Horizon Cloud with On-Premises Infrastructure Administration

Transcription

1 Horizon Cloud with On-Premises Infrastructure Administration Horizon Cloud with On-Premises Infrastructure 1.2 VMware Horizon Cloud Service This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see EN

2 Horizon Cloud with On-Premises Infrastructure Administration You can find the most up-to-date technical documentation on the VMware Web site at: The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: Copyright 2016, 2017 VMware, Inc. All rights reserved. Copyright and trademark information. VMware, Inc Hillview Ave. Palo Alto, CA VMware, Inc.

3 Contents About Horizon Cloud with On-Premises Infrastructure Administration 5 Introduction to Horizon Cloud with On-Premises Infrastructure 5 Horizon Cloud with On-Premises Infrastructure Architecture 6 Suggested Workflow 7 Join or Leave the Customer Experience Improvement Program 7 Contacting VMware Support 8 1 Configure the Horizon Air Nodes 9 Log In to an Administration Console 11 2 Register Active Directory 13 3 Getting Started Page 15 4 General Setup 17 About File Shares 17 Create a File Share 18 Upload Certificates 18 Add or Change Roles and Permissions for Horizon Cloud with On-Premises Infrastructure 19 5 Creating a Desktop Image 21 Prerequisites for Building a Master Virtual Machine 21 Configure the Master Virtual Machine 22 Optimize Guest OS Performance 24 Optimize Windows for Instant Clone Virtual Machines 25 Install and Configure VMware Agents 26 Export the Master Virtual Machine 27 6 Desktop Assignment 29 Create an Image in the Administration Console 30 Types of Desktop Assignments 32 Create a Dedicated or Floating Desktop Assignment 33 7 App Assignment 35 Managing Applications for Deployment with AppCapture 35 Copy AppStacks to File Shares 47 Import AppStacks 47 Delete an AppStack 47 Create an Application Assignment 48 VMware, Inc. 3

4 Horizon Cloud with On-Premises Infrastructure Administration 8 Working with Writable Volumes 49 Create a Writable Volume Assignment 50 Delete a Writable Volume 51 9 Managing Assignments 53 View an Assignment 53 Edit an Assignment 54 Resizing a Desktop Assignment 55 Delete a Desktop Assignment 55 Delete an Application or Writable Volume Assignment 56 Recover a Desktop Assignment About Menu Selections 57 The Monitor Icon 57 Assign Icon 59 Inventory Icon 60 The Settings Icon Managing Horizon Air Nodes 67 Monitor Horizon Air Node Health 67 Perform Maintenance on Horizon Air Node 68 Shutting Down the Horizon Air Nodes 69 Upgrading Horizon Cloud with On-Premises Infrastructure Access Desktops and Applications 75 Log In to the Desktop Using the Horizon Client 75 Log In to the Desktop Using a Browser 76 Index 77 4 VMware, Inc.

5 About Horizon Cloud with On-Premises Infrastructure Administration Horizon Cloud with On-Premises Infrastructure Administration explains how to create, deploy, and administer virtual desktops and applications from the Horizon Cloud with On-Premises Infrastructure Administration Console. It describes how to use the product after you complete all of the tasks outlined in the Horizon Cloud with On-Premises Infrastructure Installation and Configuration Guide. Intended Audience This document is intended for experienced IT system administrators who are familiar with virtual machine technology and datacenter operations. VMware Information Experience Glossary VMware Information Experience provides a glossary of terms that might be unfamiliar to you. For definitions of terms as they are used in VMware technical documentation, go to Introduction to Horizon Cloud with On-Premises Infrastructure With Horizon Cloud with On-Premises Infrastructure, end users can securely access their desktops and applications from any device. After you deploy the Horizon Air Node, you can use the Administration Console to configure desktop and application assignments. Horizon Cloud with On-Premises Infrastructure consists of a cloud service, Horizon Cloud Services, which pairs with an on-premises component, Horizon Air Node. Horizon Cloud Services Horizon Air Node A control plane hosted in the cloud by VMware for central orchestration and management of virtual desktops, applications, and user profiles on an onpremises infrastructure. Optimized hardware, Virtual SAN Ready Nodes or EMC VxRail appliances, connected to the cloud control plane by way of integrated Horizon Cloud with On-Premises Infrastructure connector software. The Horizon Cloud with On-Premises Infrastructure service provides you with access to the Horizon Cloud with On-Premises Infrastructure Administration Console, also referred to as the Horizon Cloud Manager, plus the software necessary to perform the following tasks. Pair the on-premises hardware with the cloud control plane. Deliver virtual desktops and manage applications. VMware, Inc. 5

