Table of Contents HOL ADV

Transcription

1 Table of Contents Lab Overview - - Horizon Cloud - Getting Started... 3 Lab Guidance... 4 Beta Disclaimer Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes)...11 Introduction Horizon Cloud Hosted Infrastructure Overview Conclusion Module 2 - Initial Tenant Setup (15 Minutes) Introduction Hands-on Labs Interactive Simulation: Initial Tenant Setup Module 3 - Administration Console Overview (15 Minutes) Introduction Console Overview Conclusion Module 4 - Publish a Desktkop (15 Minutes) Introduction Hands-on Labs Interactive Simulation: Create an Image Module 5 - Desktop Management (15 Minutes) Introduction Desktop Management Conclusion Module 6 - Mangement of an Application (30 minutes) Introduction Overview of App Volumes Integration with Horizon Cloud Packaging Applications with AppCapture GUI Configuring and Synchronizing AppStack File Share Assigning Native Applications to Virtual Desktops Launching a Desktop with Native Application Integration in Horizon Cloud Overview of Remote Applications in Horizon Cloud Deploying an RDS Host and Creating Assignment for Remote Applications Assigning Remote Applications to Users and Groups Launching a Remote Application hosted in Horizon Cloud Conclusion Module 7 - Mangement of User Enviroment Settings (15 minutes) Introduction User Environment Manager Overview Using User Environment Manager with Horizon Cloud Conclusion Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes) Introduction Enabling Horizon Cloud Desktops/Applications in VMware Identity Manager Creating the Federation Artifact Page 1

2 Configuring Horizon Cloud Hosted Infrastructure for vidm Integration Entitling Users to Horizon Cloud Resources and Synchronizing Identity Manager with Horizon Cloud Launch an Application or Desktop Conclusion Page 2

3 Lab Overview - - Horizon Cloud - Getting Started Page 3

4 Lab Guidance The Table of Contents can be accessed in the upper right-hand corner of the Lab Manual. This lab contains interactive simulations along with modules you will walk through using a live environment. It will take more than 90 minutes to complete this lab. You should expect to only finish 2-3 of the modules during your time. The modules are independent of each other so you can start at the beginning of any module and proceed from there. You can use the Table of Contents to access any module of your choosing. The Table of Contents can be accessed in the upper right-hand corner of the Lab Manual. In this lab you will learn what desktop as a service (DaaS) means, contrast it with typical virtual desktop infrastructure (VDI), and explain why VMware Horizon Cloud is the market-leading offering. The attendee will then have the opportunity to walk through setting up an Horizon Cloud environment. Lab Module List: Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes - Basic) Interactive Simulation of the initial setup of a Horizon Cloud tenant Module 3 - Administration Console Overview (15 minutes -Basic) Tour of the Horizon Administration Console Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 5 - Desktop Management (15 minutes - Basic) Walk through the assignment process and subsequent access of the desktop Module 6 -Management of an Application (30 minutes - Basic) Assigning and accessing remote and native applications within Horizon Cloud Module 7 - Management of User Environment Settings (15 minutes - Basic) Using User Environment Manager with Horizon Cloud Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Lab Captains: Modules 1-5, Pamela Norris, Sr. TAM, USA Modules 6-8, Justin Venezia, Sr. Architect, USA Page 4

5 This lab manual can be downloaded from the Hands-on Labs Document site found here: This lab may be available in other languages. To set your language preference and have a localized manual deployed with your lab, you may utilize this document to help guide you through the process: Location of the Main Console Alternate Methods of Keyboard Data Entry During this module, you will input text into the Main Console. Besides directly typing it in, there are two very helpful methods of entering data which make it easier to enter complex data. Page 5

6 Click and Drag Lab Manual Content Into Console Active Window You can also click and drag text and Command Line Interface (CLI) commands directly from the Lab Manual into the active window in the Main Console. Accessing the Online International Keyboard You can also use the Online International Keyboard found in the Main Console. 1. Click on the Keyboard Icon found on the Windows Quick Launch Task Bar. Page 6

7 Click once in active console window In this example, you will use the Online Keyboard to enter the sign used in addresses. The sign is Shift-2 on US keyboard layouts. 1. Click once in the active console window. 2. Click on the Shift key. Click on key 1. Click on the "@ key". Notice sign entered in the active console window. Page 7

8 Activation Prompt or Watermark When you first start your lab, you may notice a watermark on the desktop indicating that Windows is not activated. One of the major benefits of virtualization is that virtual machines can be moved and run on any platform. The Hands-on Labs utilizes this benefit and we are able to run the labs out of multiple datacenters. However, these datacenters may not have identical processors, which triggers a Microsoft activation check through the Internet. Rest assured, VMware and the Hands-on Labs are in full compliance with Microsoft licensing requirements. The lab that you are using is a self-contained pod and does not have full access to the Internet, which is required for Windows to verify the activation. Without full access to the Internet, this automated process fails and you see this watermark. This cosmetic issue has no effect on your lab. Look at the lower right portion of the screen Page 8

9 Please check to see that your lab is finished all the startup routines and is ready for you to start. If you see anything other than "Ready", please wait a few minutes. If after 5 minutes your lab has not changed to "Ready", please ask for assistance. Page 9

10 Beta Disclaimer This lab session may contain product features that are currently under development. This lab session overview of the new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Pricing and packaging for any new technologies or features discussed or presented have not been determined. These features are representative of feature areas under development. Feature commitments are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Page 10

11 Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes) Page 11

12 Introduction This chapter provides a brief introduction to Horizon Cloud, which is a new cloud-scale, feature-rich service for managing and delivering desktops and apps. This lab contains the following lessons: Review Horizon Cloud Benefits of Horizon Cloud Page 12

13 Horizon Cloud Hosted Infrastructure Overview This service delivers virtual desktops and applications while allowing you to decide whether to bring your own capacity or buy capacity from VMware. The Horizon Cloud Service is designed to enable organizations to start small and then scale up on demand. Modernized Delivery of traditional Desktops and Applications The need to re-evaluate desktop strategies is driving many companies to consider virtual desktop infrastructure (VDI). VDI has promised to solve many of the traditional challenges of physical desktops. With VDI, desktops are centralized onto virtual machines that run in corporate data centers. Cloud hosted Virtual Desktops make dayto-day tasks, such as deploying new desktops and applications, and supporting distributed workers, much easier and less labor-intensive. Users access their virtual desktops via remoting technology, making it possible for IT to finely control the movement of data into and out of the data center. Because data is not stored on the local device, companies are at much less risk if PCs or mobile devices are stolen or lost. Horizon Cloud delivers desktops and applications using a purpose-built cloud platform that is scalable across multiple deployment options, including on-premises infrastructure Page 13

