VMware Horizon Client 4.5 User Guide

Page 1

Using VMware Horizon Client for

Android

VMware Horizon Client for Android 4.5

This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http://www.vmware.com/support/pubs.

EN-002505-00

Page 2

Using VMware Horizon Client for Android

You can ﬁnd the most up-to-date technical documentation on the VMware Web site at:

hp://www.vmware.com/support/

The VMware Web site also provides the latest product updates.

If you have comments about this documentation, submit your feedback to:

docfeedback@vmware.com

VMware, Inc.

3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com

2 VMware, Inc.

Page 3

Using VMware Horizon Client for Android 5

Setup and Installation 7

System Requirements 8

System Requirements for Thin Clients 8

System Requirements for Chromebooks 9

System Requirements for Real-Time Audio-Video 9

Smart Card Authentication Requirements 10

Congure Smart Card Authentication 11

Fingerprint Authentication Requirements 12

Supported Desktop Operating Systems 13

Preparing Connection Server for Horizon Client 13

Install or Upgrade Horizon Client 14

Congure Horizon Client in Thin Client Mode 15

Using Horizon Client on a Thin Client 15

Using Embedded RSA SecurID Software Tokens 16

Congure Advanced TLS/SSL Options 17

Congure VMware Blast Options 17

Congure the Horizon Client Default View 18

Congure AirWatch to Deliver Horizon Client to Android Devices 19

Congure AirWatch to Deliver Horizon Client to Android for Work Devices 20

Horizon Client Data Collected by VMware 22

Using URIs to Congure Horizon Client 25

Syntax for Creating vmware-view URIs 25

Examples of vmware-view URIs 28

VMware, Inc.

Managing Remote Desktop and Application Connections 31

Seing the Certicate Checking Mode for Horizon Client 31

Connect to a Remote Desktop or Application 32

Use Unauthenticated Access to Connect to Remote Applications 35

Share Access to Local Storage 36

Add a Desktop or Application Shortcut to the Android Home Screen 37

Manage Server Shortcuts 37

Select a Favorite Remote Desktop or Application 38

Disconnecting From a Remote Desktop or Application 38

Log O From a Remote Desktop 39

Manage Desktop and Application Shortcuts 39

Using Android 7.0 Nougat Multi-Window Modes with Horizon Client 40

Using Horizon Client with Samsung DeX 40

Enable the DeX Mode Auto Launch Feature 40

Page 4

Using VMware Horizon Client for Android

Using a Microsoft Windows Desktop or Application 41

Feature Support Matrix for Android 41

Input Devices, Keyboards, and Keyboard Seings 44

Enable the Japanese 106/109 Keyboard Layout 44

Using the Real-Time Audio-Video Feature for Microphones 45

Using Native Operating System Gestures with Touch Redirection 45

Using the Unity Touch Sidebar with a Remote Desktop 45

Using the Unity Touch Sidebar with a Remote Application 48

Horizon Client Tools on a Mobile Device 49

Gestures 52

Multitasking 53

Copying and Pasting Text and Images 53

Saving Documents in a Remote Application 54

Screen Resolutions and Using External Displays 54

PCoIP Client-Side Image Cache 55

Internationalization and International Keyboards 56

Troubleshooting Horizon Client 57

Collecting and Sending Logging Information 57

Enable Horizon Client Log Collection 57

Manually Retrieve and Send Horizon Client Log Files 58

Disable Horizon Client Log Collection 59

Restart a Remote Desktop 59

Reset a Remote Desktop or Remote Applications 60

Uninstall Horizon Client 60

Horizon Client Stops Responding or the Remote Desktop Freezes 61

Problem Establishing a Connection When Using a Proxy 61

Connecting to a Server in Workspace ONE Mode 61

Index 63

4 VMware, Inc.

Page 5

Using VMware Horizon Client for Android

This guide, Using VMware Horizon Client for Android, provides information about installing and using VMware Horizon® Client™ software on an Android device to connect to a remote desktop or application in the datacenter.

The information in this document includes system requirements and instructions for installing Horizon Client for Android. This document also provides tips for improving the user experience of navigating and using Windows desktop elements on an Android device.

This information is intended for administrators who must set up a Horizon deployment that includes Android client devices. The information is wrien for experienced system administrators who are familiar with virtual machine technology and datacenter operations.

VMware, Inc.