6 Horizon Cloud with On-Premises Infrastructure Administration Horizon Cloud with On-Premises Infrastructure Architecture Horizon Cloud with On-Premises Infrastructure consists of a cloud service and on premise equipment. Architecture Horizon Cloud Services is a control plane that VMware hosts in the cloud. It enables the central orchestration and management of virtual desktops, applications, and user profiles on an on-premises infrastructure. Cloud Control Plane Horizon Cloud Manager UI Horizon Cloud Services Admin Cloud Pairing & Connectivity External Users On-Premises Virtual Desktops & Apps Horizon Air Node Virtual Desktops & Apps Authentication in DMZ Internal Users VMware is responsible for hosting the service and providing feature updates and enhancements for a software-as-a-service experience. The cloud control plane also hosts a common management user interface called Horizon Cloud Manager, also referred to as the Horizon Cloud with On-Premises Infrastructure Administration Console. The Horizon Cloud Manager is accessible from all major browsers and provides IT administrators a single location for managing desktop images, applications, user data, profiles, and assignments. The Horizon Cloud Manager is accessible from anywhere at any time, providing maximum flexibility. Horizon Air Node Horizon Air Node uses a field-installable bootstrap appliance called Horizon Air Link to pair with Horizon Cloud Services at installation time. Horizon Air Link orchestrates the initial setup and pairing with the cloud control plane for ongoing management and communication. The Cloud Connector provides connectivity to the cloud without requiring a dedicated site-to-site VPN. Horizon Air Link (Bootstrap Appliance) Cloud Connector Instant Clone Provisioning App Volumes Manager Horizon Air Platform Converged & Hyper-Converged Infrastructure with vsphere, Virtual SAN 6 VMware, Inc.

7 About Horizon Cloud with On-Premises Infrastructure Administration After the Horizon Air Link completes the build, seven appliances are running on a supported hyperconverged infrastructure, such as Virtual SAN Ready Nodes. Horizon Air Link(boot appliance) Horizon Air Node Manager Resource Manager Tenant Appliance The Horizon Air Platform, App Volumes, the Cloud Connector, and the Instant Clone engine are installed in these appliances. You can use VMware Access Point appliances to access end user desktops externally to the corporate network. End users can use any of the following devices or methods to access their desktops. Windows, OS X, Chrome, Linux, ios, or Android Horizon Clients. Horizon Thin Clients HTML Access using a supported browser. Suggested Workflow You must install Horizon Cloud with On-Premises Infrastructure on a hyper-converged infrastructure before you start to set up and deploy your desktops. 1 Install and configure the Horizon Cloud with On-Premises Infrastructure on a hyper-converged infrastructure as described in Horizon Cloud with On-Premises Infrastructure Installation and Configuration. 2 Pair the node with the cloud and perform basic configuration. See Chapter 1, Configure the Horizon Air Nodes, on page 9. 3 Perform a domain join and domain bind as described in Chapter 2, Register Active Directory, on page Upload SSL certificates. See Upload Certificates, on page 18 for details. 5 Create a desktop image as described in Chapter 5, Creating a Desktop Image, on page Capture App Stacks as described in Managing Applications for Deployment with AppCapture, on page Create a desktop service and assignments. See Chapter 6, Desktop Assignment, on page Create an application service and assignments as described in Chapter 7, App Assignment, on page 35. After the setup is complete, end users can launch desktops and applications. Join or Leave the Customer Experience Improvement Program The VMware Customer Experience Improvement Program (CEIP) provides information that VMware uses to improve its products and services, to fix problems, and to advise you on how best to deploy and use VMware products. Horizon Cloud with On-Premises Infrastructure participates in the VMware CEIP. Information about the data collected through CEIP and how VMware uses it are in the Trust & Assurance Center at The CEIP appears the first time you start Horizon Cloud with On-Premises Infrastructure after completing the domain join. You must then make a selection. You can change your selection at any time after that. VMware, Inc. 7

8 Horizon Cloud with On-Premises Infrastructure Administration 1 Start the Horizon Cloud with On-Premises Infrastructure Administration Console. 2 Select Help > CEIP. 3 Move the slider next to Join Customer Experience Improvement Program to No to leave CEIP or Yes to join. The default is Yes. 4 Click Save. Contacting VMware Support Contact VMware Support when you need help with Horizon Cloud with On-Premises Infrastructure. You can submit a Support Request to VMware Support online using your My VMware account or by phone. KB Customer Support Guidelines provides details for getting support depending on the issue encountered. After you and install and configure Horizon Cloud with On-Premises Infrastructure, log in to the Administration Console, click Help in the upper-right corner of the page, and select Support. 8 VMware, Inc.

9 Configure the Horizon Air Nodes 1 You must perform this onboarding procedure for each Horizon Air Node that you want to pair with Horizon Cloud Services. You configure Horizon Cloud with On-Premises Infrastructure nodes from a Web browser by using My VMware credentials. Managing multiple Horizon Air Nodes is advantageous in the following situations. If you operate in multiple geographical locations, having one node physically located in each office can lower the latency. You can use a second Horizon Air Node as a test environment, where you can test images and applications outside of the production environment. If you scale beyond the current limits of the hardware, you can add nodes to additional hardware to meet the demand. Prerequisites Verify that a Virtual SAN Ready Node cluster is set up for each Horizon Air Node that you plan to deploy. Deploy an instance of Horizon Air Link for each Horizon Air Node that you plan to deploy. The URL to the Horizon Air Link Appliance is Air Link appliance IP>:8443. If you do not know the IP address of the Horizon Air Link appliance, start the remote console session for the Horizon Air Link appliance from vcenter. The IP address appears on the blue page. See the Horizon Cloud with On-Premises Infrastructure Installation and Configuration Guide. During node configuration, the bottom of the page displays a link to Support Bundle. If something occurs that requires you to send support logs to VMware for review, click the link. A ZIP file containing the logs is downloaded to your browser. Contact VMware Support as described in KB Navigate to Air Link appliance IP>: At the Horizon Cloud with On-Premises Infrastructure Setup page, log in using the My VMware credentials that you used to register for the Horizon Cloud with On-Premises Infrastructure service. 3 Click Login. VMware, Inc. 9

