Deployment User Guide Version: 010319-2 Contents STEP 1: (Windows Users Only): Determine if your PC is running the 32-bit or 64-bit version of Windows. If you are not a PC user, please proceed to step 2.... 2 STEP 2: Logon to Your Client Portal: www.companyname.tetherview.com... 2 STEP 3: Download/Install VMware Horizon Client... 2 STEP 4a: Configure Multifactor Authentication (MFA) with Google Authenticator... 3 STEP 4b: Launch VMware Horizon Client... 4 STEP 4c: Enabling Printing and USB Devices... 4 STEP 5: Your Virtual Desktop Microsoft Operating System... 5 STEP 6a: Using TetherView Sync File Sharing and Collaboration Utility... 6 STEP 6b: Increasing Security of Sync with Multifactor Authentication... 7 STEP 7: (Optional) Map Sync as Your Desktop Drive... 8 Virtual Desktop Best Practices... 11 FAQs Frequently Asked Questions... 14 1
STEP 1: (Windows Users Only): Determine if your PC is running the 32-bit or 64-bit version of Windows. If you are not a PC user, please proceed to step 2. Differences between 32-bit and 64-bit operating system The terms 32-bit and 64-bit refer to the way a computer's processor (also called a CPU), handles information. The 64-bit version of Windows handles large amounts of random access memory (RAM) more effectively than the 32-bit version. Follow the steps in the sections below to find out if your PC is running the 32-bit or 64-bit version of Windows and what edition of Windows is on your PC. Computers running Windows XP Click Start, right-click My Computer, and then click Properties. If "x64 Edition" is listed under System, you re running the 64-bit version of Windows XP. If you don t see "x64 Edition" listed under System, you re running the 32-bit version of Windows XP. The edition of Windows XP you're running is displayed under System near the top of the window. Computers running Windows Vista, 7, 8 or 10 Click the Start button (, ), right-click Computer or This PC, and then select Properties. If "64-bit Operating System" is listed next to System type, you re running the 64-bit version of Windows. If "32-bit Operating System" is listed next to System type, you re running the 32-bit version of Windows. The edition of Windows Operating System you're running is displayed under Windows edition near the top of the window. STEP 2: Logon to Your Client Portal: www.companyname.tetherview.com Using any web browser (Google Chrome, Internet Explorer, Safari, Firefox, etc.) logon to your personal virtual desktop page with your company URL (CompanyName.tetherview.com). STEP 3: Download/Install VMware Horizon Client Once you have accessed the client portal, navigate to the bottom of the login window and click on the following link: Download the Horizon Client for XXX 2
The download link will redirect the page to www.myvmware.com, which will allow you to download the appropriate client for your local device (PC, Mac, ipad, iphone, etc.). After selecting the proper version, click Go to Downloads and download the application to your local machine. Select Version: 4.0.0 or newer. Open the downloaded file and follow the installation guide. STEP 4a: Configure Multifactor Authentication (MFA) with Google Authenticator Multifactor authentication (MFA) will prevent any unauthorized access to your Virtual Desktop even if the password gets compromised. Steps to enable MFA (mobile device required): On your mobile device of choice (phone or tablet) go to App Store or Google Play and search for Google Authenticator, download and install the application. Once installed, open the app and select Scan barcode. Your administrator will provide a special barcode to scan. Scanning the barcode will authenticate the app with the TetherView server. You should now see a six-digit code, use that code during every login to Horizon Client. o o The code will automatically refresh every 30 seconds. If the enrolled device becomes unavailable contact TetherView for backup passcodes 3
STEP 4b: Launch VMware Horizon Client Add a new server to your client (+) www.companyname.tetherview.com Login with your username, MFA passcode and password which will be provided by the designated administrator (first-time login may take additional time to load the virtual desktop). If you have more than one virtual desktop, you will be asked to select one to open. If you only have one desktop, it should open automatically. STEP 4c: Enabling Printing and USB Devices Once your virtual desktop has loaded, move your mouse to the top of the screen to view the various options for Horizon VMware Client. (For Mac Users: move the mouse to the top left corner of the screen and hold it there for 3 seconds) Under Connection, select enable printing. This will allow the user to print to local printers located either at work or home. The drivers for these printed must be installed on the local device first. You will need to logoff and reconnect to your virtual desktop for the printers to be visible. Under Connection, select USB ; Automatically connect at startup and Automatically connect when inserted. (do not enable USB pass-throughs to VDI if operating under strict compliance requirements) Additionally, you may see more options depending on your local device. These options can be: Connect Bluetooth device, Built-in Camera for Skype or FaceTime and Memory Card reader. You should enable these devices for full functionality of your virtual desktop. Remember to start all your printer troubleshooting from the local desktop and not from the VDI. Our Virtual Desktops will be using VMware driver redirection agent to access your local devices (i.e. printers, scanners, etc.) If your devices are completely functional on your local desktop, it should be functional on your VDI too. 4
