14.
Chapter 1 Setup and Installation Import Root and Intermediate Certificates for the HTML Access Agent If the root certificate and intermediate certificates in the certificate chain are not imported with the SSL certificate that you imported for the HTML Access Agent, you must import these certificates into the Windows local computer certificate store.
Using HTML Access 4 Copy the selected thumbprint to a text file. For example: 31 2a 32 50 1a 0b 34 b1 65 46 13 a8 0a 5e f7 43 6e a9 2c 3e Note When you copy the thumbprint, do not to include the leading space. If you inadvertently paste the leading space with the thumbprint into the registry key (in Step 7), the certificate might not be configured successfully. This problem can occur even though the leading space is not displayed in the registry value text box.
Chapter 1 Setup and Installation Upgrading the HTML Access Software For most versions of HTML Access, upgrading involves simply upgrading Connection Servers and View Agent. When you upgrade HTML Access, make sure that the corresponding version of View Connection Server is installed on all the instances in a replicated group. When you upgrade Connection Server, HTML Access is automatically installed or upgraded.
Using HTML Access Table 1‑2. Client Data Collected for the Customer Experience Improvement Program (Continued) Description Field name Is This Field Made Anonymous ? Client binary architecture No Examples include the following values: n browser n arm Native architecture of the browser No Examples include the following values: n Win32 n Win64 n MacIntel n iPad Browser user agent string No Examples include the following values: n Mozilla/5.
Configuring HTML Access for End Users 2 You can change the appearance of the Web page that end users see when they enter the URL for HTML Access. You can also set group policies that control the image quality, the ports used, and other settings.
Using HTML Access You can make installer links for specific client operating systems in either the portal-links-htmlaccess.properties or oslinks.properties file. For example, if you browse to the portal page from a Mac OS X system, the link for the native Mac OS X installer appears. For Windows or Linux clients, you can make separate links for 32-bit and 64-bit installers. Important If you upgraded from View Connection Server 5.
Chapter 2 Configuring HTML Access for End Users Option Property Setting Create links for specific installers The following examples show full URLs, but you can use relative URLs if you place the installer files in the downloads directory, which is under the C:\Program Files\VMware\VMware View\Server\broker\webapps\ directory on View Connection Server, as described in the next step. n General link to download installer: n link.download=https://server/downloads 32-bit Windows installer: n link.
Using HTML Access Using URIs to Configure HTML Access Web Clients Using uniform resource identifiers (URIs), you can create a Web page or an email with links that end users click to launch the HTML Access Web client, connect to View Connection Server, and launch a specific desktop or application with specific configuration options. You can simplify the process of connecting to a remote desktop or application by creating Web or email links for end users.
Chapter 2 Configuring HTML Access for End Users n In the query part, non-ASCII characters must first be encoded according to UTF-8 [STD63], and then each octet of the corresponding UTF-8 sequence must be percent-encoded to be represented as URI characters. For information about encoding for ASCII characters, see the URL encoding reference at http://www.utf8-chartable.de/. Supported Queries This topic lists the queries that are supported for the HTML Access Web client.
Using HTML Access Table 2‑1. Values That Can Be Used With the action Query (Continued) Value Description reset Shuts down and restarts the specified desktop. Unsaved data is lost. Resetting a remote desktop is the equivalent of pressing the Reset button on a physical PC. This action is not valid for an application. logoff Logs the user out of the guest operating system in the remote desktop. This action is not valid for an application.
Chapter 2 Configuring HTML Access for End Users Opens My Notepad++ on server 10.10.10.10 and passes the argument My new file.txt in the application launch command. The filename is enclosed in double quotes because it contains spaces. 8 vmware-view://10.10.10.10/Notepad++%2012?args=a.txt%20b.txt Opens Notepad++ 12 on server 10.10.10.10 and passes the argument a.text b.txt in the application launch command.
Using HTML Access 26 VMware, Inc.
Using a Remote Desktop or Application 3 The client provides a navigation sidebar with toolbar buttons so that you can easily disconnect from a remote desktop or application or use a button click to send the equivalent of the Ctrl+Alt+Delete key combination.
Using HTML Access Feature Support Matrix When you access a remote desktop or application from the browser-based HTML Access client, some features are not available. Feature Support for Single-User Virtual Machine Desktops Table 3‑1. Features Supported Through HTML Access Windows 10 Desktop Windows Server 2008 R2 Desktop Windows Server 2012 R2 Desktop Windows Server 2016 Desktop Feature Windows 7 Desktop Windows 8.
Chapter 3 Using a Remote Desktop or Application Table 3‑2. Features Supported for HTML Access to RDS Hosts with View Agent 6.1.1 or Later, or Horizon Agent 7.0 or Later, Installed (Continued) Windows Server 2008 R2 RDS Host Windows Server 2012 or 2012 R2 RDS Host VMware Blast display protocol X X Horizon Agent 7.0.2 and later Location-based printing X (virtual machine only) X (virtual machine only) Horizon Agent 7.0.2 and later (virtual machine only) Real-Time Audio-Video (RTAV) Horizon Agent 7.
Using HTML Access 4 If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials, enter the next generated number on the token. Do not enter your PIN and do not enter the same generated number entered previously. If necessary, wait until a new number is generated. If this step is required, it is required only when you mistype the first passcode or when configuration settings in the RSA server change.
Chapter 3 Using a Remote Desktop or Application 2 Accept the security certificate. Each browser has its own browser-specific prompts for accepting or always trusting a certificate. For example, in a Chrome browser, you can click the Advanced link on the browser page, and click Proceed to server-name (unsafe). In a Safari browser, use the following procedure to permanently trust the certificate. a Click the Show Certificate button when the untrusted certificate dialog box appears.
