Using VMware View Client for Mac

Transcription

1 May 2012 View Client for Mac This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see EN

2 You can find the most up-to-date technical documentation on the VMware Web site at: The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: Copyright VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. VMware, Inc Hillview Ave. Palo Alto, CA VMware, Inc.

3 Contents 1 Using VMware View Client for Mac 5 Setup and Installation 5 System Requirements for Mac Clients 6 Supported View Desktop Operating Systems 6 Preparing View Connection Server for View Client 6 Install View Client on Mac OS X 7 Install View Client by Using View Portal 7 Add VMware View Client to Your Dock 8 Configuring Certificate Checking for End Users 8 Managing Server Connections and Desktops 9 Log In to a View Desktop for the First Time 9 Certificate Checking Modes for View Client 10 Switch Desktops 11 Log Off or Disconnect from a Desktop 12 Remove a View Server Shortcut from the Home Screen 12 Roll Back a Desktop 13 Using a Microsoft Windows Desktop on a Mac 13 Feature Support Matrix 13 Internationalization 14 Copying and Pasting Text and Images 14 Troubleshooting View Client 14 Index 17 Reset a Desktop 14 Uninstalling View Client 15 VMware, Inc. 3

4 4 VMware, Inc.

5 1 This guide, Using VMware View Client for Mac, provides information about installing and using VMware View software on a Mac to connect to a View desktop in the datacenter. The information in this document includes system requirements and instructions for installing and using View Client for Mac. This information is intended for administrators who need to set up a VMware View deployment that includes Mac client devices. The information is written for experienced system administrators who are familiar with virtual machine technology and datacenter operations. Setup and Installation on page 5 Setting up a View deployment for Mac clients involves using certain View Connection Server configuration settings, meeting the system requirements for View servers and Mac clients, and downloading and installing View Client for Mac from the VMware Web site. Managing Server Connections and Desktops on page 9 Use View Client to connect to View Connection Server or a security server and log in to or off of a View desktop. For troubleshooting purposes, you can also reset a View desktop assigned to you and roll back a desktop you checked out. Using a Microsoft Windows Desktop on a Mac on page 13 View Client for Mac supports the following features. Troubleshooting View Client on page 14 You can solve most problems with View Client by resetting the desktop or by reinstalling the VMware View Client. Setup and Installation Setting up a View deployment for Mac clients involves using certain View Connection Server configuration settings, meeting the system requirements for View servers and Mac clients, and downloading and installing View Client for Mac from the VMware Web site. System Requirements for Mac Clients on page 6 You can install View Client for Mac on all Intel-based models of that use the Mac OS X or later operating system. Supported View Desktop Operating Systems on page 6 Administrators create virtual machines with a guest operating system and install View Agent in the guest operating system. End users can log in to these virtual machines from a client device. Preparing View Connection Server for View Client on page 6 Administrators must perform specific tasks to enable end users to connect to View desktops. VMware, Inc. 5

6 Install View Client on Mac OS X on page 7 End users open View Client to connect to virtual desktops from a Mac OS X physical machine. You install View Client on Mac OS X client systems from a disk image file. Install View Client by Using View Portal on page 7 An expedient way of installing the View Client application is to open a browser and browse to the View Portal Web page. Add VMware View Client to Your Dock on page 8 You can add View Client to your Dock just as you do with any other application. Configuring Certificate Checking for End Users on page 8 Administrators can configure the certificate verification mode so that, for example, full verification is always performed. System Requirements for Mac Clients You can install View Client for Mac on all Intel-based models of that use the Mac OS X or later operating system. The Mac on which you install View Client, and the peripherals it uses, must meet certain system requirements. Model Memory Operating systems View Connection Server, Security Server, and View Agent Display protocol for VMware View Software Requirements for RDP Intel-based Mac At least 2GB of RAM Mac OS X Snow Leopard and Mac OS X Lion or later or later If client systems connect from outside the corporate firewall, VMware recommends that you use a security server. With a security server, client systems will not require a VPN connection. PCoIP or RDP Microsoft Remote Desktop Connection Client for Mac, version 2.0 or later. You can download this client from the Microsoft Web site. Supported View Desktop Operating Systems Administrators create virtual machines with a guest operating system and install View Agent in the guest operating system. End users can log in to these virtual machines from a client device. For a list of the supported guest operating systems, see the "Supported Operating Systems for View Agent" topic in the VMware View 4.6.x or 5.x installation documentation. Preparing View Connection Server for View Client Administrators must perform specific tasks to enable end users to connect to View desktops. Before end users can connect to View Connection Server or a security server and access a View desktop, you must configure certain pool settings and security settings: If you are using a security server, as VMware recommends, verify that you are using View Connection Server and View Security Server or later. See the VMware View Installation documentation for View 4.6 or later. 6 VMware, Inc.