Page 6

Using VMware Horizon Client for Android

6 VMware, Inc.

Page 7

Setup and Installation 1

Seing up a Horizon deployment for Android clients involves using certain Connection Server conguration seings, meeting the system requirements for View servers and Android device clients, and

installing the Horizon Client app.

This chapter includes the following topics:

“System Requirements,” on page 8

“System Requirements for Thin Clients,” on page 8

“System Requirements for Chromebooks,” on page 9

“System Requirements for Real-Time Audio-Video,” on page 9

“Smart Card Authentication Requirements,” on page 10

“Congure Smart Card Authentication,” on page 11

“Fingerprint Authentication Requirements,” on page 12

“Supported Desktop Operating Systems,” on page 13

“Preparing Connection Server for Horizon Client,” on page 13

“Install or Upgrade Horizon Client,” on page 14

VMware, Inc.

“Congure Horizon Client in Thin Client Mode,” on page 15

“Using Embedded RSA SecurID Software Tokens,” on page 16

“Congure Advanced TLS/SSL Options,” on page 17

“Congure VMware Blast Options,” on page 17

“Congure the Horizon Client Default View,” on page 18

“Congure AirWatch to Deliver Horizon Client to Android Devices,” on page 19

“Congure AirWatch to Deliver Horizon Client to Android for Work Devices,” on page 20

“Horizon Client Data Collected by VMware,” on page 22

Page 8

Using VMware Horizon Client for Android

System Requirements

You can install Horizon Client on Android devices.

The Android device on which you install Horizon Client, and the peripherals it uses, must meet the following system requirements.

Android operating systems

CPU architecture

External keyboards

Smart cards

Connection Server, Security Server, and View Agent or Horizon Agent

Display protocols

Android 4.0 Ice Cream Sandwich

Android 4.1, 4.2, and 4.3 Jelly Bean

Android 4.4 KitKat

Android 5.0 Lollipop

Android 6.0 Marshmallow

Android 7.0 and 7.1 Nougat

ARM

x86

(Optional) Bluetooth and docked keyboard devices. For information about the external devices that your specic device supports, see the documentation from the device manufacturer.

See “Smart Card Authentication Requirements,” on page 10.

Latest maintenance release of View 6.x and later releases.

VMware recommends that you use a security server or Unied Access Gateway appliance so that your device does not require a VPN connection.

PCoIP

VMware Blast (requires Horizon Agent 7.0 or later)

You can also install Horizon Client for Android on certain thin clients and Chromebooks. See “System

Requirements for Thin Clients,” on page 8 and “System Requirements for Chromebooks,” on page 9.

System Requirements for Thin Clients

You can install Horizon Client for Android on certain thin clients.

The thin client on which you install Horizon Client for Android, and the external input devices it uses, must meet certain system requirements.

Thin client models and Android operating systems

Remix Mini with Android 5.1 (RemixOS 2.0.205 or later)

NVIDIA SHIELD Android TV with Android 6.0

8 VMware, Inc.

Page 9

Amazon Fire TV (1st Generation) with Android 5.1

Chapter 1 Setup and Installation

External input devices

Horizon Client generally works with any external input device, including keyboards and controllers, that works with your thin client. For information about the devices that your specic thin client supports, see the documentation from the device manufacturer.

Horizon Client requirements

Enable the Thin Client mode seing in Horizon Client. See “Congure

Horizon Client in Thin Client Mode,” on page 15.

System Requirements for Chromebooks

You can install Horizon Client for Android on certain Chromebook models. You can install Horizon Client for Android on a Chromebook from Google Play. Not all features are supported on a Chromebook.

Chromebook models that support Android apps

Feature limitations

ASUS Chromebook Flip

Acer Chromebook R11 C738T

Google Chromebook Pixel (2015)

Google is continuing to evaluate more devices. For the latest information, go to hps://sites.google.com/a/chromium.org/dev/chromium-os/chrome-os-

systems-supporting-android-apps? visit_id=0-636124384717258228-2661029306&rd=1.

The following features are not supported when you install Horizon Client for Android on a Chromebook.

AirWatch integration

Fingerprint authentication

Smart card authentication

Rich text copy and paste

Multiple monitors

System Requirements for Real-Time Audio-Video

Real-Time Audio-Video works with standard audio devices and with standard conferencing applications such as Skype, WebEx, and Google Hangouts. To support Real-Time Audio-Video, your Horizon deployment must meet certain software and hardware requirements.