10 Horizon Cloud with On-Premises Infrastructure Administration 4 If prompted either to review the End User License Agreement or to respond to offline nodes, take the appropriate action. Option Offline Nodes End User License Agreement The Offline Nodes dialog box appears when you attempt to onboard a node. The system detects that one or more existing nodes are in an offline state, giving you the opportunity to delete offline nodes. If you are absolutely certain that you want to delete an offline node, click Yes, then click the + button to continue the configuration of the node you started. The license agreement appears when you configure the first Horizon Air Node. Select the check box to accept and click Next. The license agreement does not appear when you configure subsequent nodes. 5 On the vsphere Configuration page, enter vcenter credentials as requested and click Next. Provide the user name in the format of username@domain.com. 6 If a certificate was loaded to vcenter that cannot be automatically validated, review and verify the certificate details in the vcenter Server Certificate section and click Next. 7 Enter the hardware description and network information. Option Hardware Backbone Network Action Enter hardware and data center information. For example, the name of the Horizon Air Node, location, and optional description. You can also create a new data center location, or edit an existing one. Select a backbone network for this configuration from the drop-down menu. Management Network a Select a network from the drop-down menu. b c enter an IP address for the gateway and a subnet mask. Assign at least 10 contiguous IP addresses in the IP Range Min and IP Range Max text boxes. Desktop Network Additional Information Enter network information, including an assigned range of three contiguous IP addresses in the same subnet as the gateway. The subnet must include the desktop IP addresses for end-user desktops, which get IP addresses from DHCP. The subnet must be large enough to contain all end-user desktops and DHCP must be configured to serve IP addresses to those desktops. Enter IP addresses for NTP and DNS servers. 8 Click Next. The system begins downloading binaries from the cloud. The download time varies based on location and network conditions. Typically, the download finishes in less than 45 minutes. You can close the browser now. After the download process finishes, the system builds the virtual machines, which takes approximately minutes. After the virtual machines are built, a check is done to confirm that a connection exists to the Horizon Cloud Service. 9 If the confirmation page remains open for more than a few seconds, click More Information to determine which IP addresses need outbound access. 10 To receive an when the process finishes, enter your address and click Submit. 11 (Optional) If you close the browser and want to reconnect to check the progress, repeat Step 1 and reauthenticate using your My VMware credentials. A congratulations page appears when the node is successfully deployed. 10 VMware, Inc.

11 Chapter 1 Configure the Horizon Air Nodes What to do next Log in to the Administration Console of a specific node to manage that node. Log In to an Administration Console The process of logging in to an Administration Console varies depending on whether you configured multiple Horizon Air Nodes and if you finished the Active Directory domain join procedure. 1 Navigate to 2 Log in with your My VMware credentials. 3 If you join more than one Horizon Air Node to the environment, when you log in, select which node to manage. 4 To manage a different node, log out, and log in again selecting the new node to manage. 5 Perform the remaining log-in requirements. Option A single Horizon Air Node is joined to your account. The system does not present a node-selector page. Multiple Horizon Air Nodes are joined to your account. The system presents a node-selector page. When you move the pointer is over the icons, a summary for each node appears, including the downloading, building, readiness, and connection status. No action for you to perform. Select the Horizon Air Node to log in to. Depending on the number of Horizon Air Nodes joined to your account, after you provide your My VMware credentials, you might encounter an additional page. The Administration Console for the selected Horizon Air Node appears. What to do next If applicable, register the Active Directory and finish the domain join. See Chapter 2, Register Active Directory, on page 13. You must finish the entire Active Directory registration process before you can work with any other services. VMware, Inc. 11

12 Horizon Cloud with On-Premises Infrastructure Administration 12 VMware, Inc.

13 Register Active Directory 2 You must finish Horizon Cloud with On-Premises Infrastructure configuration by registering Active Directory, finishing the domain join, and adding the Super Administrator. Note You must finish the entire Active Directory registration process before you can work with any other services. All services are locked until you finish these tasks. Prerequisites Ensure that the Active Directory infrastructure is synchronized to an accurate time source to prevent the domain join from failing. Such a failure requires you to contact VMware Support for assistance. 1 From the Getting Started page, select General Setup. 2 Under Active Directory, click Edit. Note The first time you are configure Active Directory, the button is labeled Configure. 3 In the Register Active Directory dialog box, provide the requested registration information. Note For this step, use an Active Directory account that adheres to the following guidelines. Is an Active Directory domain admin account. Has an account password that cannot expire, change, or be locked out. You must configure the account in this manner because the account is a service account used by the system to query Active Directory. Option NETBIOS Name DNS Domain Name Protocol Bind Username Bind Password Port Domain Controller IP Context Active Directory domain name Fully qualified Active Directory domain name LDAP or LDAPS, depending on your Active Directory setup Domain administrator Domain administrator password The defaults for this text box are: LDAP -> 389 and LDAPS -> 636. You do not need to modify this text box unless you are using a non-standard port. (Optional) Provide a single preferred domain controller IP address if you want Active Directory traffic to use a specific domain controller. This option is autopopulated based on the DNS Domain Name information provided earlier. VMware, Inc. 13