14 or fully managed infrastructure from VMware. It supports a cloud scale architecture that makes it easy deliver virtualized Windows desktops and applications to any device, anytime. A flexible subscription model that enable organizations to easily get up and running and scale quickly. Financial Reasons for Leveraging Horizon Cloud Traditional desktop and application virtualization is costly and time-consuming to implement. It generally requires specialized IT expertise to set up. With traditional desktop and application virtualization, organizations need to purchase infrastructure for both hosting desktops and apps, as well as management infrastructure. Moving to Horizon Cloud gives organizations the opportunity to move from a CapEx model to an OpEx model with predictable economics. The Horizon Cloud solution is a simple, yet flexible and scalable solution that enables organizations to choose where virtual desktops and apps reside, on-premises or in the cloud, or both, all while being managed by a centralized cloud control plane. Horizon Cloud Concept & Capabilities With Horizon Cloud, management is in the cloud, but organizations can choose where desktops and apps reside either hosted in the cloud or sitting on-premises. Horizon Cloud requires less IT expertise and takes less time to set up than traditional desktop and application solutions. Horizon Cloud is available using an OPEX model with subscription based pricing for more predictable economics. The Horizon Cloud service makes it easy for organizations to move between deployment models using a single user license. For organizations leveraging Horizon Cloud with hosted infrastructure, workspaces are hosted by VMware in the public cloud. This model simplifies the delivery of desktops and apps as a service. This option is great for organizations who might not have desktop and application virtualization expertise. It is ideal for organizations that have cloud first initiatives and who want subscription pricing. For organizations using Horizon Cloud with on-premises infrastructure, IT can choose from a growing ecosystem of partners including Dell, EMC, QCT, and HDS. In this scenario, management is in the cloud, and desktops/apps are on-premises. Organizations often choose this deployment model when they want to move to the cloud but need desktops and apps close to end-users to improve performance or to comply with regulatory or security mandates. This deployment option is useful for organizations that have branch offices and need infrastructure closer to end-users. It is useful for organizations that want to deploy desktop and application virtualization but who do not want to invest in the expertise or infrastructure required for traditional desktop and application virtualization deployments. Page 14

15 Business Benefits Cost and complexity redefined. Horizon Cloud radically transforms traditional desktop and application virtualization with a predictable cost model that lets you pay as you grow. Cross-cloud Architecture. Designed specifically to support cloud deployments with a fully multi-tenant cloud-scale architecture, Horizon Cloud lets you deliver virtual desktops and applications on your choice of infrastructure, whether public cloud, private cloud or a combination of the two. Digital Workspace Experience. Horizon Cloud makes it easier than ever for end users to securely access their digital workspaces on any device, at any time, from anywhere. Clear Path to the Future. As the leader in desktop virtualization, VMware s extensive End-User Computing portfolio ensures that you can transition to the cloud on your terms, while getting the most out of your existing investments. Overview of Lab In this lab you will do a setup and configuration of a Horizon Cloud tenant. Interactive Simulations are used when required for lack of time within a lab environment. While Page 15

16 this lab focuses on configuring a Horizon Cloud Hosted Infrastructure environment, the configuration steps for an on-premises infrastructure deployment are very similar. The steps that you will be executing include: Tenant setup and configuration Management of desktops Management of applications Accessing an application Page 16

17 Conclusion Now you can see why VMware is excited about VMware Horizon Cloud. You've finished Module 1 Congratulations on completing Module 1. If you are looking for additional information on VMware Horizon Cloud produt offerings, try one of these: Click on this: Horizon Cloud with Hosted Infrastructure Or go to: Or use your smart device to scan the QRC Code. Proceed to any module below which interests you most. Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes - Basic) Interactive Simulation of the initial setup of a Horizon Cloud tenant Module 3 - Administration Console Overview (15 minutes -Basic) Tour of the Horizon Administration Console Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 5 - Desktop Management (15 minutes - Basic) Walk through the assignment process and subsequent access of the desktop Module 6 -Management of an Application (30 minutes - Basic) Assigning and accessing remote and native applications within Horizon Cloud Module 7 - Management of User Environment Settings (15 minutes - Basic) Using User Environment Manager with Horizon Cloud Page 17

18 Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Page 18

19 Module 2 - Initial Tenant Setup (15 Minutes) Page 19

20 Introduction Once your Horizon Cloud Service Provider has provisioned your Horizon Cloud environment, also known as a tenant, you will need to register your Active Direcory envorment with Horizon Cloud. In this module, you will join your tenant to an Active Directory Domain using an Interactive Simulation. This lab contains the following lessons: Conecting an Active Directory to a Horizon Cloud Tenant Page 20

21 Hands-on Labs Interactive Simulation: Initial Tenant Setup This part of the lab is presented as a Hands-on Labs Interactive Simulation. This will allow you to experience steps which are too time-consuming or resource intensive to do live in the lab environment. In this simulation you can use the software interface as if you are interacting with a live environment. 1. Click here to open the interactive simulation. It will open in a new browser window or tab. 2. When finished, click the Return to the lab link to continue with this lab. Page 21

22 Module 3 - Administration Console Overview (15 Minutes) Page 22

23 Introduction After you have successfully completed the Active Directory registration process, additional services and functionality withing the Horizon Cloud Administration Console will be available This lab contains the following lessons: Review of settings available withing the Horizon Cloud Administration Console Add a user account to a role Configure an Horizon Agent Repository Page 23

24 Console Overview The Administrator Console is accessed using the URL of your tenant. simply your Horizon Cloud environment. A tenant is Login to Horizon Cloud Administrator Console The URL is supplied to you by your provider. If you are not already on the Administration Console page, launch a browser from the main console: 1. Select the Horizon Cloud Admin bookmark Access the Horizon Cloud Administration Console Once you have synced your tenant to your Active Directory, you will need to use a domain account that is a member the domain group added to the Super Administrator Page 24

25 role during the initial setup. will no longer work. The one time password, supplied to you by your provider, Note: The LDAP bind account used during the initial setup process is also treated by the system as a Super Admin user. Confirm you see a gray login screen. If you do not, select the Horizon Cloud Admin Bookmark 1. Enter credentials Username: hcadmin Password: VMware1! 2. Click on Login Settings Under Settings there are several controls to manage the tenant. We will now begin to explore these options. 1. Click Settings Page 25

26 General Settings In the general settings section, you can view and modify information, including the client's session timeout, how HTML Access in handled, as well as contact information. In this case are going to add Admin contact information. 1. Click General Settings In this lab we will be adding the Admin Contact Info Page 26

27 1. Click Edit The contact information that will be seen by other administrators when they login to the Administrative Console. 1. Scroll down to the Contact Info sectionvm 2. Under Contact Info enter the following information: Name: VMware Admin Phone: Page 27

28 3. Click Save On the main General Settings pane: 1. Click the scroll bar to scroll down to the bottom of the page 2. You should now see the contact information listed Active Directory Settings The Active Directory window is where you would go if you needed to change your Active Directory Settings. To navigate there: Page 28

29 1. Click Settings 2. Click Active Directory You have the option to change the Active Directory domain, or modify your domain join or bind information. Page 29

30 Roles and Permissions Role-based access lets you control who has access to the management console. To assign or modify membership to these roles perform the following task. 1. Click Settings 2. Click Roles & Permissions There are two built-in roles provided in the Horizon Cloud environment. The first one is the Super-Administrator. Super Administrator has access to view all the options within the tenant as well as apply any configuration changes. It is mandatory that a minimum Page 30