I Only the audio-in feature is supported. The video feature is not supported.

Remote desktops

The desktops must have View Agent 5.3 or later installed. For View Agent

5.3 desktops, the desktops must also have the corresponding Remote Experience Agent installed. For example, if View Agent 5.3 is installed, you must also install the Remote Experience Agent from View 5.3 Feature Pack 1. See the View Feature Pack Installation and Administration document. If you have View Agent 6.0 or later, or Horizon Agent 7.0 or later, no feature pack is required.

VMware, Inc. 9

Page 10

Using VMware Horizon Client for Android

To use Real-Time Audio-Video with RDS desktops and remote applications, you must have Horizon Agent 7.0.2 or later.

Client access device

Real-Time Audio Video is supported on all Android devices that run Horizon Client for Android. For more information, see “System

Requirements,” on page 8.

Smart Card Authentication Requirements

Client systems that use a smart card for user authentication must meet certain requirements.

VMware recommends that you use an Android 4.0 or later operating system. The CPU architecture may be ARM or x86. VMware tested the baiMobile 3000MP Bluetooth Smart Card reader, baiMobile 301MP USB Smart Card reader, and baiMobile 301MP_LT Smart Card reader.

Each client system that uses a smart card for user authentication must have the following software and hardware:

Horizon Client

A compatible smart card reader

Smart card middleware

The Android device app must support your baiMobile smart card reader. For example, one such app is baiMobile PCSC-Lite (Android device tile name baiMobile PC/SC). Horizon Client for Android contains support for both the baiMobile 3000MP Bluetooth and baiMobile 301MP USB smart card readers. Without such an app, you can pair the Bluetooth card reader with the Android device, but you cannot connect it. The app sends a connection request to the reader and you tap the OK buon on the reader to establish the Bluetooth connection.

Product-specic application drivers

You must also install product-specic application drivers on the remote desktops or Microsoft RDS host. VMware tested the ActiveClient6.2.0.50, ActivClient_7.0.1, Gemalto.MiniDriver.NET.inf, and Charismathics CSTC PIV 5.2.2 drivers.

Users that authenticate with smart cards must have a smart card and each smart card must contain a user

certicate.

In addition to meeting these requirements for Horizon Client systems, other Horizon components must meet certain conguration requirements to support smart cards:

For information about conguring Connection Server to support smart card use, see the View

Administration document.

You must add all applicable Certicate Authority (CA) certicates for all trusted user certicates to a server truststore le on the Connection Server host or security server host. These certicates include root certicates and must include intermediate certicates if the user's smart card certicate was issued by an intermediate certicate authority.

For information about tasks you might need to perform in Active Directory to implement smart card

authentication, see the View Administration document.

Enabling the Username Hint Field in Horizon Client

In some environments, smart card users can use a single smart card certicate to authenticate to multiple user accounts. Users enter their user name in the Username hint eld during smart card sign-in.

10 VMware, Inc.

Page 11

To make the Username hint eld appear on the Horizon Client login dialog box, you must enable the smart card user name hints feature for the Connection Server instance in Horizon Administrator. The smart card user name hints feature is supported only with Horizon 7 version 7.0.2 and later servers and agents. For information about enabling the smart card user name hints feature, see the View Administration document.

If your environment uses an Unied Access Gateway appliance rather than a security server for secure external access, you must congure the Unied Access Gateway appliance to support the smart card user name hints feature. The smart card user name hints feature is supported only with Unied Access Gateway

2.7.2 and later. For information about enabling the smart card user name hints feature in Unied Access Gateway, see the Deploying and Conguring Unied Access Gateway document.

N Horizon Client still supports single-account smart card certicates when the smart card user name hints feature is enabled.

Configure Smart Card Authentication

Conguration tasks include connecting and pairing the card reader with the device and seing the smart card removal policy.

Prerequisites

Verify that you are using the correct version of the client, desktop agent, server, operating system, smart

card reader, and smart card. See “Smart Card Authentication Requirements,” on page 10.

Chapter 1 Setup and Installation

Verify that smart card middleware is installed on the Android device.

If you have not already done so, perform the tasks described in "Prepare Active Directory for Smart

Card Authentication," in the View Installation document.

