Administration Guide
View Manager 3.0.1
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com
2 VMware, Inc.
View Manager Administration Guide
You can find the most up-to-date technical documentation on the VMware Web site at:
/>The VMware Web site also provides the latest product updates.
If you have comments about this documentation, submit your feedback to:
© 2008–2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international
copyright and intellectual property laws. VMware products are covered by one or more patents
listed at />VMware, the VMware “boxes” logo and design, Virtual SMP, and VMotion are registered trademarks or
trademarks of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names
mentioned herein may be trademarks of their respective companies.
Administration Guide
Item: EN-000083-01
VMware, Inc. 3
Contents
AboutThisBook 9
1 Introduction 11
OverviewofViewManager 11
ViewManagerFeatures 12
ViewManagerComponents 14
SystemRequirements 14
ViewConnectionServer 15
SupportedOperatingSystems 15
Prerequisites 15
RSAAuthenticationManager 16
OperatingSystemSupportforInstalledComponents 16
OperatingSystemSupportforWebComponents 18
ViewAgent 18
ViewComposer 18
VolumeLicensingandWindowsVistaUltimate 19
ViewClient/ViewClientwithOfflineDesktop 19
RemoteDesktopConnection 19
ViewClientwithOfflineDesktop:ProductCompatibility 19
ViewClientwithOfflineDesktop:SupportedGuests 20
ViewClientandViewClientwithOfflineDesktop:MMR 20
ViewPortal 20
MacOperatingSystemSupport 21
USBSupport 21
VirtualPrinting 21
ViewComposer 21
SQL 21
View Manager Administration Guide
4 VMware, Inc.
2 Installation 23
OverviewofViewConnectionServer 24
ViewConnectionServerInstances 24
ViewLDAP 25
PreparingforInstallation 25
StandardServerInstallation 26
ReplicaServerInstallation 27
SecurityServerInstallation 29
FirewallConfiguration 32
ExternalURL 34
OfflineDesktop 35
RDP 35
VirtualCenterPermissionsforViewManagerUsers 36
InitialViewManagerConfiguration 36
ViewConnectionServerBackup 38
3 ViewAdministrator 41
OverviewofViewAdministrator 41
DesktopsandPoolsView 42
ConfigurationView 45
EventsView 47
4 VirtualDesktopDeployment 49
OverviewofVirtualDesktopDeployment 50
DesktopSources 50
DesktopDeliveryModels 51
PreparingtheGuestSystem 52
InstallingtheViewAgentontheGuestSystem 52
UsingtheViewAgentonVirtualMachineswithMultipleNICs 53
IndividualDesktops 54
DeployinganIndividualDesktop 54
AutomatedDesktopPools 56
VirtualMachineTemplates 56
CustomizationSpecifications 57
DeployinganAutomatedDesktopPool 58
ManualDesktopPools 62
DeployingaManualDesktopPool
63
EntitlingaDesktoporPool 65
VMware, Inc. 5
Contents
SearchingDesktopsandEntitledUsersandGroups 65
WorkingwithActiveSessions 67
DisablingViewManagerandDeletingObjects 67
DeletingViewManagerObjects 68
5 ClientManagement 69
ViewClientandViewPortal 70
ViewClientPolicies 71
ClientConnectionsfromtheInternet 71
OverviewofClientConnections 72
Generatinglocked.propertiesAutomatically 74
Configuringlocked.properties 74
CreatingSSLServerCertificates 75
CreatinganSSLCertificate 77
ValidatingtheSSLCertificate 78
UsingExistingSSLCertificates 81
ExportingfromMicrosoftIISServer 81
SmartCardAuthentication 82
SmartCardHardware 82
ObtainingaRootCertificate 83
ExportingaRootCertificatefromaUs
erCertificate 83
TrustHierarchies 84
AddingaRootCertificatetoTrustedRootsonActiveDirectory 84