31 of one Active Directory group is assigned to this role. In this case, the Tenant Admins group has been assigned to the Super Administrator Role. There is also an optional role, Demo Administrator. This role also also has the ability to view all the options within the console, but does not have the ability to save configuration changes. To add a user to the Demo Administrator Role: 1. In Roles & Permissions, select Demo Administrator 2. There are no user or groups listed under Admin Users. 3. Click Edit For the purposes of this lab, we will be adding the Demo Admins group. Page 31

32 1. Click the Active Directory Search box and enter the name Dem 2. Select the Demo Admins group 1. Confirm DF\Demo Admins is listed under Selected User Group 2. Click Save Page 32

33 Set Locations Locations are file shares used to import data into Horizon Cloud from your environment. There are two different types of file shares that support various functions, Agents and Application/Images. Application/Images are used to store AppStacks created by VMware App Volumes. Agents are used to house agent software updates. Once the location has been defined, the agent is available on the Assignments page. To define a location: Page 33

34 1. Click Settings 2. Click Locations From the Locations window you can add, modify, and remove a file share. You also have the ability to import. In most cases, files placed in the file share will be automatically uploaded to the tenant. You also have the ability to manually import the files by selecting the Import button on the locations page. 1. Click New Page 34

35 In this lab we are going to define an Agent Location. The share must be named 'agentfiles.' Note: When creating an Applications/Images share, the name can be anything you choose. Note: VMware recommends the use of a Utility VM(s) to house the file share to avoid latency issues. 1. Enter the following information for the file share: Name: Agents Domain: Confirm CORP is listed Username: administrator Password: VMware1! Type: confirm Agents is selected Source Path: \\controlcenter.corp.local\agentfiles 2. Click Save Confirm the Agents share is now listed with a status of green. Though we don't cover it in this lab due to resource constraints, once the agent files are available, you can assign them to an image by navigating to the Assignments window. Starting with Horizon Cloud 17.1 you can apply agent updates using the Horizon Cloud user interface as well. Page 35

36 Storage Management Storage Management is where you can go to delete AppStacks when utilizing App Volumes in your tenant. 1. Select Settings 2. Select Storage Management Page 36

37 In this lab, we have two App Stacks defined. Information how VMware App Volumes can enhance administrative capabilities within the Horizon Cloud environment can be found in Module 6 of this lab. Set Default View The default view when you log into Horizon Cloud is the Getting Started page. You can also choose to have the Dashboard as your default page. Page 37

38 1. Click Settings 2. Select Getting Started The Getting Started page can be turned on or off at any time. 1. Click the Scroll bar to scroll to the bottom of the page. 2. Click YES to change it to NO in the Getting Started Preferences Show at Startup box Page 38

39 If you click on Yes, next time you log into the Administration Console, it would default to the Monitor pane. 1. For purposes of this lab click on Cancel Utility VMs The next option you have under Settings is Utility VMs. These are VMs that do not have a supported operating system for desktop use, but provide services within the environment such as DNS or DHCP. 1. Select Settings Page 39

40 2. Select Utility VMs From here you can perform such tasks as a Rename, Shutdown, or Restart. By clicking on the "..." button additional options are available. As you can see, in this lab, we do not have a Utility VM, hence the options are grayed out. Note: Though Utility VMs are not required in a Horizon Cloud environment, VMware does recommend the use of utility VM(s) for colocate services such as Active Directory, DNS, and DHCP to avoid latency issues. Page 40

41 2 Factor Authentication To access the 2 Factor Authentication (2FA) settings navigate to: 1. Select Settings 2. Click on 2 Factor Auth Horizon Cloud supports both RSA SecureID as well as Radius Authentication for users that reside on your internal network. Though we do not cover 2FA in this lab, information on how to configure it can be found in the 2 Factor Authentication section of the Horizon Cloud with Hosted Infrastructure Administration guide. Page 41

42 Conclusion You have completed your tour of the settings available to you in an Horizon Cloud environment! You are now ready to create your image. You've finished Module 3 Congratulations on completing Module 3. If you are looking for additional information on configuring Horizon Cloud, try one of these: Click on this Horizon Cloud Documentation Or go to Or use your smart device to scan the QBR Code. Proceed to any module below which interests you most. Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes - Basic) Interactive Simulation of the initial setup of a Horizon Cloud tenant Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 5 - Desktop Management (15 minutes - Basic) Walk through the assignment process and subsequent access of the desktop Module 6 -Management of an Application (30 minutes - Basic) Assigning and accessing remote and native applications within Horizon Cloud Module 7 - Management of User Environment Settings (15 minutes - Basic) Using User Environment Manager with Horizon Cloud Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Page 42

43 Module 4 - Publish a Desktkop (15 Minutes) Page 43

44 Introduction Once the initial configuration of the Horizon Cloud has been completed, you are now ready to create your image. The Image is what is used to assign your desktops. This is also refered to as publishing a desktop. In this lab, you will use an Interactive Simulation to walk though the image creation process. This lab contains the following lessons: Review template options Create an Image Page 44

45 Hands-on Labs Interactive Simulation: Create an Image This part of the lab is presented as a Hands-on Labs Interactive Simulation. This will allow you to experience steps which are too time-consuming or resource intensive to do live in the lab environment. In this simulation you can use the software interface as if you are interacting with a live environment. 1. Click here to open the interactive simulation. It will open in a new browser window or tab. 2. When finished, click the Return to the lab link to continue with this lab. Page 45

46 Module 5 - Desktop Management (15 Minutes) Page 46

47 Introduction Once you have an image available, you are now ready to assign your desktops. Desktops can be assigned to a user or group as a dedicated, floating, or RDSH virtual desktop/session. This lab contains the following lessons: Assigning a desktop to a group Verifying a users access to the newly provisioned desktop Page 47

48 Desktop Management Desktop Assignments are used to create a desktop image and assign desktops to a users and or groups. Navigate to Horizon Cloud Administration Console If you are not already in the Horizon Cloud Administrative Console, launch a browser. 1. Select the Horizon Cloud Admin bookmark Login to the Horizon Cloud Administration Console Login to the console 1. Enter: Username: hcadmin Page 48

49 Password: VMware1! 2. Select Login Navigate to Dashboard The dashboard page provides an array of information including notifications, activities, reports, and general environmental conditions. 1. Select Monitor 2. Select Dashboard Desktop Capacity Allocation When viewing the Desktop Capacity Allocation, in this lab you will see 4 used. Once we have gone through the desktop assignment process we will navigate back to the Page 49

50 dashboard to see how the numbers have been affected. Follow the proceeding steps to assign a desktop Create Desktop Assignment Once an image is available in your tenant, you are ready to create and assign a user or group to a desktop. 1. On the left-hand side of your Horizon Cloud Administration Console, click Assign 2. From the Assignments Page, click New Select Assignment Type You see two options listed, Assign Applications and Assign a Desktop. Application assignments are used when you want to assign AppStacks or RDSH applications. For purposes of the lab we are going to assign Desktops. Page 50