Congure Horizon servers to support smart card use. See the topic "Congure Smart Card

Authentication," in the View Administration document.

Procedure

1 Install the smart card middleware app on the device.

2 Pair the device with the smart card reader, according to the documentation provided by the

manufacturer of the reader.

If you are using a Bluetooth smart card reader, a randomly generated number is displayed on both devices during this process. When you conrm that the numbers match, you establish secure Bluetooth communication.

VMware, Inc. 11

Page 12

Using VMware Horizon Client for Android

3 Congure the smart card removal policy.

Option Description

Set the policy on the server

Set the policy on the desktop

If you use Horizon Administrator to set a policy, the choices are to disconnect users from Connection Server when they remove their smart cards or to keep users connected to Connection Server when they remove their smart cards and let them start new desktop or application sessions without reauthenticating.

a In Horizon Administrator, select View  > Servers.

b On the Connection Servers tab, select the Connection Server instance

and click Edit.

c On the Authentication tab, select or deselect the Disconnect user

sessions on smart card removal check box to congure the smart card removal policy.

d Click OK to save your changes.

e Restart the Connection Server service to make your changes take eect.

If you select the Disconnect user sessions on smart card removal check box, Horizon Client returns to the Recent tab when users remove their smart cards.

If you use the Group Policy Editor (gpedit.msc), you have the following possible seings: no action, lock workstation, force log o, or Disconnect if a Remote Desktop Services session.

After you open gpedit.msc in the desktop operating system, go to

Windows  > Security  > Local policies > Security options > Interactive logon: smart card removal behavior. Run the

gpupdate /force command after you change the conguration to force a group policy refresh.

Fingerprint Authentication Requirements

To use ngerprint authentication in Horizon Client, the Android device on which you install Horizon Client must meet certain requirements.

Android device models

Operating system requirements

Connection Server requirements

Horizon Client requirements

Any Android device model that has a ngerprint sensor and native ngerprint reader functionality.

Android 6 (Marshmallow) and later

The Fingerprint Authentication option must be enabled and at least one

ngerprint must be enrolled.

Horizon 6 version 6.2 or a later release.

Enable biometric authentication in Connection Server. For information,

see "Congure Biometric Authentication" in the View Administration document.

The Connection Server instance must present a valid root-signed

certicate to Horizon Client.

Set the certicate checking mode to Never connect to untrusted servers

or Warn before connecting to untrusted servers. For information about seing the certicate checking mode, see “Seing the Certicate

Checking Mode for Horizon Client,” on page 31.

12 VMware, Inc.

Page 13

Enable ngerprint authentication by tapping Enable Fingerprint on the

server login window. After you successfully log in, your Active Directory credentials are stored securely in your Android device. The Enable Fingerprint option is shown the rst time you log in and does not appear after ngerprint authentication is enabled.

You can use ngerprint authentication with smart card authentication and as part of two-factor authentication with RSA SecurID and RADIUS authentication. If you use ngerprint authentication with smart card authentication, Horizon Client connects to the server after you enter your PIN and the ngerprint authentication window does not appear.

Supported Desktop Operating Systems

Administrators create virtual machines with a guest operating system and install agent software in the guest operating system. End users can log in to these virtual machines from a client device.

For a list of the supported Windows guest operating systems, see the View Installation document.

Some Linux guest operating systems are also supported if you have View Agent 6.1.1 or later, or Horizon Agent 7.0 or later. For information about system requirements, conguring Linux virtual machines for use in Horizon, and a list of supported features, see Seing Up Horizon 6 for Linux Desktops or Seing Up Horizon 7 for Linux Desktops.

Chapter 1 Setup and Installation

Preparing Connection Server for Horizon Client

Administrators must perform specic tasks to enable end users to connect to remote desktops and applications.

Before end users can connect to Connection Server or a security server and access a remote desktop or application, you must congure certain pool seings and security seings:

If you plan to use Unied Access Gateway, congure Connection Server to work with

Unied Access Gateway. See the Deploying and Conguring Unied Access Gateway document. Unied Access Gateway appliances fulll the same role that was previously played by only security

servers.

If you are using a security server, verify that you are using the latest maintenance releases of

Connection Server 5.3.x and Security Server 5.3.x or later releases. For more information, see the View Installation document.

If you plan to use a secure tunnel connection for client devices and if the secure connection is

congured with a DNS host name for Connection Server or a security server, verify that the client device can resolve this DNS name.