14 Horizon Cloud with On-Premises Infrastructure Administration 4 Click Domain Bind. 5 In the Domain Join dialog box, provide the domain-join information. Note The Active Directory account you use for this step performs Sysprep operations on desktops and joins the desktops to the domain. Therefore, the account must have domain-join permissions. The account might or might not be the same account used in Step 3. Option Join Username Join Password Primary DNS Server IP Secondary DNS Server IP Domain administrator Domain administrator password IP address of primary DNS Server (Optional) IP of secondary DNS Server 6 Click Save. 7 In the Add Super Administrator dialog box, use the Active Directory search function to select the Active Directory administrator group to administer Horizon Cloud with On-Premises Infrastructure. 8 Click Save. 9 If the domain bind or domain join process fails, you must restart the registration process. a b c d Restart the browser. Log in first using your My VMware account. Log in to the Active Directory account using the domain service (bind) account user name and password. Continue with the domain join process. 10 If you click Cancel before you finish the registration, you can click Edit at any time from the Getting Started page to continue with registration. 14 VMware, Inc.

15 Getting Started Page 3 When you install Horizon Cloud with On-Premises Infrastructure, you must perform certain tasks to configure the service before you can run it. After you set up and install the Horizon Air Node and log in to the Horizon Cloud with On-Premises Infrastructure Administration Console for the first time, register the Active Directory as described in Chapter 2, Register Active Directory, on page 13. When you finish registering, you can start working in the Administrator Console. The Getting Started page provides a high-level overview of the work that you have done, and what you still need to do. You can access this page at any time by clicking the Getting Started icon in the top right corner of the page. The Getting Started icon is an arrow that resembles a play button. Note Review the steps in Suggested Workflow, on page 7 to ensure that you completed all tasks required to run Horizon Cloud with On-Premises Infrastructure. You cannot perform certain tasks from the Getting Started page, for example, uploading certificates. Table 3 1. Getting Started Page Selections Option Infrastructure General Setup Desktop Assignment App Assignment Displays details for the Horizon Air Node that you set up and installed. Provides details and links to where you can edit Active Directory, and Roles and Permissions settings. See Chapter 4, General Setup, on page 17. Provides links to pages where you can convert an image to a desktop, and create a new desktop assignment. See Chapter 6, Desktop Assignment, on page 29. Provides links to where you can create new application assignments. See Chapter 7, App Assignment, on page 35. At the bottom of the page, use the slider to indicate if you want the Getting Started page to appear at startup. VMware, Inc. 15

16 Horizon Cloud with On-Premises Infrastructure Administration 16 VMware, Inc.

17 General Setup 4 Use the General Setup section to configure or edit Active Directory settings and define roles and permissions. The General Setup page provides access to the Active Directory and Roles and Permissions functions. Selection Active Directory Roles and Permissions FileShare Location Register an active directory and add domain bind and domain join information. Domain registration is required in order to add Admin users to Roles and Permissions or assign Services to users. You must register your Active Directory and complete the domain join before you can do anything else. See Chapter 2, Register Active Directory, on page 13 for details. Create roles and assign permissions to users who will be managing the environment. See Add or Change Roles and Permissions for Horizon Cloud with On-Premises Infrastructure, on page 19. Register one or more CIFS shares where you will copy the master image OVAs and the applications generated by AppCapture This chapter includes the following topics: About File Shares, on page 17 Create a File Share, on page 18 Upload Certificates, on page 18 Add or Change Roles and Permissions for Horizon Cloud with On-Premises Infrastructure, on page 19 About File Shares Use file shares to import AppStacks and master virtual machine OVA files. You can use file shares to import AppStacks and OVA files. You create AppStacks using AppCapture. See Using AppCapture, on page 36. AppStacks that are already present in the file share are imported when the file share is added. To import AppStacks after the file share is added, see Import AppStacks, on page 47. An OVA is the exported master virtual machine file that you use to create desktop assignments. See Export the Master Virtual Machine, on page 27. VMware, Inc. 17

18 Horizon Cloud with On-Premises Infrastructure Administration File shares can be in the same domain as the Active Directory that is added to Horizon Cloud with On-Premises Infrastructure. They can also be part of a CIFS share. Horizon Cloud with On-Premises Infrastructure must have read permissions on your file shares. You cannot remove a file share after it is created. If you entered the wrong file path, edit the file share from the Administration Console and import it again. Create a File Share You use file shares to import desktop images and AppStacks. See Copy AppStacks to File Shares, on page 47. Note After you create a file share, you cannot remove it. If you entered the wrong file path, just edit the file share from the Administrator console and import it again. 1 Select Settings > Locations and click File Share. 2 Click New. 3 Provide the required information in the New File Share dialog box. Option Name Domain Username Password Type Source Path Destination Pod Name of the file share. This option defaults to the domain joined with the Active Directory domain bind. Admin user for the file share. Admin password for the file share. Type of file share. Path to file share, such as \\share IP\sharename. The pod for Applications on this file share to be copied to. 4 Click Save. Upload Certificates Upload SSL certificates to ensure that end users have a trusted connection to their environment. Note During this procedure, the environment is temporarily unavailable and you cannot perform administrator operations. Upload the certificates after confirming that no users are on the system and no tasks, such as importing AppStacks, publishing images, provisioning desktops, assigning desktops, and so on, are running. You must upload the CA.crt and SSL.crt files, and the.key private key. The CA certificate and the SSL certificate must be in PEM format, which is a BASE64-encoded DER representation of an X.509 certificate. They both have a.crt extension, and look like this: -----BEGIN CERTIFICATE----- MIIFejCCA2KgAwIBAgIDAIi/MA0GCSqG VMware, Inc.