STEP 5: Your Virtual Desktop Microsoft Operating System After successfully logging to your environment, you should see a Microsoft Windows Operating System (picture below) welcome to your own digital bunker! Your virtual desktop is fully customizable to your needs and can run almost any applications. Contact your local administrator or TetherView Help Desk for any changes and updates. TetherView Virtual Desktops will help you work securely from any device and any location. 5
STEP 6a: Using TetherView Sync File Sharing and Collaboration Utility Meet TetherView Sync - The privately hosted file sharing and collaboration suite. In short, you can store, edit, share files and create data rooms with government level compliance, military grade security (end-to-end encryption) and full-scale analytics. Sync can be accessed through any browser. Simply go to your company s designated URL and login with the same credentials that you have for the Virtual Desktop access. (example: SyncXXX.TetherView.com) Home Page After successfully logging for the first time, you will be presented with the following home screen. TetherView Sync User Manual is available here: www.tetherview.com/tools (under User Manuals) 6
STEP 6b: Increasing Security of Sync with Multifactor Authentication TetherView Sync is accessible through the public internet just like any other website meaning that Sync can be accessed outside of the Virtual Desktop. Whilst your account is protected by TetherView firewalls and security software it is wise to add an additional layer of security by protecting your Sync password with Multifactor Authentication. Steps to enable MFA for Sync using Google Authenticator: You should already have Google Authenticator app installed on your mobile device (STEP 4a). Login to your TetherView Sync account. Click on the following icon in the top right corner of Sync (yours might have a different color and letter). Select Settings, which will take you to the following page. Go to Security on the left-side menu. At the bottom of the Security page select Enable TTOP. Once selected, a QR code will appear on the page. 7
Open Google Authenticator, click on the + sign and choose Scan barcode. Using your mobile phone, scan the barcode that s shown in your TetherView Sync account. Once scanned, a new 6-digit code will appear in your Google Authenticator app. Input the passcode into the authentication field and click Verify. Enable TOTP should now be check marked. On the same page above TTOP second factor auth you will see an option to generate backup codes. o Click to generate backup codes, save and print these codes in case you lose your mobile device and can t use multifactor authentication to login. STEP 7: (Optional) Map Sync as Your Desktop Drive TetherView Sync allows users to have direct access to their files through a mapped drive on any Windows machine. The picture below shows the same directories being open at the same time from a Virtual Desktop and from a Browser. To map Sync as a Drive on your Virtual Desktop, go to Settings in the bottom left corner of Sync home page. 8
After selecting Settings, you will be presented with a new link under WebDAV. Copy the link. Now go to This PC on your Virtual Desktop and locate a button called Map network drive. Select any available Drive (example: Y), paste the WebDAV link in the Folder field and click Finish. With Sync MFA enabled, you will have to create a special passcode to authenticate the Drive. Go back to Sync on your browser, select Settings (top right corner), click on Security (left-side menu). 9
Under Devices & sessions you will have an option to Create new app password : Name your entry (example: Sync VDI) and click to create a new password. You will be asked to authenticate with your regular Sync password: Copy the generated app password and use that password to authenticate WebDAV on your Virtual Desktop. o Check Remember my credentials. Click OK to finish the WebDAV setup. Now your Sync account will always be accessible from the Virtual Desktop as a mapped drive. 10
Virtual Desktop Best Practices These pointers below explain some Do s and Don ts and how you can self-correct them before raising a support request. If these options do not apply, please create a support ticket to have a technician assist you. TetherView Support: 1. Submit a ticket by going to www.help.tetherview.com (quickest method) 2. Submit a ticket by emailing Support@tetherview.com 3. Call our main line and select technical support: 800-666-3996 (option 2) Virtual Desktops are fully managed by the TetherView IT Team or in conjunction with your local IT Team. TetherView strongly recommends that you do not store/save any files on the Local Drive (C:) as those files will not be easily recoverable in the event of an incident. Use any other folders (Desktop, Documents, Downloads) or your company s file servers to store and create data. No other user has access to your local desktop files and folders. Files stored on shared servers are accessible to other users within your corporate network. Each Company is provisioned with dedicated networking bandwidth to access virtual desktops and applications. Applications that continuously consume bandwidth with applications that stream music (Pandora, Spotify, itunes, etc.) or video (YouTube) may result in latency in your work environment. Streaming applications should only be launched and run on your local machine in the background. This will maximize user experience. 