To enable or disable the secure tunnel, in Horizon Administrator, go to the Edit Horizon Connection Server Seings dialog box and use the check box called Use secure tunnel connection to desktop.

Verify that a desktop or application pool has been created and that the user account that you plan to use

is entitled to access the pool. For information, see the Seing Up Virtual Desktops in Horizon 7 or Seing Up Published Desktops and Applications in Horizon 7 document.

To use two-factor authentication with Horizon Client, such as RSA SecurID or RADIUS authentication,

you must enable this feature on Connection Server. For more information, see the topics about twofactor authentication in the View Administration document.

To hide security information in Horizon Client, including server URL information and the Domain

drop-down menu, enable the Hide server information in client user interface and Hide domain list in client user interface seings in Horizon Administrator. These global seings are available in Horizon 7

version 7.1 and later. For information about conguring global seings, see the View Administration document.

VMware, Inc. 13

Page 14

Using VMware Horizon Client for Android

To authenticate when the Domain drop-down menu is hidden, users must provide domain information by entering their user name in the format domain\username or username@domain in the User name text box.

I If you enable the Hide server information in client user interface and Hide domain list in client user interface seings and select two-factor authentication (RSA SecureID or RADIUS) for the

Connection Server instance, do not enforce Windows user name matching. Enforcing Windows user name matching will prevent users from being able to enter domain information in the user name text box and login will always fail. For more information, see the topics about two-factor authentication in the View Administration document.

To enable end users to save their passwords with Horizon Client, so that they do not always need to

supply credentials when connecting to a Connection Server instance, congure Horizon LDAP for this feature on the Connection Server host.

Users can save their passwords if Horizon LDAP is congured to allow it, if the Horizon Client

certicate verication mode is set to Warn before connecting to untrusted servers or Never connect to untrusted servers, and if Horizon Client can fully verify the server certicate that Connection Server

presents. For instructions, see the View Administration document.

Verify that the desktop or application pool is set to use the VMware Blast display protocol or the PCoIP

display protocol. For information, see the Seing Up Virtual Desktops in Horizon 7 and Seing Up Published Desktops and Applications in Horizon 7 documents.

To provide users unauthenticated access to published applications in Horizon Client, you must enable

this feature in Connection Server. For more information, see the topics about unauthenticated access in the View Administration document.

Install or Upgrade Horizon Client

Horizon Client for Android is an Android app, and you install it just as you do other Android apps.

Prerequisites

If you have not already set up the device, do so. See the manufacturer's user's guide for your device.

Verify that you have the URL for a download page that contains the Horizon Client installer. This URL

might be the VMware Downloads page at hp://www.vmware.com/go/viewclients.

Become familiar with your device's procedure for installing apps.

Devices from dierent manufacturers use dierent methods for installing Android apps. See the manufacturer's user's guide for your device. Depending on the device, you might have to perform the following tasks before you can install an app:

Install a particular driver.

Install a le browser.

Procedure

1 Browse to the URL for downloading the Horizon Client app, or search for the Horizon Client app in the

Google Play Store or Amazon Appstore for Android.

For some devices, you download the le to the device. For others, you download the le to a PC or a USB device.

2 If necessary, copy the app (.apk le) to your device.

3 Install the app according to your device's customary procedure for installing apps.

For example, on some devices, you must tap the le to install it.

14 VMware, Inc.

Page 15

What to do next

To determine that installation succeeded, verify that the Horizon app icon appears on the Apps tab on your Android device.

The rst time you launch Horizon Client on Android 6.0 Marshmallow, the app prompts you to allow Horizon Client to make and manage phone calls, access photos, media, and les, and record audio on your device.

If you installed Horizon Client on a thin client, see “Congure Horizon Client in Thin Client Mode,” on page 15.

Configure Horizon Client in Thin Client Mode

You congure Horizon Client to work on a thin client by enabling the Thin Client mode seing.

Prerequisites

Install Horizon Client on your thin client. For thin client requirements, see “System Requirements for Thin

Clients,” on page 8.

Procedure

1 Start Horizon Client on your thin client.

Chapter 1 Setup and Installation

2 Tap the  (gear) icon in the upper-right corner of the Horizon Client window.

3 Tap Thin Client mode and select the Thin Client mode check box.

What to do next

See “Using Horizon Client on a Thin Client,” on page 15.