19 Chapter 4 General Setup The private key must not have a password or passphrase associated with it. The.key file looks like this: -----BEGIN RSA PRIVATE KEY MIIEpQIBAAKCAQEAoJmURboiFut+R34CNFibb9fjtI+cpDarUzqe8oGKFzEE/jmj... 1 Select Settings > General Settings. 2 Click Upload Certificate. 3 For each of the certificate files listed in the Upload Certificate dialog box, click Select and navigate to the appropriate file. 4 When all of the certificate files are selected, click Save. The console will be unresponsive for 5 to10 minutes for all administrators while the certificates are applied. 5 When the system is responsive again, refresh the browser page and use your credentials to reauthenticate. 6 Verify that the certificates are valid on the General Settings page. Add or Change Roles and Permissions for Horizon Cloud with On-Premises Infrastructure Role-based access lets you control who has access to the management console. You can assign a super administrator role and a demo administrator role. Note To externally access this management console, see Deploying and Configuring Access Point, available from the Horizon Cloud with On-Premises Infrastructure documentation Web page. 1 On the Getting Started page, select General Setup. 2 Click Edit for the Roles & Permissions option. 3 Select an option in the Role drop-down menu. Option Super Administrator Demo Administrator A mandatory role that must apply to at least one group. The role gives the administrator rights to configure the Horizon Cloud with On-Premises Infrastructure Administration Console. An optional role that you can assign to one or more groups. Demo administrators can view the settings and select options, but the selection does not change the configuration settings. 4 Add or delete groups. The system requires the existence of at least one super administrator. 5 Click Save. VMware, Inc. 19

20 Horizon Cloud with On-Premises Infrastructure Administration 20 VMware, Inc.

21 Creating a Desktop Image 5 You must create and configure an image before you can start assigning desktops. Creating an image is a two-step process. First, create and configure a master virtual machine. See Configure the Master Virtual Machine, on page 22. Then, import and convert the master virtual machine to a new image in the Administration Console. See Create an Image in the Administration Console, on page 30. This image is used as the OS on your virtual desktops. Once you have an image, you can start creating desktop assignments. See Create a Dedicated or Floating Desktop Assignment, on page 33. This chapter includes the following topics: Prerequisites for Building a Master Virtual Machine, on page 21 Configure the Master Virtual Machine, on page 22 Optimize Guest OS Performance, on page 24 Optimize Windows for Instant Clone Virtual Machines, on page 25 Install and Configure VMware Agents, on page 26 Export the Master Virtual Machine, on page 27 Prerequisites for Building a Master Virtual Machine You must complete several tasks before you can build the master virtual machine. Take a snapshot after each task so that you can revert to a known state if a problem occurs. Complete the following tasks before you build the master virtual machine. Create a virtual machine. Download the DaaS SSL bootstrap. Determine the tenant appliance IP addresses. VMware, Inc. 21

22 Horizon Cloud with On-Premises Infrastructure Administration Download the DaaS SSL Bootstrap The bootstrap process allows the guest virtual machine and the Horizon Cloud with On-Premises Infrastructure appliance to pair with each other securely. 1 Select Inventory > Images. 2 On the Images page, select... > Download Bootstrap. 3 Enter and re-enter a password of 8-20 ASCII characters containing at least one each of the following: lowercase letter, uppercase letter, number, and symbol (!@#$%^&*). Do not use non-ascii characters in the password. Make a note of this password for future use. 4 Save the file in a safe location for later use. Determine Tenant Appliance IP Addresses The tenant appliance IP addresses are used for DaaS Agent, Horizon Client, and HTML Access configuration and for building a master virtual machine for the desktop image. 1 In the Administration Console, select Settings > Infrastructure. 2 Create a DNS record for the tenant appliance floating IP, for example, mydesktops.mycorp.com. This address becomes the server address that end users use when they use the Horizon Client or HTML Access to access their desktops. Create a Virtual Machine You must create a virtual machine before you can build a master virtual machine for the desktop image. Use a single socket, single core master virtual machine when publishing an image. If a master virtual machine with multiple sockets and cores is used in conjunction with Standard Desktop Model, which has a single socket and core, the master virtual machine must be reconfigured to reduce the number of sockets and cores to one. This reduction might introduce instability on running virtual machines. u Use VMware vcenter, VMware Fusion Pro, or VMware Workstation Pro to create a virtual machine and install the Windows guest operating system on it. Build master virtual machines with a single virtual disk. Horizon Cloud with On-Premises Infrastructure supports Windows 7 or Windows 10 (x86 or x64). Use hardware version 11 for vsphere 6.x. Configure the Master Virtual Machine You must perform several additional tasks to complete the master virtual machine configuration. For more information about the KMS Client Setup Keys, see Prerequisites Complete all of the tasks outlined in Prerequisites for Building a Master Virtual Machine, on page VMware, Inc.