7 Chapter 1 Using VMware View Client for Mac If you plan to use a secure connection for client devices and if the secure connection is configured with a DNS host name for View Connection Server or a security server, verify that the client device can resolve this DNS name. To enable or disable the secure tunnel, in View Administrator, go to the Edit View Connection Server Settings dialog box and use the check box called Use secure tunnel connection to desktop. Verify that a virtual desktop pool has been created and that the user account you plan to use is entitled to access this View desktop. See the topics about creating desktop pools in the VMware View Administration documentation. To use two-factor authentication with View Client, such as RSA SecurID or RADIUS authentication, you must enable this feature on View Connection Server. RADIUS authentication is available with View 5.1 or later View Connection Server. For more information, see the topics about two-factor authentication in the VMware View Administration documentation. Install View Client on Mac OS X End users open View Client to connect to virtual desktops from a Mac OS X physical machine. You install View Client on Mac OS X client systems from a disk image file. Prerequisites Verify that the client system uses a supported operating system. See System Requirements for Mac Clients, on page 6. Verify that you can log in as an administrator on the client system. If you plan to use the RDP display protocol to connect to a View desktop, verify that the Mac client system has Microsoft Remote Desktop Connection Client for Mac, version 2.0 or later installed. Verify that you have the URL for the Download page that contains the disk image file for View Client for Mac. Procedure 1 From your Mac, browse to the Web page that contains the disk image file for View Client. The file name format is VMware-View-Client-y.y.y-xxxxxx.dmg disk image file, where xxxxxx is the build number and y.y.y is the version number. 2 Double-click the.dmg file to open it and click Agree. The contents of the disk image appear in a VMware View Client Finder window. 3 In the Finder window, drag the View Client icon to the Applications folder icon. If you are not logged in as an administrator user, you are prompted for an administrator user name and password. What to do next Start View Client and verify that you can log in to the correct virtual desktop. See Log In to a View Desktop for the First Time, on page 9. Install View Client by Using View Portal An expedient way of installing the View Client application is to open a browser and browse to the View Portal Web page. Prerequisites Verify that you have the URL for the View Connection Server instance. VMware, Inc. 7

8 Verify that you can log in as an administrator on the client system. Verify that the client system uses a supported operating system. See System Requirements for Mac Clients, on page 6. If you plan to use the RDP display protocol to connect to a View desktop, verify that the Mac client system has Microsoft Remote Desktop Connection Client for Mac, version 2.0 or later installed. Procedure 1 Log in to the client system as a user with administrator privileges. 2 Open a browser and enter the URL of the View Connection Server instance that provides access to the virtual desktop. 3 Follow the prompts on the Web page. What to do next Connect to the View desktop. See Log In to a View Desktop for the First Time, on page 9. Add VMware View Client to Your Dock You can add View Client to your Dock just as you do with any other application. Procedure 1 In the Applications folder, double-click VMware View Client. 2 Click and hold the VMware View Client icon in the Dock until the context menu appears. 3 Select Options > Keep in Dock. When you quit VMware View Client, the application shortcut remains in the Dock. Configuring Certificate Checking for End Users Administrators can configure the certificate verification mode so that, for example, full verification is always performed. Certificate checking occurs for SSL connections between View Connection Server and View Client. Administrators can configure the verification mode to use one of the following strategies: End users are allowed to choose the verification mode. The rest of this list describes the three verification modes. (No verification) No certificate checks are performed. (Warn) End users are warned if a self-signed certificate is being presented by the server. Users can choose whether or not to allow this type of connection. (Full security) Full verification is performed and connections that do not pass full verification are rejected. For details about the types of verification checks performed, see Certificate Checking Modes for View Client, on page 10. You can set the verification mode so that end users cannot change it. Set the "Security Mode" key in the /Library/Preferences/com.vmware.view.plist file on Mac clients to one of the following values: 1 implements Never connect to untrusted servers. 2 implements Warn before connecting to untrusted servers. 3 implements Do not verify server identity certificates. 8 VMware, Inc.