51 1. Click Get Started underneath the Desktops menu item. Select Desktop Type When configuring Desktop options, we must first define the desktop type. You may choose Dedicated, Floating or Session desktop types. A Dedicated desktop assigns a user to a specific desktop. The user will receive that same desktop every time they log in. If you are using Floating desktops, each time the user logs in they will receive any available desktop. The third option is a Session desktop. In this case, the user will receive an RDSH-published desktop. When using Instant Clones, you must use the floating assignment option. 1. Click Floating Fixed Attributes In the fixed attributes section, IT administrators can choose from several types of desktop models with various compute, storage and feature resources. When you choose a desktop model from the list, computers are provisioned with a specific virtual CPU (vcpu), memory (vram), and virtual hard disk configurations. For more information on desktop models consult the Horizon Cloud Service Description document. Note: A fixed attribute can not be modified once an assignment has been created. Page 51

52 Note: For the purposes of this lab, a customized model has been created. The desktop model Desktop, is already listed. 1. To determine the resource specifications of the model, click on Details next to the Desktop Model selection box The Desktop Model is comprised of 4 GB or vram and 2 vcpus. 2. Click on the outside scroll bar to the bottom of the screen. Flexible Attributes Flexible Attributes are settings that will define how and what a user will connect to a desktop. Unlike fixed attributes, flexible attributes can be changed at any time. 1. In the Flexible Attributes section confirm/enter the following information: Confirm Image [IC] HOL-W10-IC is selected Enter Assignment Name: CorpDesktop Confirm Default Protocol: Blast Preferred Client Type: Browser Capacity: 2 Note: Setting the capacity higher then 2 can affect the performance of your lab due to resource constraints that exist in this environment. When using Horizon Cloud, you have the option to set the preferred client type as Browser or Horizon Client. If at any point in time you need more information about a particular field simply click on the information button to the right of the field. Page 52

53 2. Select the i button to the right of the Assignment Name field In this particular case, you see the naming requirements for the desktop. Advanced Properties Though advanced properties are not required, they do provide one with the option to configure some additional configuration parameters to your desktop assignment. 1. Click on Advanced Properties These fields are not required for this lab. 2. Accept the defaults, click on Next Assign Desktop to a User Page 53

54 One of the final steps is to select the user or group you wish to assign the desktop(s) to. Multiple users or groups can be assigned. In this case, we will be assigning it to a user. 1. Click the Active Directory Search box 2. Enter hcu 3. Select hcuser Continue to Assign a Desktop to a User To complete the user assignment phase: 1. Confirm CORP\hcuser is listed in the Selected Users/User Groups section 2. Click Next Page 54

55 Submit Desktop Assignment This screen allows you to view the settings you have entered. Once the assignment process has been completed, the desktop will be listed in Assignments. From this page you can create, edit, and delete an assignment as well as update agent software for any existing assignments. 1. Click on Submit Confirm Desktops have been Created Page 55

56 On the Assignments screen you will need to confirm the desktops have been created and capacity is listed as 2 Note: This can take upwards of 5 minutes. Please do not continue this module until the creation process is complete. You may need to refresh your browser on occasion to expedite the process. Navigate to Horizon Cloud Client Now you are ready to test the user's desktop. 1. From your browser open up an additional tab 2. Select the VMware Horizon Cloud Bookmark. Page 56

57 Login to Desktop Log into the Horizon Cloud client. 1. Enter username: hcuser password: VMware1! 2. Select Login Page 57

58 Select Desktop A user can view the desktops they have been assigned. 1. Launch CorpDesktop View Your Desktop Windows will now begin to build your profile. Page 58

59 View your Desktop Cont.'d Once the profile build process is complete, you will see a fully functionality desktop. Note: Due to latency in the environment, this may take a few minutes Page 59

60 View Dashboard After a user is logged in, we will navigate back to the dashboard in the Horizon Cloud Administration Console to view the dashboard. If the Horizon Cloud Administration Console is still opened navigate back to the tab. If the session is already closed, open up a new tab and log back into the console using the Horizon Cloud Admin bookmark. Note: If session times out, and you are prompted to login, use username: holadmin password: VMware1! 1. Select Monitor 2. Select Dashboard Page 60

61 From here you can see an overview of the resources currently allocated. 1. Under connections it shows 1 floating desktop currently connected. Note: If it is listed as 0 confirm that the VMware Horizon Cloud client is still logged in. This is the desktop that you just connected to. Page 61

62 Connection States Connection States is listed at 100% green. It is showing the 1 connection that you made with the client is active. In the same window notice host Desktop Capacity Allocation used has increased from 4 to 8. Note: In this lab the allocation has gone from 4 to 8, even though you only assigned two desktops. This is due to the fact that desktop allocation defined in this lab. In a production environment, Used and Assigned would match. Page 62

63 Review Recent Activity To navigate to the Activity screen: 1. Select Monitor 2. Select Activity Page 63

64 The activity window allows an admin to review both admin and user activity in a span ranging from 24 hours to 30 days. You can see here the desktop assignment activity you have just completed. Reports Page 64

65 Reports allow an administrator to view resource mappings. 1. Select Monitor 2. Select Reports Both user and desktop mappings are available. You can navigate between the two reports by simply clicking on the mapping you wish to view. Export Report An admin also has the ability to download the report, which will be saved as a zipped.csv file. Page 65

66 Notifications The notifications page shows information regarding system notifications. To navigate to the page: 1. Select Monitor 2. Click on Notifications As with reports, you have the option to view the data ranging from 24 hours to 30 days. Notifications also appear in abbreviated list format when you select the bell shaped notification icon. Page 66

67 Conclusion A fully functional desktop is now ready for your users to access. At this point in time your users would be ready to hit the ground running. Please review modules 6-8 of this lab to learn how additional VMware products can enhance a users experience in the Horizon Cloud environment. You've finished Module 5 Congratulations on completing Module 5. If you are looking for additional information on configuring Horizon Cloud, try one of these: Click on this Horizon Cloud Documentation Or go to Or use your smart device to scan the QRC Code. Proceed to any module below which interests you most. Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes - Basic) Interactive Simulation of the initial setup of a Horizon Cloud tenant Module 3 - Administration Console Overview (15 minutes -Basic) Tour of the Horizon Administration Console Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 6 -Management of an Application (30 minutes - Basic) Assigning and accessing remote and native applications within Horizon Cloud Module 7 - Management of User Environment Settings (15 minutes - Basic) Using User Environment Manager with Horizon Cloud Page 67

68 Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Page 68

69 Module 6 - Mangement of an Application (30 minutes) Page 69

70 Introduction Horizon Cloud - Hosted Infrastructure provides several ways to deliver applications to users. Applications can be delivered seamlessly to any type of endpoint device using Remote Desktop Services (RDS). Applications can also be dynamically delivered and integrated into virtual desktops hosted by Horizon Cloud - Hosted Infrastructure. This module will cover the dynamic delivery of native applications to Horizon Cloud desktops using the App Volumes features of the Horizon Cloud platform. In addition, this module will also demonstrate how to deliver seamless applications using the Remote Dekstop Services (RDS) integration capabilites. Page 70

