2025 is coming to an end and so is my journey in the VDI world. In the past years, I’ve seen several shout-outs for “the year of VDI” but in the end, I never felt any of the past years really was “the year of VDI”. I have been missing the excitement I’ve had during my first years in the VDI world, and that’s why, in 2024, I started to… Read More »End of an era… and the beginning of a new one!
On January 28th, 2025, Omnissa released Horizon 2412. New 2412 versions were already released in the past for App Volumes, ThinApp, Dynamic Environment Manager, and Workspace One Access, but now they also released the latest version for Horizon. Please carefully plan this upgrade before you start upgrading your existing environment. Some significant rebranding changes could seriously impact your existing environment. The first thing to note is that this version is… Read More »Omnissa Horizon 2412 – Rebranding!
Also known as: “Certificate revocation check failed” A while ago I had an issue with a Horizon customer, where I got an error on the Horizon dashboard saying “The server’s certificate is not trusted”. The error message appeared for all connection servers we had. This was very strange, as we hadn’t changed any certificate-related things and I was pretty sure that the certificate was not expired either. Clicking on the… Read More »Server’s certificate is not trusted
It’s the end of the year, and this typically means reapplying for the VMware vExpert program for a lot of my fellow vExperts. For those who don’t know the vExpert program yet, you can find all the information about this wonderful community program at the vExpert Application Portal. The vExpert program also has sub-programs for specific fields within the VMware portfolio. There are sub-programs for SDDC, Application Modernization, Multi-Cloud, Security,… Read More »“vExpert EUC” becomes “End-User Compute Community”
Also known as: “Problems renewing the Horizon Connection server certificate” When renewing the Certificate used for the Horizon Connection server, it’s important that you use the correct settings. If not, the Horizon Connection server service will be running, but you won’t be able to access the Horizon Admin Console or even be able to logon to Horizon. After renewing the Horizon Connection server certificate you need to restart the Horizon… Read More »Horizon View Blast Secure Gateway service paused
This is part of a series of post for setting up VMware Horizon authentication using AzureAD. TrueSSO setup We are almost there! So far we have created our sub-CAs, setup certificate templates, installed the enrollment server and configured the SAML authentication. At this point, Connecting to the UAG will redirect the user to Azure to log in and when successfully authenticated redirect the user back to the UAG which will… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 5: TrueSSO Setup
This is part of a series of post for setting up VMware Horizon authentication using AzureAD. SAML setup In the next part, we will set up the SAML authentication. This consists of 3 steps: First, we need to create the SAML application on Azure, then we will configure the UAG to use that SAML application for authentication, and finally, we need to configure Horizon to accept that SAML authentication. Azure… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 4: SAML Setup
This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Enrollment server(s) Repeat all steps in this part on both enrollment/sub-CA servers! On the enrollment/sub-CA server, open the local machine certificate manager: Right-click the Personal node, choose All Tasks > Request New Certificate Click next on the welcome page. Select “Active Directory Enrollment Policy” and click next Select “Enrollment Agent (computer)” and click Enroll.… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 3: Enrollment Servers
This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Certification Template The way TrueSSO works is it is using a certificate issued for the user after a successful SAML authentication and authenticates against AD using a smartcard type logon with that certificate. Those certificates are short-lived certificates, valid for approximately 8 or 12 hours (depending on the user’s average working time). Therefore we… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 2: Certification Template
This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Sub-CA(s) First, we are going to set up a subordinate certification authority on our 2 servers. I’m using Windows server 2022, but 2019 or 2016 also works fine. By using a sub-CA, all trueSSO certificate requests are handled by those sub-CAs, reducing the load your the root-CA and we are not dependent on a… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 1: Setup sub-CA(s)