1. Disconnect from the Virtual Desktop session Disconnecting from a Virtual Desktop session is only recommended if the user is planning to get back into the session in a short while after disconnecting (ex. taking a lunch break), or if the user plans to pick up the same virtual session from another device. Disconnecting from a desktop will not end your session and will continue to run any open applications for a period of up to 10 hours. TetherView highly recommends to always save any open documents and files before Disconnecting. Disconnect action can be performed in one of two ways: a) Navigate the mouse to the top of the VDI session on your primary screen (top left corner for Mac users). Shortly, a menu bar will pop out (if the bar is not already pinned to the top). Click on the X (red circle for Mac) and click OK when prompted. b) Alternatively, on the same bar select Options -> Disconnect. Click OK when prompted. 11
2. Log off/power Off the Virtual Desktop Session If the user is finished with their work for the day, the user should Sign Out from the Virtual Desktop (vs. Disconnect ). Prior to signing out, please save all documents and files and close any open applications. Doing so will ensure continuity of all files. Virtual Desktops are set to automatically Sign Out after 10 hours of inactivity. If the user leaves an open Virtual Desktop and doesn t Sign Out, he or she runs a risk of losing any unsaved data. To perform a clean Sign Out, select Start -> Sign out or Log Off. Please wait for the system to log itself off and disconnect you. DO NOT try to disconnect the session when the logoff is in progress. Doing so may set the virtual agents into an error state and prevent you from accessing the system during the next login. 3. Log Off Errors. Error: View Agent Logoff in Progress In case you see the following Error: View Agent Logoff in Progress, select the Disconnect option on the top left of your VMware Horizon Client. The Disconnect functions will look like this -. This action will bring the user to the desktop tile. Now, right click on the tile and select Reset Desktop. This prompts a reset operation on the backend. Please wait for about 4 minutes before you try to log back in, for the reset operation to take place. After you attempt to login again, if you still see an error, please raise a support request through your administrator. If you see the following error message Error: Your desktop has been allocated to another user, select Try Again on the top right of your VMware Horizon client application. This error usually occurs when the user logs in too fast before the system services have started once you apply the Reset Desktop command. Each user has its own individual Virtual Desktop, so in no case will your Desktop be allocated to another user. 12
4. Saving Data on the C drive The C drive on the Virtual Desktop would look like this: Never save any production data on this Drive! Please use Documents folder to save data to your Virtual Desktop. The C Drive houses the Operating System files and it is best practice to keep your production data separate. In the unfortunate event that a Virtual Desktop crashes, the data on the C drive CANNOT be recovered in most cases. The data saved in your Documents folder is backed up and can be recovered if inadvertently deleted. 13
FAQs Frequently Asked Questions 1. Where can I find the version of VMware Horizon client and Virtual Desktops ID? - Move the cursor to the top of the main screen in your VDI session. - Your Virtual Desktops ID (ex. TV007) appears on the top right of the pop down bar (PC users only). For Mac, navigate the mouse to Connection -> Settings to find your Virtual Desktop ID - Select Options -> About VMware Horizon Client, to know the version of the client. For Mac, click on VMware Horizon Client, About to get to the version info. 2. How do I use my wireless keyboard/mouse with my Virtual Desktop? - The key difference between working on a Windows workstation and Mac workstation is the use of Wireless Mouse and Keyboard. - On the Windows workstation, you can plug in and use almost any wireless peripheral devices. - On the Mac, you should always make sure you have not enabled USB passthrough of the wireless devices. Doing so will limit you from using wireless devices on your local Mac while logged in to the Virtual Desktop. Please follow STEP 4b to see how to enable USB pass through. 3. Adjusting Screen Resolution - If you find your screen resolution does not match your physical device, navigate to the top of your Virtual Desktop screen -> Select Options. - Uncheck Allow display scaling option and give it a few seconds. - The screen will flash to refresh and readjust the resolution. For more FAQs, please go to https://help.tetherview.com/portal/kb/tetherviewllc/faq 14