71 Overview of App Volumes Integration with Horizon Cloud App Volumes is a real-time application delivery system that IT can use to dynamically deliver and manage applications. You do not need to modify desktops to work with App Volumes because applications act as if they were natively installed. The App Volumes solution quickly and seamlessly delivers applications without compromising end-user experience. Applications are centrally managed and delivered to desktops through virtual disks. In this module you will assign App Volumes applications to Horizon Cloud virtual desktops. Although Horizon Cloud Manager has already been pre-configured for Horizon Cloud, we'll show a video of how applications are packaged with App Volumes in Horizon Cloud, and the basic configurations needed to get App Volumes up and running within your Horizon Cloud tenant. Please note in this module we recommend using Chrome for the best experience. How Does App Volumes Work? In modern desktop environments, the demand for real-time application delivery often puts strain on existing infrastructures. Through App Volumes, VMware addresses this strain by virtualizing applications above the operating system (OS) and by offering an Page 71

72 alternative to managing per virtual machine. Applications virtualized above the OS are delivered as if natively installed without modification, in various configurations, to multiple groups of users. Through file and registry virtualization, applications are organized into application management containers. This arrangement uses existing storage and networking services, reduces infrastructure strain and overhead, and simplifies application life-cycle management. As illustrated in Figure 1. application-management containers are above the desktop OS, which has an App Volumes Agent installed. Applications, data files, middleware, and configurations are in separate, layered containers. There are two types of App Volumes containers: AppStack - A read-only container for one-to-many delivery of IT-managed applications Writable volume - A one-to-one, user-specific, read-and-write container for userinstalled applications, data, and files In Horizon Cloud - Hosted Infrastructure, only AppStacks are supported. Writable Volumes are not currently supported. Administrators use the Horizon Cloud Manager/Administrator interface to assign application entitlements. A separate utility (AppCapture) is used for packaging applications for App Volumes. Application installations recorded in AppStacks are stored in shared volumes across virtual disks. These applications require no special packaging formats or snapshot technologies and are automatically provisioned from a centralized file share. During provisioning of AppStacks, App Volumes intelligently records the entire application-installation process, and the changes made by the native application installers are available for delivery to users. Administrators can easily deliver provisioned AppStacks to a user, or a group. Applications delivered by App Volumes look and feel natively installed, and they follow users across sessions and devices, as can data, at the administrators option. Administrators can update or replace applications in real time and remove any assigned application at next login or reboot. Page 72

73 Real-Time Application Delivery and Management (JMP) JMP - Next-Generation Desktop and Application Delivery Platform JMP (pronounced jump) represents capabilities in VMware Horizon 7 Enterprise Edition that deliver Just-in-Time Desktops and Apps in a flexible, fast, and personalized manner. JMP is composed of the following VMware technologies: VMware Instant Clone Technology for fast desktop and RDSH provisioning VMware App Volumes for real-time application delivery VMware User Environment Manager for contextual policy management JMP allows components of a desktop or RDSH server to be decoupled and managed independently in a centralized manner, yet reconstituted on demand to deliver a personalized user workspace when needed. JMP is supported with both on-premises and cloud-based Horizon 7 deployments, providing a unified and consistent management platform regardless of your deployment topology. The JMP approach provides several Page 73

74 key benefits, including simplified desktop and RDSH image management, faster delivery and maintenance of applications, and elimination of the need to manage full persistent desktops. Summary of App Volumes Benefits With App Volumes, applications become objects that can be moved easily across data centers or to the cloud and shared with thousands of virtual machines. In a virtual desktop environment, App Volumes provides the following benefits: Real-time, dynamic application delivery in virtualized environments Delivers and updates applications and data by using a one-to-many shared delivery model. Applications delivered through App Volumes behave as natively installed applications. Works with existing infrastructure for flexible delivery to users or groups. Application life-cycle management Manages the application life cycle, from provisioning, delivery, and maintenance, to retirement. Speeds up application updates or upgrades and supports easy application replacement. Page 74

75 Packaging Applications with AppCapture GUI In this section, we will demonstrate how an App Volumes application is packaged using the AppCapture GUI. This is the first step in preparing an App Volumes application for use in Horizon Cloud. In order to dynamically deliver one or more applications to a virtual desktop, the application must be packaged into a format that allows Horizon Cloud to attach the application package to the virtual machine at logon. Applications are captured on a clean virtual machine (with snapshot capabilities to return the machine to a pristine, pre-application capture state) that s similar to the virtual desktop image. This image will also contain the AppCapture utilities needed to get a before and after snapshot of the machine. The IT administrator will start the AppCapture utility and get the before state of the virtual machine. Once completed, the application is installed and configured. After all the applications and dependences (if applicable) are installed, the AppCapture utility will take an after state of the virtual machine. The files, folders and registry entries that were changed are captured by the AppCapture process are merged into an application package in VHD format. Once the application capture is complete, the application package should be moved to a staging file share. The virtual machine should be reset back to a clean snapshot; the IT administrator should then test the application using the AppCapture GUI utility. Once the application is validated, the application should be converted into an application package in VMDK format and moved into the production file share, where it is subsequently imported into Horizon Cloud. Application Capture Process In order to simplify the application capture process, VMware has developed a graphical user interface for capturing and merging AppStacks. Please click on the link below to see a step-by-step video on how to package App Volumes applications for Horizon Cloud. Page 75

76 Video - Capturing Applications for Horizon Cloud using the AppCapture Client Page 76

77 Configuring and Synchronizing AppStack File Share In this section, we will demonstrate how to import App Volumes AppStacks into Horizon Cloud This is the second step needed to deliver App Volumes applications to Horizon Cloud virtual desktops. Click on the link to see a video on how to complete the configuration of App Volumes and importing of AppStack application packages. Video - Configuring and Synchronizing AppStack File Share Page 77

78 Assigning Native Applications to Virtual Desktops In this section, we will demonstrate how to assign an App Volumes application to a user our user group. This is the last step in preparing an App Volumes application for use in Horizon Cloud. Page 78

79 From the desktop, launch the Chrome Browser. 1. Once the browser page loads, click on the Horizon Cloud Admin link in the bookmark bar to load the administrator login page. 2. Type in hcadmin as the user name. 3. Type in VMware1! as the password. 4. Click Login. Next, we'll create a new assignment. Page 79

80 1. Click on Assign. 2. Click on New. Click on "Get Started" under Applications to start the wizard. In our environment, we have packaged Cute PDF and FileZilla. For this example, we will entitle FileZilla. Page 80

81 1. Select Native as the application type (this will enumerate all the App Volumes applications). 2. Type FileZilla as the Assignment Name. 3. Leave the OS as Windows 10 (x64) and the Computer Name Prefix blank. 4. Click Next. 1. Put a Check Mark in the box to the left of the FileZilla application. 2. Click Next. Page 81

82 1. In the User/User Group box, type in hcuser to search for the user to assign to FileZilla. 2. Once the user shows up in the list, click on it with the mouse to select it. You will see the user name appear as shown above. Click Save and Exit to continue. You have now entitled the application "FileZilla" to the user. Click the "X" in the upper right corner of the screen to close the browser window. Page 82

83 Launching a Desktop with Native Application Integration in Horizon Cloud In this section, we will launch a desktop that has native applications (AppVolumes AppStacks) presented when the user logs in. Verify Desktop has been Entitled to Horizon Cloud User Before you try launching a App Volumes (native) application, you must have desktops assigned and provisioned. If you have recently completed Module #5, proceed to the next section - Launch a Desktop. Otherwise, follow these steps to provision desktops that will be used for launching native App Volumes applications. If you are not already in the Horizon Cloud Administrative Console, launch a browser. Page 83