23 Chapter 5 Creating a Desktop Image 1 Enable the administrator account. a b c Open an elevated command prompt. Enter net user administrator /active:yes. Select Control Panel > User Accounts and set the administrator password. 2 Install VMware Tools. a In VMware Workstation, select VM > Guest, then select Install/Upgrade VMware Tools. b c d e Click OK. Open an elevated command prompt. Change directory to the CDROM drive. When the VMware Tools installation finishes, restart the virtual machine for the changes to take effect. 3 In the Control Panel, configure the network settings. Setting Network DNS Servers IPv6 Value(s) Name of network IP addresses of DNS servers Disable (deselect check box) 4 In the virtual machine settings, set the adapter type to VMXNET 3. 5 For Windows 7 SP1 Guest OS, install the network adapter hotfix for VMXNET 3 from 6 Install Windows Updates as required. 7 Set up KMS. a b Open an elevated command prompt and enter slmgr /ipk 25-digit_license_key to set up the Client Setup Key. Enter slmgr /skms kms_server_ip_or_host_name:port to specify the KMS server. Note Do not activate the master virtual machine. The VMware Horizon Instant Clone Agent activates the clones during customization. c Enter slmgr /dlv to verify setup and KMS server details. What to do next Optimize Guest OS Performance, on page 24 and Optimize Windows for Instant Clone Virtual Machines, on page 25, then install and configure the agents. VMware, Inc. 23

24 Horizon Cloud with On-Premises Infrastructure Administration Optimize Guest OS Performance You can optimize guest operating system performance to optimize performance for remote desktop deployment. 1 Disable, delete, remove, or turn off items to optimize performance. Option Unused ports, such as COM1, COM2, and LPT Unnecessary services Indexing Service component System Restore points Uninstall folders on C:\Windows, such as $NtUninstallKB893756$ All event logs Setting that tracks the last time a file was accessed Set Disk Timeout on Windows Guest OS Disk Cleanup Disk Defragmenter System protection on the C drive Automatic computer maintenance Tablet PC Components Action Disable. Disable. Disable. Indexing improves searches by cataloging files. Do not disable this feature for users who search often. Remove or minimize. Delete. Delete. Run the fsutil command to disable this setting. For example: fsutil behavior set disablelastaccess 1. Run the regedit.exe command to start the Registry Editor and change the TimeOutValue REG_DWORD in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Disk to 0x000000be(190). After you make this change, Windows waits at least 190 seconds for delayed disk operations to complete before generating errors. Run to remove temporary and system files, empty Recycle Bin. Run to rearrange fragmented data. Turn off. Turn off. Uninstall, unless you need this feature. 2 Adjust display properties. a b c d Choose a basic theme. Set the background to a solid color. Set the screen saver to None. Verify that hardware acceleration is enabled. 3 Select a high-performance power option and do not specify a sleep timer. 4 Set the sound scheme to No Sounds. 5 Set visual effects to Adjust for best performance. 6 Open Windows Media Player and use the default settings. 24 VMware, Inc.

25 Chapter 5 Creating a Desktop Image 7 Turn off the Windows Customer Experience Improvement Program and disable related tasks from the Scheduler. These steps apply to Windows 7. The steps might vary for different Windows operating systems. a b In the Windows 7 guest operating system control panel, select Action Center > Change Action Center settings. Click Customer Experience Improvement Program settings, select No, I don't want to participate in this program, and click Save changes. c In the Task Scheduler (Local) pane of the Task Scheduler dialog box, select Task Scheduler > Library > Microsoft, expand the Windows nodes, and open the Applications Experience folder. d e Disable the AIT Agent, ProgramDataUpdater, and if available, Microsoft Compatibility Appraiser tasks. Open the Autochk folder and disable the Proxy task. 8 Shut down the guest operating system, power off the virtual machine, and power it back on. Optimize Windows for Instant Clone Virtual Machines You can disable certain Windows 7 services and tasks to reduce the growth of instant clone virtual machines. Instant clone technology uses vsphere vmfork technology to quiesce a running base image, or parent virtual machine, and hot-clone it to create a pool of up to 1,000 instant clones. Instant clones share the virtual disks and memory of the parent virtual machine at the time of creation. Each instant clone acts like an independent desktop, with a unique host name and IP address, but it requires less storage, reducing the capacity requirement by 50 to 90 percent. The overall memory requirement is also reduced. Instant clones can also be guest customized and join an Active Directory domain while completing the initial booting process. Instant clones are always created in a power-on state and ready for user to log in. After a user logs in and starts to use the desktop, the capacity requirement grows. When the user logs out, the instant clone is refreshed and shrinks back to its original size. By disabling certain Windows 7 and Windows 10 service and tasks, you can reduce the growth in disk use of instant clones during the time that users are logged in. For more information about disabling these services, see Setting Up Desktop and Application Pools in View for VMware Horizon 7. To optimize performance, disable these items on Windows parent virtual machines. Scheduled disk defragmentation Windows Update Service Diagnostic Policy Service Prefetch and Superfetch features Windows Registry backup System Restore Windows Defender Microsoft Feeds Synchronization VMware, Inc. 25