CreatingaTruststore 85
EnablingSmartCardAuthenticationontheServer 86
ConfiguringaStandardorReplicaServer 87
ConfiguringUserProfiles 87
RSASecurIDAuthentication 88
ViewClientCommandLineOptions 89
VirtualPrinting 90
6 ViewComposer 93
OverviewofViewComposer 93
LinkedCloneDesktopDiskUsage 95
StorageOvercommit 96
DesktopRecomposition 96
SourceVirtualMachine 97
DesktopRefresh 98
DesktopRebalance 98
View Manager Administration Guide
6 VMware, Inc.
PersistentandNon‐PersistentDesktops 101
QuickPrep 102
PreparingVirtualCenterforViewComposer 102
AddingtheViewComposerServicetoVirtualCenter 103
DomainUserforViewComposer 103
VirtualCenterUserPermissions 104
LocalSystemAdministrator 104
CreatingaDatabaseandDSNforLinkedCloneDesktops 104
PreparingaParentVM 106
DHCPLeaseRemoval 107
InstallingtheViewAgentontheParentVM 107
CreatingaParentVMSnapshot
108
DeployingLinkedCloneDesktopsfromViewManager 108
Refreshing,Recomposing,andRebalancingLinkedCloneDesktops 116
UsinganExistingLinkedCloneDesktopDatabase 120
7 OfflineDesktop 123
OverviewofOfflineDesktop 123
OfflineDesktopLicensingandVirtualCenterAccess 126
Storage,Communications,andSecurity 126
TunneledCommunicationsandSSL 127
OfflineDesktopPolicies 128
SupportedDesktopTypes 128
AdditionalConsiderations 128
ViewClientwithOfflineDesktop 129
CheckingOutaDesktop 131
OfflineDesktopStatus 131
ClientConnection 132
RemovingAccess 133
RollingBackaDesktop 133
8 ComponentPolicies 135
PowerPolicy 135
PowerPolicyinAutomatedPools 137
PowerPolicyExample1137
PowerPolicyExample2138
PowerPolicyExample3138
ClientPolicies 139
ConfiguringandApplyingClientPolicies 140
VMware, Inc. 7
Contents
GroupPolicyObjects 142
ApplicationofGroupPolicies 143
ComputerConfigurationGPO 143
ViewAgentConfiguration 144
ViewClientConfiguration 145
ViewCommonConfiguration 147
ViewServerConfiguration 148
UserConfigurationGPO 148
ViewAgentConfiguration 148
ViewClientConfiguration 149
9 UnifiedAccess 155
PrepareMultipleBack‐EndMachinestoAccessRemoteDesktops 156
DesktopParameters 156
InstallViewAgentonanUnmanagedDesktopSource 158
AddandChangeDesktopSources 159
EnableorDisableaDesktop 163
EntitleUsersandGroupstoaDesktop 163
AddorRemoveaDesktopSource 163
ChangeanIndividualDesktopSource 164
DeleteaDesktop 165
UnregisteraDesktopSource 165
10 Troubleshooting 167
CollectingViewManagerDiagnosticInformation 167
UsingtheViewManagerSupportTooltoCollectDiagnosticInformation 168
UsingtheViewManagerSupportScripttoCollectDiagnosticInformation 168
ViewComposerSupport 169
UpdatingSupportRequests 170
FurtherTroubleshootingInformation 171
Glossary 173
Index 177
View Manager Administration Guide
8 VMware, Inc.
VMware, Inc. 9
Thisguidedescribeshowtoinstall,configure,anduseVMware
®
ViewManager,
includinghowtoinstallthevarioussoftwarecomponents,howtodeployservers,and
howtoconfigureandconnecttovirtualdesktops.Italsodescribeshowtosetupload
balancingandsecurity,supportedoperatingsystems,andthinclientdevices.
Thischapterincludesthesetopics:
“IntendedAudience”onpage 9
“DocumentFeedback”onpage 9
“TechnicalSupportandEducationResources”onpage 10
Intended Audience
Thisbookisintendedforanyonewhowantstoinstall,administrate,orconfigure
View Manager.TheinformationinthismanualiswrittenforexperiencedWindowsor
Linuxsystemadministratorswhoarefamiliarwithvirtualmachinetechnologyand
datacenteroperations.