84 1. Select the Horizon Cloud Admin bookmark Login to the console 1. Enter: Username: hcadmin Password: VMware1! 2. Select Login 1. On the left-hand side of your Horizon Cloud Administration Console, click Assign 2. From the Assignments Page click New Page 84

85 1. Click Get Started underneath the Desktops menu item. When using Instant Clones, you must use the floating assignment option. Page 85

86 1. Click Floating In the Fixed Attributes section, the Desktop Model has already been assigned and is comprised of 4 GB or Memory and 2 CPUs. Click on the outside scroll bar to the bottom of the screen. 1. In the Flexible Attributes section confirm/enter the following information Confirm Image [IC] HOL-W10-IC is selected Enter Assignment Name: CorpDesktop Confirm Default Protocol: Blast Preferred Client Type: Browser Note: Setting the capacity higher then 2 can affect the performance of your lab due to resource constraints that exist in a lab environment. Page 86

87 Capacity: 2 1. Click on Advanced Properties Ensure CorpDesktop is pre-populated in the "VM Names" field. 2. Click Next Nex, we will select the user or group you wish to assign the desktop(s) to. 1. Click the Active Directory Search box 2. Enter hcu 3. Select hcuser Page 87

88 To complete the user assignment phase: 1. Confirm CORP\hcuser is listed in the Selected Users/User Groups section 2. Click Next Page 88

89 1. Click on Submit On the Assignments screen you will need to confirm the desktops have been created and capacity is listed as 2 Note: This can take upwards of 5 minutes. Please do not continue this module until the creation process is complete. You may need to refresh your browser on occasion to expedite the process. One there is desktop capacity available as showin in the image, continue on to the next section. Launch a Desktop Page 89

90 From the desktop, click on the VMware Horizon Client icon. You will then be on the connection screen. If there is a connection for cloud.horizon.vmware.com already, click on it to launch the client. Page 90

91 If not, perform the following to create a connection to Horizon Cloud: 1. Click on Add Server. 2. Type cloud.horizon.vmware.com in the box for the name of the connection server. 3. Click Connect. 1. Type hcuser in the User Name box. 2. Type VMware1! in the Password box. 3. Click Login. Page 91

92 Click on CorpDesktop from the list of applications and desktops. The desktop connection will launch. Page 92

93 In the background, Horizon Cloud is attaching the FileZilla application to the desktop upon user login. Be patient, as it could take 60 to 90 seconds to complete the login due to the shared lab environment. Page 93

94 1. Click on the Start Menu button - you should see FileZilla FTP Client in the list. 2. Click on the FileZilla FTP Client folder from the start menu. 3. Underneath that folder, click on the FileZilla application. You will see FileZilla launch! Feel free to play around in the desktop. When finished: 1. Click on Options at the top of the screen. Page 94

95 2. Click Disconnect and Log Off. When prompted, click OK to disconnect and logoff. Click OK to proceed. Click the "X" in the upper right-hand corner of the screen to close out of the Horizon Client and return to the desktop. Page 95

96 Overview of Remote Applications in Horizon Cloud With published applications, you install applications on servers with the Microsoft Remote Desktop Session Host (RDSH) role, and entitle applications to corporate users through the Horizon Cloud administration console. Once authenticated to Horizon Cloud, users can launch an application, save files, and use network resources from a remote RDSH server just as if the users had the application installed on their local computer, tablet, or phone. Publishing applications using Horizon Cloud Published Applications simplifies management of line-of-business applications, allows the delivery of Windows applications to non-windows devices, and can potentially provide licensing advantages. This strategy can reduce CapEx and OpEx costs, simplifying installation, upgrades, and troubleshooting. With a VMware implementation, end users launch VMware Horizon Client, or the HTML Access web client, and log in to the server that brokers connections to published apps. Users then see a catalog of published apps, as well as session-based or single-user virtual desktops, if desktops have been configured. In this module you will assign remote applications to Horizon Cloud users and groups. Although Horizon Cloud Manager has already been pre-configured with RDS images and applications, we'll show a video of how RDS images are deployed and applications imported into the Horizon Cloud tenant. Please note in this module we recommend using Chrome for the best experience. Page 96

97 Deploying an RDS Host and Creating Assignment for Remote Applications In this module you will watch a video showing how to deploy RDSH hosts and create assignments for Horizon Cloud remote applications. Click on the link below to launch the video showing the creating remote application assignments and deployment of RDSH hosts. Video - Deploying an RDSH Host and Creating an Assignment for Remote Applications Page 97

98 Assigning Remote Applications to Users and Groups In this section, we will demonstrate how to entitle RDSH applications to a user our user group. The RDSH Servers have already been imported and provisioned and the assignment created without any users or groups assigned. Page 98

99 From the desktop, launch the Chrome Browser. 1. Once the browser page loads, click on the Horizon Cloud Admin link in the bookmark bar to load the administrator login page. 2. Type in hcadmin as the user name. 3. Type in VMware1! as the password. 4. Click Login. Next, we'll edit an assignment and add a user. 1. Click on Assign. Page 99

100 2. When the list of assignments appears, put a Check Box next to RDSH-APPS. 3. Click Edit. On the definition screen, you can see that this assignment is created for Remote (RDSH) applications. This is already filled in, since the RDSH assignment was deployed without any users assigned. Click Next to continue. Page 100

101 If you scroll down the list, you can see this entitlement has 3 applications assigned to it. We can add or remove applications to the assignment, if desired. For this lab, we will leave the 3 applications selected, and click Next to continue. 1. In the User/User Group box, type in hcuser to search for the user to assign. 2. Once the user shows up in the list, click on it with the mouse to select it. Page 101

102 You will see the user name appear as shown above. Click Save and Exit to continue. You have now entitled the user to the RDSH Application entitlment. Click the "X" in the upper right corner of the screen to close the browser window. Page 102

103 Launching a Remote Application hosted in Horizon Cloud Page 103

104 From the desktop, click on the VMware Horizon Client icon. You will then be on the connection screen. If there is a connection for cloud.horizon.vmware.com already, click on it to launch the client. Page 104

105 If not, perform the following to create a connection to Horizon Cloud: 1. Click on Add Server. 2. Type cloud.horizon.vmware.com in the box for the name of the connection server. 3. Click Connect. 1. Type hcuser in the User Name box. 2. Type VMware1! in the Password box. 3. Click Login. Page 105

106 Click on Calculator from the list of applications and desktops. The desktop connection will launch. You will see Calculator launch seamlessly into the Control Center desktop. Page 106

107 Feel free to use the application. When finished, click the "X" at the right upper corner of the Calculator window. Page 107

108 Click the "X" in the upper right-hand corner of the screen to close out of the Horizon Client and return to the desktop. Page 108