26 Horizon Cloud with On-Premises Infrastructure Administration Install and Configure VMware Agents Install and configure the respective VMware agents in a specific order before you configure the DaaS Agent. Prerequisites Verify that the master virtual machine is set up. See Configure the Master Virtual Machine, on page 22. Download the agent installation files from 1 Install the Horizon Agent. a b c d e Run the installer with viewagent-installer.exe if using vcenter to create the master virtual machine. Run the installer with viewagent-installer.exe /vvdm_skip_broker_registration=1 if using nonvcenter environments to author the virtual machine. Disable the VMware Horizon View Composer Agent. Enable the VMware Horizon Instant Clone Agent. Reboot when prompted. 2 Install the DaaS Agent. 3 Run the App Volumes Unified Agent Installer and select Horizon Air Hybrid-Mode. What to do next For improved security regarding the use of the Horizon Agent, disable weak ciphers in SSL and TLS, which requires you to edit the Group Policy Object (GPO) of the Active Directory server. See the appropriate Horizon Agent documentation for information about disabling weak ciphers in SSL/TLS, such as in the VMware Horizon 7 documentation set. Configure the DaaS Agent You can configure the DaaS Agent by using DHCP or by editing the Monitor.ini file. Prerequisites Find the tenant appliance address. See Determine Tenant Appliance IP Addresses, on page 22. Install the DaaS Agent. See Install and Configure VMware Agents, on page 26 Download the DaaS SSL bootstrap. See Download the DaaS SSL Bootstrap, on page 22 In the guest operating system image, open a command prompt as administrator and navigate to the DaaS Agent installation directory. C:\Program Files (x86)\vmware\vmware DaaS Agent\service Confirm that the Keytool.exe file is accessible to the guest image and run the file with the bootstrap file as an argument. You can ensure that the Keytool.exe file is accessible to the guest image by copying it to the image or accessing it through a network file share. Keytool.exe f "absolute path for bootstrap file" When prompted, enter the encryption password. 26 VMware, Inc.

27 Chapter 5 Creating a Desktop Image You set the encryption password when you downloaded the DaaS SSL bootstrap. See Download the DaaS SSL Bootstrap, on page 22. The Keytool utility performs the bootstrap and moves the certificate to the cert folder. u Configure the DaaS Agent using whichever method best suits your needs. However, DHCP is the recommended configuration option. Option Use DHCP a On the DHCP server, select Control Panel > Administrative Tools to open the DHCP configuration client. b Right-click Server Options and select Configure Options. c Click the scope and right-click Scope Options to configure the 074 option code for that scope only. Configuration is the same as for the entire DHCP server. d e If you defined limited addresses, you can confine the configuration of the options to a specific scope. Configuration is the same as for the entire DHCP server. Scroll down to the 074 option for Internet Relay Chat (IRC) and select the check box. Add IP addresses for tenant appliances. Enter the Monitor.ini File a Navigate to the directory that contains the MonitorAgent.ini file. b c 64-bit: C:\Program Files (x86)\vmware\vmware DaaS Agent\service 32-bit: C:\Program Files\VMware\Vmware DaaS Agent\service Open the MonitorAgent.ini file for editing. In the [element] section, uncomment the standby_address and add the horizon-air-node-ta1/horizon-air-node-ta2 appliance IP addresses, separated by a comma. For example: standby_address= , d Set auto discover to 0. e Save and close the file. Export the Master Virtual Machine After you configure the agents, you must export the Master virtual machine and copy it to the file share so that you can create a desktop image. You must export the master virtual machine as an OVA file. Prerequisites Create a file share. See Create a File Share, on page 18. Create and configure a master virtual machine.. 1 Export the master virtual machine as an OVA file. 2 Note the location so that you can copy the master virtual machine to the file share. VMware, Inc. 27

28 Horizon Cloud with On-Premises Infrastructure Administration 3 Copy the OVA file to the root directory of the file share. Note Subfolders are not supported on the file share. After the OVA file is copied to the file share, it is automatically deployed to the Horizon Cloud with On-Premises Infrastructure vcenter and is powered on. The process takes a few minutes. 28 VMware, Inc.

29 Desktop Assignment 6 Use the Desktop Assignment section to create a desktop image and set up desktop assignments. The Desktop Assignment section of the Getting Started page provides starting points for these actions. Action Create Image Create New Desktop Assignment At least one image is required for desktop assignment. An image is used as the OS on your virtual desktop(s). Click Go to access the Images page where you can create and edit images as well as perform other actions. You can also access this page from Inventory > Images. See Create an Image in the Administration Console, on page 30 for details. Create a set of virtual desktops and assign them to users. Click Go to access the Assignments page where you can create and edit assignments as well as perform other actions. You can also access this page from the Assign icon. See Create a Dedicated or Floating Desktop Assignment, on page 33 for details. This chapter includes the following topics: Create an Image in the Administration Console, on page 30 Types of Desktop Assignments, on page 32 Create a Dedicated or Floating Desktop Assignment, on page 33 VMware, Inc. 29