Using Horizon Client on a Thin Client

Some features are dierent or unavailable when you use Horizon Client in thin client mode.

The Horizon Client window resolution is set to  by default. The auto-t resolution is the same

as your thin client's HDMI output. For example, if your thin client supports HDMI 4K output, the autot resolution is 4K. If your thin client supports HDMI 1080p output, the auto-t resolution is 1920x1080.

You can downscale the resolution by modifying the Horizon Client Resolution seing.

The Horizon Client Presentation Mode and Stay Awake display seings are not available.

You cannot modify the Horizon Client Keyboard seings.

The Horizon Client Tools radial menu is not available in remote desktops and applications.

In general, the gestures you use in Horizon Client depend on your thin client model and the type of

external input device that you use with your thin client. For example, you might have a keyboard, mouse, remote control, or game controller. See the documentation for your external input device for more information.

The Unity Touch sidebar contains Keyboard, , and Disconnect icons. For more information, see

“Using the Unity Touch Sidebar with a Remote Desktop,” on page 45 and “Using the Unity Touch Sidebar with a Remote Application,” on page 48.

The Unity Touch sidebar is supported on Remix Mini and NVIDIA SHIELD Android TV devices. The

Unity Touch sidebar is not supported on Amazon Fire TV.

If you are connected to a remote desktop or application from an Amazon Fire TV device, you must use

a pop-up menu to display Horizon Client Seings and to disconnect from the remote desktop or application. On a remote control or external keyboard, press the Menu buon to display the pop-up menu.

VMware, Inc. 15

Page 16

Using VMware Horizon Client for Android

Using Embedded RSA SecurID Software Tokens

If you create and distribute RSA SecurID software tokens to end users, they need enter only their PIN, rather than PIN and token code, to authenticate.

Setup Requirements

You can use Compressed Token Format (CTF) or dynamic seed provisioning, which is also called CT-KIP (Cryptographic Token Key Initialization Protocol), to set up an easy-to-use RSA authentication system. With this system, you generate a URL to send to end users. To install the token, end users paste this URL directly into Horizon Client on their client devices. The dialog box for pasting this URL appears when end users connect to Connection Server with Horizon Client.

Horizon Client also supports le-based provisioning. When a le-based software token is issued to a user, the authentication server generates an XML-format token le, which is called an SDTID le for its .sdtid extension. Horizon Client can import the SDTID le directly. Users can also launch Horizon Client by tapping the SDTID le in a le browser.

After the software token is installed, end users enter a PIN to authenticate. With external RSA tokens, end users must enter a PIN and the token code generated by a hardware or software authentication token.

The following URL prexes are supported if end users will be copying and pasting the URL into Horizon Client when Horizon Client is connected to an RSA-enabled Connection Server instance:

viewclient-securid://

http://127.0.0.1/securid/

End users can install the token by tapping the URL. Both prexes viewclient-securid:// and

http://127.0.0.1/securid/ are supported. Note that not all browsers support hyperlinks that begin with http://127.0.0.1. Also some le browsers, such as the File Manager app on the ASUS Transformer Pad,

cannot link the SDTID le with Horizon Client.

For information about using dynamic seed provisioning or le-based (CTF) provisioning, see the Web page

RSA SecurID Software Token for iPhone Devices at hp://www.rsa.com/node.aspx?id=3652 or RSA SecurID Software Token for Android at hp://www.rsa.com/node.aspx?id=3832.

Instructions to End Users

When you create a CTFString URL or CT-KIP URL to send to end users, you can generate a URL with or without a password or activation code. You send this URL to end users in an email that must include the following information:

Instructions for navigating to the Install Software Token dialog box.

Tell end users to tap External Token in the Horizon Client dialog box that prompts them for RSA SecurID credentials when they connect to a Connection Server instance.

CTFString URL or CT-KIP URL in plain text.

If the URL has formaing on it, end users will get an error message when they try to use it in Horizon Client.

Activation code, if the CT-KIP URL that you create does not already include the activation code.

End users must enter this activation code in a text eld of the dialog box.

If the CT-KIP URL includes an activation code, tell end users that they need not enter anything in the

Password or Activation Code text box in the Install Software Token dialog box.