Document Feedback
VMwarewelcomesyoursuggestionsforimprovingourdocumentation.Ifyouhave
comments,sendyourfeedbackto
About This Book
View Manager Administration Guide
10 VMware, Inc.
Technical Support and Education Resources
Thefollowingsectionsdescribethetechnicalsupportresourcesavailabletoyou.
To accessthecurrentversionofthisbookandotherbooks,goto
/>Online and Telephone Support
Touseonlinesupporttosubmittechnicalsupportrequests,viewyourproductand
contractinformation,andregisteryourproducts,goto
/>Customerswithappropriatesupportcontractsshouldusetelephonesupportforthe
fastestresponseonpriority1issues.Goto
/>Support Offerings
FindouthowVMwaresupportofferingscanhelpmeetyourbusinessneeds.Goto
/>VMware Professional Services
VMwareEducationServicescoursesofferextensivehands‐onlabs,casestudy
examples,andcoursematerialsdesignedtobeusedason‐the‐jobreferencetools.
Coursesareavailableonsite,intheclassroom,andliv eonline.Foronsitepilot
programs andimplementationbestpractices,VMwareConsultingServicesprovides
offeringsto helpyouassess,plan,build,andmanageyo
urvirtualenvironment.
To accessinformationabouteducationclasses,certificationprograms,andconsulting
services,goto />VMware, Inc. 11
1
ViewManager3.0.1isaflexibleandintuitivedesktopmanagementsolutionthat
enablessystemadministratorstorapidlyprovisiondesktopsandcontroluseraccess.
ClientsoftwareconnectsuserstovirtualdesktopsrunningonVMwareVirtual
Infrastructure,ortophysicalsystemsrunningwithinyournetworkenvironment.
Thischapterprovidesabriefoverviewofthefeaturesof
feredbyViewManagerand
describesthesystemrequirementsforinstallingandrunningthesoftwarecomponents
associatedwiththisapplication.
Thischapterdiscussesthefollowingtopics:
“OverviewofViewManager”onpage 11
“ViewManagerComponents”onpage 14
“SystemRequirements”onpage 14
Overview of View Manager
ViewManagerintegrateswithVMwareVirtualCenterinordertoallowadministrators
tocreatedesktopsfromvirtualmachinesrunningonVMwareESXserverandthen
deploythemtoend‐users.Inaddition,ViewManagerutilizesyourexistingActive
Directoryinfrastructureforuserauthenticationandmanagement.
Onceadesktophasbeencreated,Web‐ba
sedorlocallyinstalledclientsoftwareenables
authorizedend‐userstosecurelyconnecttocentralizedvirtualdesktops,back‐end
physicalsystems,orterminalservers.
Figure 1‐1showsahigh‐levelviewofanexampleViewManagerenvironmentandits
maincomponents—thesecomponentsaredescribedinmoredetailinlatersectionsof
thisbook.
Introduction
1
View Manager Administration Guide
12 VMware, Inc.
Figure 1-1. Example High-Level View of a View Manager Environment
View Manager Features
ThemajorfeaturesofViewManageraredescribedbelow:
Enterprise‐classconnectionbrokering—ViewManagermanagestheconnections
betweenusersandtheirvirtualdesktops.WhenusersconnecttoViewManager,
thevirtualdesktopstheyareauthorizedtoaccessaredisplayed.
“Smartpooling”capabilities—Arangeofpersistentandnon‐persistentpooling
capabilitiessimplifiestheprovisioningandmanagementofcentralizeddesktops.
network
ESX hosts running
Virtual Desktop VMs
View
Connection
Server
View
Administrator
(browser)
VMware VirtualCenter
Management Server
Microsoft
Active Directory
network
Windows
View Client
Mac
View Portal
Linux
View Portal Thin Client
virtual desktops
ESX host
VM VM VM
VM VM VM
virtual machine
desktop OS
app app app
View Agent
VMware, Inc. 13
Chapter 1 Introduction
Flexibledeploymentoptions—ViewManagercomponentscanbedeployedina
varietyofconfigurationsandtodifferentpartsofthenetwork,whichimproves
security,scalability,andreliability.Inaddition,multipleVirtualCenterserversare
supported,andViewManagercanscalehorizontallytosupportmanyvirtual
desktops.