9 Chapter 1 Using VMware View Client for Mac Managing Server Connections and Desktops Use View Client to connect to View Connection Server or a security server and log in to or off of a View desktop. For troubleshooting purposes, you can also reset a View desktop assigned to you and roll back a desktop you checked out. Depending on how the administrator configures policies for View desktops, end users might be able to perform many operations on their desktops. Log In to a View Desktop for the First Time on page 9 Before you have end users access their virtual desktops, test that you can log in to a virtual desktop from the client system. Certificate Checking Modes for View Client on page 10 Administrators and sometimes end users can configure whether client connections are rejected if any or some server certificate checks fail. Switch Desktops on page 11 If you are connected to a desktop, you can switch to another desktop. Log Off or Disconnect from a Desktop on page 12 If you disconnect from a View desktop without logging off, applications remain open. Remove a View Server Shortcut from the Home Screen on page 12 After you connect to a View server, a server shortcut is saved to the View Client Home screen. Roll Back a Desktop on page 13 Rolling back discards changes made to a virtual desktop that you checked out for use in local mode on a Windows PC or laptop. Log In to a View Desktop for the First Time Before you have end users access their virtual desktops, test that you can log in to a virtual desktop from the client system. Prerequisites Obtain the credentials that you need to log in, such as Active Directory user name and password, RSA SecurID user name and passcode, or RADIUS authentication user name and passcode. Obtain the domain name for logging in. Perform the administrative tasks described in Preparing View Connection Server for View Client, on page 6. If you are outside the corporate network and are not using a security server to access the virtual desktop, verify that your client device is set up to use a VPN connection and turn that connection on. IMPORTANT VMware recommends using a security server rather than a VPN. Verify that you have the fully qualified domain name (FQDN) of the server that provides access to the virtual desktop. You also need the port number if the port is not 443. If you plan to use the RDP display protocol to connect to a View desktop, verify that the AllowDirectRDP View Agent group policy setting is enabled. If your administrator has allowed it, you can configure the certificate checking mode for the SSL certificate that the View server presents. See Certificate Checking Modes for View Client, on page 10. VMware, Inc. 9