30 Horizon Cloud with On-Premises Infrastructure Administration Create an Image in the Administration Console Create a new desktop image from the Images page. After you copy the master virtual machine to the Horizon Air Node file share, you can create a new desktop image. Note When you use Horizon Cloud with On-Premises Infrastructure for the Blast Extreme or PCoIP display protocols, the correct video RAM value is dependent on the number of displays configured for end users and on the display resolution. The typical recommendation for a four monitor setup is 128 MB. For lower screen resolutions or fewer monitors, configure lower video RAM to save base memory for additional desktops. When you are allocating RAM, avoid choosing an overly conservative setting and take into account that insufficient RAM allocations can cause excessive Windows paging. Excessive Windows paging can generate I/O that causes significant performance degradations and increases storage I/O load. Configure video RAM in the base virtual machine image configuration. To do that, edit the hardware settings of the virtual machine when it is powered off. If you require the desktop image to be registered against an OU in Active Directory other than CN=Computers, see the Image Defaults Configuration option. Prerequisites Export the master virtual machine OVA file. See Export the Master Virtual Machine, on page In the Administration Console, select Inventory > Images and click New. 2 Enter the required information. Option Desktop Image Name Domain Company Name TimeZone Start typing the first few letters of the master virtual machine name. All desktops that can be converted to an image will display. Note that it takes approximately 10 minutes after the Master virtual machine import for the inventory to display. Select the name when it appears. Make sure that the desktop is powered on prior to conversion. After you enter a desktop name, the Image Name text box is auto-populated. You can edit the auto-populated image name. Required desktop Active Directory domain name. Your company name. Ignore this setting 3 Click Publish. The publishing process takes several minutes to complete. If successful, the Image task shows as Complete. Note Do not restore a virtual machine to a snapshot taken prior to the bootstrapping process. If the agent has already been bootstrapped, reverting the virtual machine to a snapshot prevents the agent from communicating properly. 4 If the publish operation fails, select Monitor > Activity and locate the failed job. 30 VMware, Inc.

31 Chapter 6 Desktop Assignment 5 Correct the problem, then retry the publish operation a b c Select Inventory > Images and select the check box next to the image. Click... and select Convert to Desktop. Select New and follow Step 1 to Step 5b to publish the image. Actions You Can Perform on Images You can perform several actions on an image. 1 Select Inventory > Images. 2 Select the check box next to the image on which you want to perform an action. 3 Perform an action on the image according to the selection method. To rename or duplicate an image, click the appropriate button. Button Rename Duplicate Enter a new image name and click Save. Enter a new name and click Save. To perform one of the other available actions, click... and select the drop-down option of your choice. Drop-Down Option Delete Convert to Desktop Assign Image Download Bootstrap Refresh Password Permanently deletes the selected image. Converts the selected image to a desktop. Assigns the updated image to the selected desktop assignment. Select the assignment from the list and click OK. Downloads an encrypted bootstrap file for you to deploy to your image(s). You will be prompted to enter a password of 8-20 ASCII characters containing at least one each of the following: lowercase letter, uppercase letter, number, and symbol (!@#$%^&*). Do not use non-ascii characters in the password. If you do this after having downloaded a bootstrap file but before applying the bootstrap file using keytool, then the resultant agents will not be able to pair. Therefore, it is recommended that you download the bootstrap file again after refreshing the password. Update Image and Push Changes to Assignments After you publish your initial image and create your assignments, you can make changes to that image and push the changes to your desktop assignments. You can update the image in place in vcenter by making a copy of the image. You can also perform the update offline and drop the new images to the file share. Important If you perform the update offline, make sure that the OVA file has a different internal name than the previous image that you are replacing. Images with duplicate names fail to deploy to vcenter. 1 Select Inventory > Images and select the check box next to your image. 2 Click Duplicate, name the new virtual machine and click Save. VMware, Inc. 31

32 Horizon Cloud with On-Premises Infrastructure Administration 3 Select Monitor > Activity to track the copy process, and verify that the status is successful. It can take a few minutes for the desktop to be available for selection after the copy process finishes. 4 Select Inventory > Images and select New. 5 In the Desktop field, start typing the name of your new master virtual machine and select it from the drop-down menu. A warning message indicates that your virtual machine is currently powered off. 6 Select Power On, wait for the IP Address field to populate, then click the IP address to download an RDP file. 7 Click the RDP file, connect to your virtual machine, and make the required changes to your image. 8 Click Publish. Wait until the publish operation finishes and the image is online before continuing. 9 Select Inventory > Images and select the check box next to your new image. 10 Select..., click Assign Image, select the assignments to update, and click OK. The system deletes each virtual machine in the selected assignment and recreates it using the new image. If a user is logged into a desktop when you push the updates, the system does not update that desktop until the user logs off. 11 If no other assignments are using the original image and you want to delete it, select... and click Delete. Types of Desktop Assignments You can create different types of desktop assignments to fit your end-user environment needs. You can create dedicated and floating desktops assignments in Horizon Cloud with On-Premises Infrastructure. Note A desktop can have multiple users assigned to it, but it can be used by only one user at a time. In a dedicated desktop assignment, each user is assigned a specific remote desktop and returns to the same desktop at each login. Dedicated assignments require a one-to-one desktop-to-user relationship and should be sized based on the total user population. For example, you need an assignment of one hundred desktops for a group of one hundred users. The primary use for dedicated desktop assignments is to ensure that the host name of the desktop virtual machine for each user remains the same between sessions. Certain software packages might require this use for licensing. In a floating desktop assignment, a user receives a different virtual machine with a different machine name with each login. With floating desktop assignments, you can create desktops that shifts of users can use and that should be sized based on the maximum number of concurrent users. For example, three hundred users can use an assignment of one hundred desktops if they work in shifts of one hundred users at a time. With floating desktop assignments, the user might see different host names for each desktop session. Note Neither floating nor dedicated desktops provide persistence. Both types are reset after each user session. Configure persistence by creating writable volumes. See Chapter 8, Working with Writable Volumes, on page 49. Where possible, use floating desktop assignments because they provide more flexible pool management capabilities than dedicated desktop assignments and do not dedicate virtual machine resources for each user. 32 VMware, Inc.