Highavailability—Serverscanbeclusteredforhighavailabilityandscalability
withautomaticfailover.Theseserverscanalsoleverageindustry‐standard
load‐balancingsolutions.
IntegrationwithMicrosoftActiveDirectory—ConnectiontoActiveDirectory
allowsyoutolocateuserandusergroupaccountsanduseauthenticationfeatures
inordertocontrolwhichuserscanaccessvirtualdesktops.
SeamlessintegrationwithVMwareVirtualInfrastructure(VI)—Workswith
VMwareVirtualCentertoprovideadvancedvirtualdesktopmanagement
capabilities,suchasautomaticsuspendandresume,whichreducesthememory
andprocessingpowerrequiredtohostvirtualdesktops.
ByleveragingthecapabilitiesofVMwareVirtualInfrastructure,desktopscanrun
evenwhenserverhardwarefailsandre
coverquicklyfromunplannedoutages
withoutduplicatehardware.
Secureaccess—Optionalsecureencapsulationcapabilitiesallowallnetwork
connectionstobeencrypted.
Supportfortwo‐factorauthentication—WithRSASecurID,accesscontrolis
strengthened.
USBclientdeviceandvirtualprintingsupport—USBdevicesandprinterscanbe
locallyconnectedtoclientsyetaccessedfromavirtualdesktop.
Web‐based managementuserinterface—AWeb‐basedadministrativeconsole
allowsvirtualdesktopstobemanagedfromanylocation.
Supportfornon‐VIsystems—physicalmachinesorterminalservicessystemscan
bealsomanagedbyViewManager,ensuringaseamlessintegrationofexisting
architecturesintotheVDIenvironment.
Scalablevirtualinfrastructure—linkedclonetechnologyallowsmultipledesktops
tobedeployedfromasinglebaseimage.Subsequentchangestothisimagecanbe
automaticallyproliferatedamongstalldesktopsinlinkedclonepool.
ViewManager3.0.1isafullyinternationalizedproduct.
View Manager Administration Guide
14 VMware, Inc.
View Manager Components
ViewManagerconsistsofthefollowingmajorcomponents:
ViewConnectionServer—asoftwareservicethatactsasabrokerforclient
connectionsbyauthenticatingandthendirectingincomingremotedesktopuser
requeststotheappropriatevirtualdesktop,physicaldesktop,orterminalserver.
ViewAgent—asoftwareservicethatisinstalledonallguestvirtualmachines,
physicalsystems,orterminalserversinordertoallowthemtobemanagedby
ViewManager.TheagentprovidesfeaturessuchasRDPconnectionmonitoring,
virtualprinting,remoteUSBsupport,andsinglesignon.
ViewClient—alocallyinstalledsoftwareapplicationthatcommunicateswith
ViewConnectionServerinordertoallowuserstoconnecttotheirdesktopsusing
theRemoteDesktopProtocol(RDP).
ViewClientwithOfflineDesktop—aversionofViewClientthatisextendedto
supporttheOfflineDesktopfeaturewhichallowsuserstodownloadvirtual
machinesandusethemontheirlocalsystems.
ViewPortal—aWeb‐basedversionofViewClientsupportedbymultipleoperating
systemsandbrowsers.
ViewAdministrator—aWebapplicationthatallowsViewManageradministrators
toconfigureViewConnectionServer,deployandmanagedesktops,controluser
authentication,initiateandexaminesystemev ents,andcarryoutanalytical
activities.
ViewComposer—asoftwareservicethatisinstalledontheVirtualCenterserverin
ordertoallowViewManagertorapidlydeploymultiplelinkedclonedesktops
fromasinglecentralizedbaseimage.
System Requirements
Thefollowingsectionsdescribethehardwareandsoftwarerequirementsforthemajor
componentsprovidedaspartofViewManager.