10 Procedure 1 In the Applications folder, double-click VMware View Client. 2 Click the Add Server icon on the View Client Home screen. 3 Enter the server name and a port number if required, and click Continue. An example using a nondefault port is view.company.com: If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, enter the user name and passcode and click Continue. 5 Enter your user name and password, select a domain, and click Continue. You might see a message that you must confirm before the login dialog box appears. 6 If the desktop security indicator turns red and a warning message appears, respond to the prompt. Usually, this warning means that View Connection Server did not send a certificate thumbprint to the client. The thumbprint is a hash of the certificate public key and is used as an abbreviation of the public key. View Connection Server 4.6.1, and later versions send thumbprint information, but earlier versions do not. 7 (Optional) Select the protocol. The default is PCoIP. To use Microsoft RDP instead, click PCoIP under the desktop name to toggle and select RDP. 8 Double-click a View desktop shortcut to connect. After you are connected, the client window appears. If View Client cannot connect to the desktop, perform the following tasks: Determine whether View Connection Server is configured not to use SSL. View Client requires SSL connections. Check whether the global setting in View Administrator for the Use SSL for client connections check box is deselected. If so, you must either select the check box, so that SSL is used, or set up your environment so that clients can connect to an HTTPS enabled load balancer or other intermediate device that is configured to make an HTTP connection to View Connection Server. Verify that the security certificate for View Connection Server is working properly. If it is not, in View Administrator, you might also see that the View Agent on desktops is unreachable. Verify that the tags set on the View Connection Server instance allow connections from this user. See the VMware View Administration document. Verify that the user is entitled to access this desktop. See the VMware View Administration document. If you are using the RDP display protocol to connect to a View desktop, verify that the client computer allows remote desktop connections. Certificate Checking Modes for View Client Administrators and sometimes end users can configure whether client connections are rejected if any or some server certificate checks fail. Certificate checking occurs for SSL connections between View Connection Server and View Client. Certificate verification includes the following checks: Is the certificate intended for a purpose other than verifying the identity of the sender and encrypting server communications? That is, is it the correct type of certificate? Has the certificate expired, or is it valid only in the future? That is, is the certificate valid according to the computer clock? 10 VMware, Inc.

11 Chapter 1 Using VMware View Client for Mac Does the common name on the certificate match the host name of the server that sends it? A mismatch can occur if a load balancer redirects View Client to a server with a certificate that does not match the host name entered in View Client. Another reason a mismatch can occur is if you enter an IP address rather than a host name in the client. Is the certificate signed by an unknown or untrusted certificate authority (CA)? Self-signed certificates are one type of untrusted CA. To pass this check, the certificate's chain of trust must be rooted in the device's local certificate store. NOTE For instructions on distributing a self-signed root certificate and installing it on Mac OS X client systems, see the Advanced Server Administration document for the Mac OS X Server you are using, available from the Apple Web site. In addition to presenting a server certificate, View Connection Server 4.6.1, and later versions also send a certificate thumbprint to View Client. The thumbprint is a hash of the certificate public key and is used as an abbreviation of the public key. If the View server does not send a thumbprint, you see a warning that the connection is untrusted. If your administrator has allowed it, you can set the certificate checking mode. Select VMware View Client > Preferences from the Finder menu bar. You have three choices: Never connect to untrusted servers. If any of the certificate checks fails, the client cannot connect to the server. An error message lists the checks that failed. Warn before connecting to untrusted servers. If a certificate check fails because the server uses a selfsigned certificate, you can click Continue to ignore the warning. For self-signed certificates, the certificate name is not required to match the View Connection Server name you entered in View Client. Do not verify server identity certificates. This setting means that View does not perform any certificate checking. If the certificate checking mode is set to Warn, you can still connect to a View Connection Server instance that uses a self-signed certificate. If an administrator later installs a security certificate from a trusted certificate authority, so that all certificate checks pass when you connect, this trusted connection is remembered for that specific server. In the future, if that server ever presents a self-signed certificate again, the connection fails. After a particular server presents a fully verifiable certificate, it must always do so. Switch Desktops If you are connected to a desktop, you can switch to another desktop. Procedure u Select a View desktop from the same server or a different server. Option Choose a different View desktop on the same server Choose a View desktop on a different server Action Click the Disconnect button in the toolbar, or select Desktop > Disconnect from the Finder menu bar. Click the Choose Another Server button at the right side of the toolbar. VMware, Inc. 11