16 VMware, Inc.

Page 17

Configure Advanced TLS/SSL Options

You can select the security protocols and cryptographic algorithms that are used to encrypt communications between Horizon Client and Horizon servers and between Horizon Client and the agent in the remote desktop.

By default, TLSv1.0, TLSv1.1, and TLSv1.2 are enabled. SSL v2.0 and 3.0 are not supported. The default cipher control string is "!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH +AES:RSA+AES".

If you congure a security protocol for Horizon Client that is not enabled on the Horizon server to which the client connects, a TLS/SSL error occurs and the connection fails.

For information about conguring the security protocols that are accepted by Connection Server instances, see the View Security document.

Procedure

1 Open  and tap Security options.

If you are connected to a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon to access . If you are not using full-screen mode,  is in the menu in the upper right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Chapter 1 Setup and Installation

2 Tap Advanced SSL Options.

3 Make sure that Use Default  is unchecked.

4 To enable or disable a security protocol, tap the check box next to the security protocol name.

5 To change the cipher control string, replace the default string.

6 (Optional) If you need to revert to the default seings, tap to select the Use Default  option.

7 Tap OK to save your changes.

Your changes take eect the next time you connect to the server.

Configure VMware Blast Options

You can congure H.264 decoding and network condition options for remote desktop and application sessions that use the VMware Blast display protocol.

You cannot congure VMware Blast seings after you log in to a server.

JPG/PNG encoding is always used in multi-monitor mode, even when H.264 decoding is enabled.

Prerequisites

This feature requires Horizon Agent 7.0 or later.

Procedure

1 Before you log in to a server, tap the  (gear) icon in the upper-right corner of the Horizon Client

window and tap VMware Blast.

You cannot congure VMware Blast seings after you log in to a server.

VMware, Inc. 17

Page 18

Using VMware Horizon Client for Android

2 Congure the decoding and network condition options.

Option Action

H.264

Network Condition

Congure this option, before or after connecting to Connection Server, to allow H.264 decoding in Horizon Client.

When this option is selected (the default seing), Horizon Client uses H. 264 decoding if the agent supports H.264 software or hardware encoding. If the agent does not support H.264 software or hardware encoding, Horizon Client uses JPG/PNG decoding.

Deselect this option to use JPG/PNG decoding.

You can only congure this option before connecting to Connection Server. Select one of the following network condition options:

Excellent - Horizon Client uses only TCP networking. This option is

ideal for a LAN environment.

Typical (default) - Horizon Client works in mixed mode. In mixed

mode, Horizon Client uses TCP networking when connecting to the server and uses Blast Extreme Adaptive Transport (BEAT) if the agent and Blast Security Gateway (if enabled) support BEAT connectivity. This option is the default seing.

Poor - Horizon Client uses only BEAT networking if the BEAT Tunnel

Server is enabled on the server, otherwise it switches to mixed mode.

N In Horizon 7 version 7.1 and earlier, Connection Server and Security Server instances do not support the BEAT Tunnel Server. Unied Access Gateway 2.9 and later supports the BEAT Tunnel Server.

Blast Security Gateway for Connection Server and Security Server instances do not support BEAT networking.

Configure the Horizon Client Default View

You can congure whether recently used desktops and applications or server shortcuts appear when you launch Horizon Client.

Procedure

1 Open  and tap Display.

2 Tap Default launch view.

3 Tap an option to select the default view.

Option Description

Recent

Servers

The default view you selected takes eect immediately.

The Recent tab appears when you launch Horizon Client. The Recent tab contains shortcuts to recently used desktops and applications. This is the default seing.

The Servers tab appears when you launch Horizon Client. The Servers tab contains shortcuts to the servers that you added to Horizon Client.

18 VMware, Inc.

Page 19

Chapter 1 Setup and Installation

Configure AirWatch to Deliver Horizon Client to Android Devices

You can congure AirWatch to deliver Horizon Client to Android device users. You can optionally specify a default list of Connection Server instances. The Connection Server instances that you specify appear as shortcuts in Horizon Client.

If your environment is set up for Android for Work, do not follow this procedure. Instead, see “Congure

AirWatch to Deliver Horizon Client to Android for Work Devices,” on page 20.

Prerequisites

Install and deploy AirWatch. See hp://www.air-watch.com.

Download the Horizon Client app from the VMware Downloads page at

hp://www.vmware.com/go/viewclients or from the Google Play Store or Amazon Appstore for

Android.