109 Conclusion Please review modules 7 and 8 of this lab to learn how additional VMware products can enhance a users experience in the Horizon Cloud environment. You've finished Module 6 Congratulations on completing Module 6. If you are looking for additional information on configuring Horizon Cloud, try one of these: Click on this Horizon Cloud Documentation Or go to Proceed to any module below which interests you most. Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes -Basic) Interactive Simulation of the initial setup of a Horizon Cloud tenant Module 3 - Administration Console Overview (15 minutes -Basic) Tour of the Horizon Administration Console Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 5 - Desktop Management (15 minutes - Basic) Walk through the assignment process and subsequent access of the desktop Module 7 - Management of User Environment Settings (15 minutes - Basic) Using User Environment Manager with Horizon Cloud Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Page 109

110 Module 7 - Mangement of User Enviroment Settings (15 minutes) Page 110

111 Introduction There are several additional Horizon Cloud features that provide an enhanced and optimized end-user experience, including the Just-in-Time delivery of applications to virtual desktops and RDSH servers, VMware Identity Manager for a unified access experience, and user persona/application settings customization for a personalized desktop experience. VMware User Environment Manager complements Horizon Cloud by managing application and desktop settings for all users at a granular level, and provide contextual rules to enforce policy, based on different conditions or events. This lab contains the following lessons: Learning more about using UEM to dynamically deliver user persona and application settings in Horizon Cloud. Page 111

112 User Environment Manager Overview VMware User Environment Manager offers personalization and dynamic policy configuration across any virtual, physical and cloud-based Windows desktop environment. User Environment Manager simplifies end-user profile management by providing organizations with a single, light-weight and scalable solution that leverages existing infrastructure. It accelerates time-to-desktop and time-to-application by replacing bloated roaming profiles and unmaintainable, complex logon scripts. It maps environmental settings (such as networks and printers), and dynamically applies enduser security policies and personalizations. When used with Horizon Cloud, this focused, powerful and scalable solution is engineered to deliver workplace productivity while driving down the cost of day-to-day desktop support and operations, and is a key component of JMP (Just-in-Time Management Platform) the next generation of desktop and application delivery. Page 112

113 Using User Environment Manager with Horizon Cloud Installing and configuring User Environment Manager (UEM) with Horizon Cloud is identical to using UEM with traditional virtual dekstops and applications. The primary difference is where the data is stored. In order to maintain an optimal end user experience, UEM in Horizon Cloud will store the data on a Windows-based file server housed in the customer's network in Horizon Cloud. For more information on User Environment manager, visit the User Environment Manager Hands-on-Lab (HOL ADV). Page 113

114 Conclusion Please review modules 6 and 8 of this lab to learn how additional VMware products can enhance a users experience in the Horizon Cloud environment. You've finished Module 7 Congratulations on completing Module 7. If you are looking for additional information on configuring User Environment Manager, try one of these: Click here for the User Environment Manager documentation. Proceed to any module below which interests you most. Module 1 - Horizon Cloud Hosted Infrastructure Overview (15 minutes - Basic) Overview of the Horizon Cloud Hosted Solution Module 2 - Initial Tenant Setup (15 minutes - Basic) Interactive Simulation of the initial setup of a Horizon Cloud yenant Module 3 - Administration Console Overview (15 minutes -Basic) Tour of the Horizon Administration Console Module 4 - Create an Image (15 minutes - Basic) Interactive Simulation of creating a desktop image Module 5 - Desktop Management (15 minutes - Basic) Walk through the assignment process and subsequent access of the desktop Module 6 -Management of an Application (30 minutes - Basic) Assigning and accessing remote and native applications within Horizon Cloud Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes - Basic) Integrating and accessing applications with Workspace One and Horizon Cloud Page 114

115 Module 8 - Integration of Workspace One with Horizon Cloud (30 minutes) Page 115

116 Introduction There are several additional Horizon Cloud features that provide an enhanced and optimized end-user experience, including the Just-in-Time delivery of applications to virtual desktops and RDSH servers, VMware Identity Manager for a unified access experience, and user persona/application settings customization for a personalized desktop experience. Identity Manager features include the portal (which users will see labeled as Workspace ONE), AirWatch Directory integration, access policy integration, and Horizon Cloud integration. It provides a simple and secure enterprise platform that delivers and manages any app on any device by integrating, application and mobility management. This lab contains the following lessons: Configuration of the cloud-based version of VMware Identity Manager (vidm) with Horizon Cloud - Hosted Infrastructure. The cloud-based VMware Identity Manager instance has already been pre-configured and synchronized with Active Directory. Please note in this module we recommend using Chrome for the best experience. What is VMware Identity Manager? What Is VMware Identity Manager? Page 116

117 VMware Identity Manager is identity management for the mobile cloud era that delivers on consumer-simple expectations like one-touch access to nearly any app, from any device, optimized with AirWatch Conditional Access. Empower employees to get productive quickly with a self-service app store while giving IT a central place to manage user provisioning and access policy with enterprise-class directory integration, identity federation and user analytics expected from the leader of hybrid cloud infrastructure. What are the Key Benefits? Empower employees to be both happy and productive; removing the traditional barriers to mobility like complex passwords, configuration steps, traditional VPNs and tokens by uniquely optimizing authentication for each device type rather than the lowest common denominator. Free the business to roll out new SaaS and mobile apps and services immediately to forever change business processes and customer engagement while maintaining a single point of user entitlement and license monitoring. Simplify IT by leveraging existing directory infrastructure and extend to SaaS and mobile apps with automated provisioning, utilization reporting and conditional access policies. More Information You can find more information, including links to the vidm Datasheet and documentation on our website. Use the QR-Code above or click here. Page 117

118 Enabling Horizon Cloud Desktops/ Applications in VMware Identity Manager To enable Horizon Cloud Desktop or Applications in VMware Identity Manager (vidm), we have to switch to the Catalog and add a Horizon Cloud Application. vidm has been configured for use with Active Directory already, but we will walk through the steps to verify the necessary steps. Open Workspace ONE Admin Console 1. Open Chrome and select VMware Workspace ONE Bookmark. Select Domain Page 118

119 Select the Active Directory Domain: 1. Make sure corp.local is in the "Select Your Domain" drop-down box. 2. Click Next. Login to Workspace ONE Sign in to Workspace ONE 1. User administsator 2. Password VMware1! 3. Click Sign In. Note: For this lab we are using the administrator user from Active Directory, and not the System Domain. Page 119

120 Enable Horizon Cloud Integration within Identity Manager First, switch to the Adminitrator View in IDM: 1. Click on the "Person" icon in the upper right corner of the screen. 2. Select Administrator Console. 1. Click On Catalog. 2. Click On Application Catalog. Page 120

121 1. Click On Manage Desktop Applications. 2. Click On Horizon Cloud. 1. Check the box next to "Enable Horizon Cloud Applications and Desktops". Addtional options to confiure the service should appear. Page 121