12 Log Off or Disconnect from a Desktop If you disconnect from a View desktop without logging off, applications remain open. If you are not connected to a View desktop, you can log off without having to connect first. Using this feature has the same result as sending Ctrl+Alt+Del to the desktop and then clicking Log Off. NOTE The Windows key combination Ctrl+Alt+Del is not supported in View desktops. To use the equivalent of pressing Ctrl+Alt+Del, select Desktop > Send Ctrl+Alt+Del from the menu bar. Alternatively, you can press Fn+Control+Option+Delete on an Apple keyboard. Procedure Disconnect without logging off. Option Also quit View Client Choose a different View desktop on the same server Choose a View desktop on a different server Action Click the Close button in the corner of the window or select File > Close from the Finder menu bar. Click the Disconnect button in the toolbar, or select Desktop > Disconnect from the Finder menu bar. Click the Choose Another Server button at the right side of the toolbar. NOTE Your View administrator can configure your desktop to automatically log off when disconnected. In that case, any open programs in your desktop are stopped. Log off and disconnect. Option From within the desktop OS From the menu bar Action Use the Windows Start menu to log off. Select Desktop > Log Off from the Finder menu bar. If you use this procedure, files that are open on the View desktop will be closed without being saved first. Log off when you are not connected to a View desktop. If you use this procedure, files that are open on the View desktop will be closed without being saved first. Option From Home screen with server shortcuts From Home screen with desktop shortcuts Action a b Double-click the server shortcut and supply credentials. These might include RSA SecurID credentials and credentials for logging in to the desktop. Select the desktop and select Desktop > Log Off from the Finder menu bar. Select the desktop and select Desktop > Log Off from the Finder menu bar. Remove a View Server Shortcut from the Home Screen After you connect to a View server, a server shortcut is saved to the View Client Home screen. You can remove a View Connection Server shortcut by selecting the shortcut and pressing the Delete key or by Control-clicking or right-clicking the shortcut on the Home screen and selecting Delete. You cannot remove View desktop shortcuts that appear after you connect to a server. 12 VMware, Inc.

13 Chapter 1 Using VMware View Client for Mac Roll Back a Desktop Rolling back discards changes made to a virtual desktop that you checked out for use in local mode on a Windows PC or laptop. You can roll back a View desktop only if your View administrator has enabled this feature and only if you checked out the desktop. CAUTION If changes were made to the local mode desktop and those changes were not replicated back to the View server before rolling back, the changes are lost. Prerequisites Obtain the credentials that you need to log in, such as Active Directory user name and password, RSA SecurID user name and passcode, or RADIUS authentication user name and passcode. Back up the desktop to the server to preserve data or files. You can use View Administrator to replicate data to the server, or, if the policy is set to allow it, you can use View Client with Local Mode on the Windows client where the desktop is currently checked out. Procedure 1 If the View Client Home screen displays View Connection Server shortcuts, double-click the shortcut for the server that accesses the desktop and supply credentials. a b If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, enter the user name and passcode and click Continue. Enter your user name and password in the login dialog box. 2 On the View Client Home screen that displays View desktop shortcuts, select the desktop and select Desktop > Rollback from the Finder menu bar. After the View desktop is rolled back, you can log in to it from the Mac client. Using a Microsoft Windows Desktop on a Mac View Client for Mac supports the following features. Feature Support Matrix View Client for Mac supports a subset of the features available on other clients, such as the View Client for Windows desktops and laptops. Table 1-1. Features Supported on Windows Desktops for Mac OS X Clients Feature Windows 7 View Desktop Windows Vista View Desktop Windows XP View Desktop RSA SecurID or RADIUS X X X Single sign-on X X X RDP display protocol X X X PCoIP display protocol X X X USB access Wyse MMR Virtual printing Location-based printing X X X VMware, Inc. 13