N
OTEVMwareincludescertain“experimentalfeatures”insomeofourproduct
releases.Thesefeaturesarethereforyoutotestandexperimentwith.Wedonotexpect
thesefeaturestobeusedinaproductionenvironment.However,ifyoudoencounter
anyissueswithanexperimentalfeature,weareinterestedinanyfeed
backyouare
willingtoshare.Pleasesubmitasupportrequestviathenormalaccessmethods.You
willreceiveanauto‐acknowledgementofyourrequest.Wecannot,however,committo
troubleshoot,provideworkaroundsorprovidefixesfortheseexperimentalfeatures.
VMware, Inc. 15
Chapter 1 Introduction
View Connection Server
ViewConnectionServerisnotsupportedonserversthathavetheWindowsTerminal
Serverroleinstalled.RemovetheWindowsTerminalServerrolefromanyserveron
whichyouwillbeinstallingViewConnectionServer.
ViewConnectionServerrunsona32‐bitor64‐bitdedicatedphysicalorvirtualserver
withthefollowingspe
cifications:
PentiumIV2.0Ghzprocessororhigher—dualprocessorsarerecommended
2GBRAMorhigher—3GBRAMisrecommendedfordeploymentsof50ormore
ViewManagerdesktops
Oneormore10/100Mbpsnetworkinterfacecontrollers(NIC)—1GbpsNICis
recommended
Supported Operating Systems
TheViewConnectionServercanbeinstalledonthefollowing32‐bitoperatingsystems:
WindowsServer2003R2StandardEditionwithSP2
WindowsServer2003StandardEditionwithSP2
WindowsServer2003R2EnterpriseEditionwithSP2
WindowsServer2003EnterpriseEditionwithSP2
Prerequisites
ViewConnectionServerhasthefollowingprerequisites:
AvalidlicensekeyforViewManager.Thefollowingtypesoflicenseareavailable:
ViewManager
ViewManagerwithViewComposer
ViewManagerwithViewComposer,andOfflineDesktop
VMwareInfrastructure 3.0.2(supported)orVMwareVirtualInfrastructure 3.5
(recommended).BothESXandESXi 3.5aresupported.
NOTETheabovespecificationsapplytoanyadditionalViewConnectionServer
instancesthatareinstalledinyourenvironmentforthepurposesofhighavailabilityor
externalaccess.
N
OTEVMwareInfrastructure3.5U3isrequiredinordertousetheView
Composer(linkedclone)andOfflineDesktopfeatures.
View Manager Administration Guide
16 VMware, Inc.
HostoperatingsystemsforstandardorreplicaViewConnectionServerinstances
arejoinedtoanActiveDirectorydomain.ThefollowingversionsofActive
Directoryaresupported:
Windows2000ActiveDirectory
Windows2003ActiveDirectory
Inordertoapplycustomizationspecificationstostandard(non‐linkedclone)
desktoppools,MicrosoftSyspreptoolsmustbeinstalledonyourVirtualCenter
server
RSA Authentication Manager
ViewConnectionServerhasbeencertifiedwithversion6.1and7.1ofRSA
AuthenticationManager.OtherversionsofRSAAuthenticationManagerthatare
compatiblewithversion6.1arealsosupported.
Operating System Support for Installed Components
Table 1‐1describesthesupportofferedbyvarioustypesofWindowsoperatingsystem
tothelocallyinstalledcomponentsofViewManager.Foreachofthesecomponents,
only32‐bitsupportisoffered.Anyadditionalenvironmentalrequirementsofthese
componentsaredescribedinsubsequentsections.Thecolumnsrepresentedinthis
tableare:
ViewAgent—referstotheViewAgentservicethatisinstalledonaViewManager
desktop.Theentriesinthiscolumnaretheoperatingsystemsthatcanbemanaged
byViewManager.Thecolumnisdividedintotwosub‐columns:
Virtual—referstothevirtualsystemssupportedasguests.Thesesystems
couldresidewithinVirtualInfrastructurewheretheyareprovisionedand
managed,orcouldexistasstandalonesystemswithinanotherVMware
applicationsuchasVMwareServer.