122 1. For the Tenant Host (our Horizon Cloud Tenant URL), type in cloud.horizon.vmware.com in the box. 2. Leave the port as Type hcadmin in the Tenant Admin user account. 4. Type in VMware1! as the Tenant Admin account password. 5. For the Admin Domain, type in CORP. 6. For the Domains to Sync, type in CORP. 7. Type in for the Assertion Consumer Service URL. The default setting for Deployment Type is Automatic, this will automatically add applications and virtual desktops entitled via Horizon 7 to the user's Portal 1. Set the Deployment Type for this lab to Automatic. 2. Select the Horizon Cloud Sync Interval for the lab to Every Hour. 3. Set the Default Launch Client to None. 4. Click Save. When the operation is completed, you will see the message "Values have been saved" at the top of the screen. Next, we will configure the Federation Artifcat. Page 122

123 Creating the Federation Artifact Next, we'll create the federated artifact used to establish a trust between Horizon Cloud and VMware Identity Manager. From the previous exercise, three (3) tabs will be opened up at the top. Click on the middle tab as displayed above. This will bring us back to the Catalog configuration within Identity Manager. Page 123

124 1. Click on Catalog. 2. Then, Click on Settings. 1. On the left side of the scren, click on Horizon Air. 2. For the Assertion Consumer, verify the URL to be - this is the tenant's FQDN. 3. For the Audience, verify the URL to be - this is the tenant's FQDN. 4. For the Assertion Consumer, verify the URL to be 5. For the Name ID Format, ensure Unspecified (username) is selected. Scroll down to the bottom. Page 124

125 1. For Name ID Value, make sure Custom Value is selected and verify ${user.userprincipalname} appears in the box. 2. Click Save. You will see a message that the "Federation artifact successfully created". Page 125

126 Configuring Horizon Cloud Hosted Infrastructure for vidm Integration Now, we'll configure Horizon Cloud to communicate with VMware Identity Manager 1. Click on the small tab to open a new Chrome Browser Tab. 2. When the "New Tab" has opened, clikc on the "Horizon Cloud Admin" shortcut from the bookmark bar. Page 126

127 1. Type in hcadmin as the username (this is the tenant administrator account). 2. Type in VMware1! as the password. 3. Click Login. 1. On the left side of the screen, click Settings. 2. Then, click General Settings as shown above. Under General Settings, click the Edit button. Page 127

128 Scroll down until you see the "IDM" section - click on Add IDM. 1. In the IDM URL box, type in API/1.0/GET/metadata/idp.xml for the URL. 2. Make sure HZC-HOL appears in the Data Center box. 3. Type in cloud.horizon.vmware.com for the Tenant Address, 4. Click Save. You will get a message that the settings have successfully saved if all the information is correct. Next, we'll ensure a user is entitled to apps and desktops, synchronize Identity Manager manually, and launch a connection to an application or desktop through Identity Manager. Page 128

129 Entitling Users to Horizon Cloud Resources and Synchronizing Identity Manager with Horizon Cloud Now, we'll configure entitlements for some RDSH Apps and Desktops in Horizon Cloud, and synchronize those entitlement changes with Identity Manager manually. Entitle Desktops and Applications From the previous exercise, select the 4th tab that was opened for configuring IDM inside of the Horizon Cloud Administrator. Page 129

130 1. Click on Assign. 2. Click the Check Box to the left of to RDSH-APPS as shown above. 3. Click Edit. On the Definitions screen, we will leave all the configured items as is (the RDSH pool has already been deployed) - click Next. Page 130

131 On the Applications screen, we will leave all the configured items as is (the applications have already been selected) - click Next. If you did Module 6, HCUSER may already be populated in the entitment screen. If you see HCUSER listed,,you can SKIP this step. Otherwise, follow these steps to continue entitling the user. 1. Type in HCUSER as shown above. 2. Wait until the user list enumerates, then select the HCUSER from the list. Page 131

132 You will see the user appear in the list under User/User Groups - click Save & Exit. Next, we'll repeat the application for an RDSH desktop. 1. Click on Assign. 2. Click the Check Box to the left of to RDSH-APPS as shown above. 3. Click Edit. Page 132

133 On the Definitions screen, we will leave all the configured items as is (the RDSH pool has already been deployed) - click Next. 1. Type in HCUSER as shown above. 2. Wait until the user list enumerates, then select the HCUSER from the list. You will see the user appear in the list under User/User Groups - click Save & Exit. Notice on the Assignment screen that both RDSH-APPS and RDSH-DESKTOPS now have an assignment count of "1". Page 133

134 Synchronize Identity Manager with Horizon Cloud From the previous exercises, click on the 3rd tab in the Chrome Browser window - make sure you are on the Horizon Cloud Resources screen as shown in the picture. Scroll down to the bottom of the browser window until you see the "Sync Now" button - click Sync Now. Page 134

135 You will now see Identity Manager sync with Horizon Cloud. You will see the updates for the entitlements we just added for RDSH applciations and desktops. Click Save and Continue to synchornize Horizon Cloud and Identity Manager. The synchronization process will run. When completed, it will return you to the "Horizon Cloud Resources" screen. Verify the sync was successful. Page 135

136 When the synchronization has been verified, clik on the "X" in the upper right corner of the screen to close out all the browser tabs and the browser window. You will now be back to the desktop of the main console, and ready to test launching Horizon Cloud apps and desktops using Identity Manager. Page 136

137 Launch an Application or Desktop Finally, let's test the configuration by launching a Horizon Cloud desktop or application using Identity Manager. Launching a Desktop or Application through Identity Manager - Horizon Client From the desktop, Launch Chrome. Page 137

138 Click on the VMware Workspace ONE link in the bookmark bar when the Chrome Browser has launched. If prompted with the "Select your domain" window, make sure corp.local is in the drop-down box, then click Next. Otherwise, skip this step. Page 138

139 1. Type in HCUSER as the username. 2. Type in VMware1! as the password. 3. Click Sign In. Click on Catalog. A list of applications and desktops will appear. On any of the icons, click Open. In this example, we clicked on the RDSH-DESKTOPS virtual desktop from Identity Manager. Page 139

140 If prompted, select Open Horizon Client to use the Horizon Client for accessing desktops and applications. Observe the launch of the Horizon Client. Page 140

141 You will see the virtual desktop show up on the Control Center VM. When you are done testing the desktop out, click on the Options Button in the upper left corner of the virtual desktop and choose Disconnect and Logoff to close out of the desktop. Click OK to confirm the disconnect and logoff actions. The desktop may take seconds to logoff. Page 141

142 Launching a Desktop or Application through Identity Manager - HTML5 Client Optionally, you can also launch a desktop or application through Identity Manager using an HTML5-compliant browser client. In this example, we will open WordPad using HTML5. 1. In the upper right corner of the screen, click on the "Person" icon as shown in the picture. 2. Click on Settings. Page 142

143 1. Click on Preferences. 2. Click on Browser to make HTML the default. Make sure the Check Mark is in the lower right corner of the screen. 3. Click Save. You will see a message that "Settings were successfully saved" at the top of the screen. 4. Click Back to go back to the catalog screen. Click Open to open the application. In this example, we are opening WordPad. Page 143

144 You will see the application begin to launch and open in a new browser tab. WordPad will open in the window. To move the control bar, click the three lines as shown in the pictures. This will open and close the control/menu bar on the left part of the screen. Feel free to test WordPad out using an HTML5 browser. When you are done, click the "X" on the browser tab (as shown in the picture) to close out of the application and return to the catalog window. Page 144