14 Table 1-1. Features Supported on Windows Desktops for Mac OS X Clients (Continued) Feature Windows 7 View Desktop Windows Vista View Desktop Windows XP View Desktop Smart cards Multiple monitors Local mode For descriptions of these features and their limitations, see the View Architecture Planning document. Internationalization The user interface and documentation for View Client are available in English, Japanese, French, German, simplified Chinese, and Korean. Copying and Pasting Text and Images If your administrator enables the feature, you can copy and paste formatted text and images between a remote View desktop and your client system or between two View desktops. Some restrictions apply. If you use the PCoIP display protocol and you are using a View 5.x or later View desktop, your View administrator can set this feature so that copy and paste operations are allowed only from your client system to a View desktop, or only from a View desktop to your client system, or both, or neither. Administrators configure the ability to copy and paste by using group policy objects (GPOs) that pertain to View Agent in View desktops. For more information, see the topic about View PCoIP general session variables in the VMware View Administration document, in the chapter about configuring policies. Supported file formats include text, images, and RTF (Rich Text Format). The clipboard can accommodate 1MB of data for copy and paste operations. If you are copying formatted text, some of the data is text and some of the data is formatting information. For example, an 800KB document might use more than 1MB of data when it is copied because more than 200KB of RTF data might get put in the clipboard. If you copy a large amount of formatted text or text and an image, when you attempt to paste the text and image, you might see some or all of the plain text but no formatting or image. The reason is that the three types of data are sometimes stored separately. For example, depending on the type of document you are copying from, images might be stored as images or as RTF data. If the text and RTF data together use less than 1MB, the formatted text is pasted. Often the RTF data cannot be truncated, so that if the text and formatting use more than 1MB, the RTF data is discarded, and plain text is pasted. If you are unable to paste all of the formatted text and images you selected in one operation, you might need to copy and paste smaller amounts in each operation. You cannot copy and paste files between a View desktop and the file system on your client computer. Troubleshooting View Client You can solve most problems with View Client by resetting the desktop or by reinstalling the VMware View Client. Reset a Desktop Resetting shuts down and restarts the desktop. Unsaved data is lost. You might need to reset a desktop if the desktop operating system stops responding. 14 VMware, Inc.

15 Chapter 1 Using VMware View Client for Mac Resetting a View desktop is the equivalent of pressing the Reset button on a physical PC to force the PC to restart. Any files that are open on the View desktop will be closed without being saved first. You can reset the desktop only if your View administrator has enabled this feature. Procedure u Use the Reset command. Option From within the desktop OS From Home screen with server shortcuts From Home screen with desktop shortcuts Action Select Desktop > Reset from the Finder menu bar. a b Double-click the server shortcut and supply credentials. These might include RSA SecurID credentials and credentials for logging in to the desktop. Select the desktop and select Desktop > Reset from the Finder menu bar. Select the desktop and select Desktop > Reset from the Finder menu bar. The operating system in the View desktop is rebooted. View Client disconnects from the desktop. What to do next Wait an appropriate amount of time for system startup before attempting to connect to the View desktop. Uninstalling View Client You can sometimes resolve problems with View Client by uninstalling and reinstalling the VMware View Client application. You uninstall View Client using the same method you usually use for uninstalling any other application. Drag the VMware View Client application from the Applications folder to the Trash and empty the trash. After uninstalling is complete, you can reinstall the application. See Install View Client on Mac OS X, on page 7. VMware, Inc. 15

16 16 VMware, Inc.

17 Index C certificates, ignoring problems 8, 10 copying text and images 14 Ctrl+Alt+Delete 12 D desktop log off from 12 reset 14 roll back 13 switch 11 disconnecting from a View desktop 12 Dock 8 F feature support matrix, for Mac OS X 13 H hardware requirements, Mac 6 I images, copying 14 L log off 12 logging in to a View desktop 9 M Mac OS X installing View Client 7 installing View Client on 6 server certificate verification 8 server connections 9 server shortcuts 12 shortcut for View Connection Server 12 SSL certificates, verifying 8 switch desktops 11 system requirements, for Mac OS X 6 T text, copying 14 U uninstalling View Client 15 UPNs, View Client 9 V verification modes for certificate checking 8 View Agent, installation requirements 6 View Client disconnect from a desktop 12 installing on Mac OS X 7 setup for Mac clients 5 starting 9 system requirements for Mac OS X 6 troubleshooting 14 using View Portal to install 7 View Connection Server, shortcuts for 12 View desktop, roll back 13 View Portal 7 O operating systems, supported on View Agent 6 OS X, installing View Client 7 P pasting text and images 14 prerequisites for client devices 6 R reset desktop 14 roll back a View desktop 13 S security servers 6 Send Ctrl+Alt+Del menu command 12 VMware, Inc. 17

18 18 VMware, Inc.