Physical—referstothephysicalsystemssupportedasalternatemultiple
back‐ends,includingterminalservers.
ViewClient—referstotheViewClientapplication.Theentriesinthiscolumnare
theoperatingsystemscapableofinstallingandrunningthisapplication.
N
OTEViewConnectionServerdoesnotmakenorrequireanyschemaor
configurationupdatestoActiveDirectory.
VMware, Inc. 17
Chapter 1 Introduction
OfflineDesktop—referstotheViewClientforOfflineDesktopapplication.
The e ntriesinthiscolumnaretheoperatingsystemscapableofinstallingand
runningthisapplication.ForalistoftheViewManagerdesktopsthatcanbe
downloadedandusedinanofflinecontext,referto“ViewClientwithOffline
Desktop:SupportedGu
ests”onpage 20.
ViewComposer—referstotheViewComposerservicethatrunsonthe
VirtualCenterhostsystem.Theentriesinthiscolumnaretheoperatingsystems
capableofrunningthisservice.
N
OTETherequirementsforViewConnectionServerarenotincludedinthis
table—referto“ViewConnectionServer”onpage 15fordetailedinformationabout
thiscomponent.
Table 1-1. Operating System Support (32-bit) for Installed Components
Operating System View Agent View Client Offline Desktop
Virtual Physical
Windows2000ProfessionalSP4
Yes
WindowsXPProfessionalSP1Yes Yes Yes
WindowsXPProfessionalSP2Yes Yes Yes Yes
WindowsXPProfessionalSP3Yes Yes Yes Yes
WindowsXPHomeSP2
Yes
WindowsXPe Yes
WindowsVistaHome Yes
WindowsVistaHomePremium Yes
WindowsVistaBusinessYes Yes Yes
WindowsVistaBusinessSP1Yes Yes Yes
WindowsVistaEnterpriseSP1 Yes Yes
WindowsVistaUltimate Yes
WindowsVistaUltimateSP1Yes Yes Yes
WindowsServer2003Enterprise
TerminalServer
Yes
WindowsServer2003Enterprise
TerminalServerSP2
Yes
WindowsServer2003SP1
View Manager Administration Guide
18 VMware, Inc.
Operating System Support for Web Components
Table 1‐2describesthesupportofferedbyvarioustypesofoperatingsystemtothe
Web‐based componentsofViewManager,withthespecificbrowserandadditional
softwarerequirementsalsoprovided.Anyadditionalenvironmentalrequirementsof
theWeb‐basedcomponentsaredescribedinsubsequentsections.
View Agent
YoumusthaveadministrativeprivilegestoinstallViewAgentonWindowsView
Managerdesktops.
View Composer
YoucannotusetheViewComposerfeatureofViewManagertodeploydesktopsthat
runWindowsVistaUltimateEditionorWindowsXPProfessionalSP1.Formore
informationaboutViewComposer,refertoChapter 6,“ViewComposer,”onpage 93.
Table 1-2. Operating System Support for Web-Based Components (32-bit)
Operating System View Portal View Administrator
Windows2000ProfessionalSP4 InternetExplorer6
InternetExplorer7
Firefox2.0
Firefox3.0
WindowsXPProfessionalSP1InternetExplorer6SP2
InternetExplorer7
WindowsXPProfessionalSP2
WindowsXPProfessionalSP3
WindowsXPHomeSP2
WindowsVistaHomeInternetExplorer7
WindowsVistaHomePremium
WindowsVistaBusiness
WindowsVistaBusinessSP1
WindowsVistaUlt
imate
WindowsVistaUltimateSP1
RHEL5.0,Update1 Firefox2.0/3.0
JavaJRE1.5.0or1.6.0
rdesktop
SLES10SP1
Ubuntu8.04
MacOS/XTiger(10.4)Safari
JavaJRE1.5.0
RDC2.0
MacOS/XLeopard(10.5)