Using HTML Access These key combinations do not work for remote applications provided by RDS hosts. They do work as listed for Windows Server 2008 R2 and Windows Server 2012 R2 single-user desktops and session-based desktops provided by an RDS host. Some key combinations that work in remote desktops with a Windows 8.x or Windows Server 2012 R2 operating system do not work in remote desktops with a Windows 7, Windows Server 2008 R2, or Windows 10 operating system. Table 3‑3.
Chapter 3 Using a Remote Desktop or Application Table 3‑4. Windows Key Shortcuts for Windows 8.x and Windows Server 2012 R2 Remote Desktops (Continued) Keys Action Limitations Win+S Open the Search charm to search Windows and the Web. Win+X Open the Quick Link menu. Win+Z Show the commands available in the app. Win+, (comma) Temporarily display the desktop, as long as you continue pressing the keys. Note Does not work on Windows 2012 R2 operating systems.
Using HTML Access Table 3‑5. Windows Key Shortcuts for Windows 7 and Windows Server 2008 R2 Remote Desktops (Continued) Keys Action Limitations Win+Right Arrow Maximize the app or desktop window to the right side of the screen. Does not work on a Chromebook. Win+Home Minimize all but the active desktop window. Does not work in Safari browsers. Win+Shift+Up Arrow Stretch the desktop window to the top and bottom of the screen. Does not work on a Chromebook.
Chapter 3 Using a Remote Desktop or Application n The shared hardware-accelerated graphics feature (vSGA), available with vSphere 5.1 or later, allows you to use 3D applications for design, modeling, and multimedia. This feature requires 64MB to 512MB of VRAM. The default is 96MB. n The dedicated hardware-accelerated graphics feature (vDGA), available with vSphere 5.5 or later, dedicates a single physical GPU (graphical processing unit) on an ESXi host to a single virtual machine.
Using HTML Access Using the Sidebar After you connect to a remote desktop or hosted application, you can use the sidebar to launch other applications and desktops, switch between running desktops and applications, and perform other actions. When you access a remote application or desktop, the sidebar appears on the left side of the screen. Click the sidebar tab to display or hide the sidebar. You can also slide the tab up and down. 36 VMware, Inc.
Chapter 3 Using a Remote Desktop or Application Figure 3‑1. Sidebar That Appears When You Launch a Remote Desktop or Application VMware, Inc.
Using HTML Access Click the expander arrow next to a running application to see the list of documents opened from that application. Note, however, that if you have, for example, two Excel documents open from separate Excel programs hosted on two different servers, the Excel application will be listed twice in Running list in the sidebar. From the sidebar, you can perform several actions. Table 3‑7.
Chapter 3 Using a Remote Desktop or Application Table 3‑7. Sidebar Actions (Continued) Action Procedure Reset all running applications Click the Open Menu toolbar button at the top of the sidebar, click Settings, and click Reset all your running applications. All unsaved changes are lost. Use key combinations that include the Windows key Click the Open Menu toolbar button at the top of the sidebar, click Settings, and turn on Enable Windows Key for Desktops.
Using HTML Access You can copy up to 1MB of text, including any Unicode non-ASCII characters. You can copy text from your client system to a remote desktop or application, or the reverse, but the pasted text is plain text. You cannot copy and paste graphics. You also cannot copy and paste files between a remote desktop and the file system on your client computer. Note The copy and paste feature is not supported on iOS Safari.
Chapter 3 Using a Remote Desktop or Application n To copy text from your remote desktop or application to your client system: a Copy the text in your remote application. b In your browser, click the HTML Access sidebar tab to open the sidebar, and click Copy & Paste at the top of the sidebar. The Copy & Paste window appears with the text already pasted in it. The following message appears briefly: "Remote Clipboard Synced.
Using HTML Access Upload Files from the Client to a Desktop With Horizon Client you can upload files from the client machine to a remote desktop. Procedure 1 Click the file transfer icon at the top of the sidebar. The Transfer Files window opens. 2 Click Upload. 3 Drag and drop files into the Transfer Files window or click Choose Files to select files. The selected files are uploaded to the My Documents folder.
Chapter 3 Using a Remote Desktop or Application Log Off or Disconnect With some configurations, if you disconnect from a remote desktop without logging off, applications in the desktop can remain open. You can also disconnect from a server and leave remote applications running. Procedure n n n Log out of the View server and disconnect from (but do not log out from) the desktop or quit the hosted application.
Using HTML Access Procedure u Use the Reset command. Option Action Reset applications from the application selector screen From the desktop and application selector screen, before connecting to a remote desktop or application, to reset all running applications, click the Settings toolbar button in the upper-right corner of the screen, anc click Reset.
Index B Blast Agent 11 C certificates, setting the thumbprint in the Windows registry 15 cipher suites, configuring for HTML Access Agents 16 clearing credentials cache 11 configuration settings 19 copy text 40 copying text 39 Ctrl+Alt+Delete 31 customer experience program, desktop pool data 17 D desktop log off from 43 reset 43 disconnecting from a remote desktop 43 download files from a desktop to the client 41 downloading files 41 F feature support matrix 28 firewall rules, HTML Access 10 H H.
Using HTML Access U uninstall HTML Access 17 upload files from a desktop to the client 42 uploading files 41 URI examples 24 URI syntax for HTML Access web clients 22 URIs (uniform resource identifiers) 22 V video RAM 34 View Connection Server 9 W Web client, system requirements for HTML Access 7 Web Portal 19 webcam 42 Windows Certificate Store, importing a certificate for the HTML Access Agent 14 46 VMware, Inc.