Become familiar with the AirWatch console. This procedure assumes you know how to use the

AirWatch console. For more information, see the AirWatch documentation or online help.

Decide which version of Horizon Client to deploy with the AirWatch console. The AirWatch console

cannot deploy both the ARM and the x86 version at the same time.

Procedure

1 Log in to the AirWatch console as an administrator.

2 Select Accounts > Users > List View, click Add, select Add User, and add user accounts for the users

who will run Horizon Client on their Android devices.

3 Select Accounts > Users > User Groups > List View, click Add, select Add User Group, and create a

user group for the user accounts that you created.

4 Create an application prole for Horizon Client in AirWatch.

a Select Apps & Books > Applications > Application  >  and click Add .

b Select the SDK  conguration type.

c Select the Android prole type.

d (Optional) Click Custom  to congure a default list of servers.

For example:

{

"settings": {

"server-list": [

{"server":"123.456.1.1","username":"User1","domain":"TestDomain1","description":"View

server 1"},

{"server":"123.456.1.2","username":"User2","domain":"TestDomain2","description":"View

server 2"},

{"server":"123.456.1.3","username":"User3","domain":"TestDomain3","description":"View

server 3"},

{"server":"viewserver4.mydomain.com","username":"User4","domain":"TestDomain4","descripti

on":"View server 4"}

]

}

The server property species the IP address or host name of a server, the username and domain properties specify the name and domain of a user that is entitled to use the server, and the

description property species a description of the server.

VMware, Inc. 19

Page 20

Using VMware Horizon Client for Android

5 Upload and add the Horizon Client application to AirWatch.

a Select Apps & Books > Applications > List View and click Add Application on the Internal tab.

b Browse to the Horizon Client app that you downloaded and click Save to upload the application to

AirWatch.

c On the Info tab, type an application name and specify the supported mobile device models.

d On the Assignment tab, assign the Horizon Client application to the user group that you created.

e On the Deployment tab, set Application uses AirWatch SDK to Yes and select the SDK prole that

you created from the SDK  drop-down menu.

f Publish the Horizon Client application.

6 Install and set up the AirWatch Agent on each device.

You can download the AirWatch Agent from the Google Play Store or Amazon Appstore for Android.

7 Use the AirWatch console to install the Horizon Client application on the devices.

You cannot install the Horizon Client application before the eective date on the Deployment tab.

AirWatch delivers Horizon Client to the devices in the user group that you associated with the Horizon Client application.

When a user launches Horizon Client, Horizon Client communicates with the AirWatch Agent on the device. If you congured a default list of Connection Server instances, AirWatch pushes the server information to the AirWatch Agent on the device and shortcuts for those servers appear in Horizon Client.

What to do next

You can use the AirWatch console to edit the Horizon Client application and push those changes to devices. For example, you can add a default Connection Server instance to the server list for the Horizon Client application.

Configure AirWatch to Deliver Horizon Client to Android for Work Devices

You can congure AirWatch to deliver Horizon Client to Android for Work device users.

Use this procedure only if your environment is set up for Android for Work. If your environment is not set up for Android for Work, see “Congure AirWatch to Deliver Horizon Client to Android Devices,” on page 19.

Prerequisites

Verify that your AirWatch environment is integrated with Android for Work. See the AirWatch

documentation or online help.

Install and deploy AirWatch. You must install AirWatch Server v8.0 FP02 or later and AirWatch Agent

v4.2 or later. See hp://www.air-watch.com. You can download AirWatch Agent from Google Play Store or Amazon Appstore for Android.

Become familiar with the AirWatch console. This procedure assumes that you know how to use the

AirWatch console. See the AirWatch documentation or online help.

Verify that you have a corporate Google account. You must have a corporate Google account to enroll

Android for Work devices. For information about the enrollment process, see the AirWatch documentation or online help.

20 VMware, Inc.

Page 21

Chapter 1 Setup and Installation

Procedure

1 Log in to the AirWatch Console as an administrator.

2 Create and congure a smart group for your Horizon Client users in AirWatch.

a Select Groups and  > Groups > Assignment Groups.

b Click Add Smart Group.

c Enter the smart group name, select the smart group type, and congure the smart group

properties.

d Click Save.

3 Add the Horizon Client application to AirWatch.

a Select Apps & Books > Applications > List View.

b On the Public tab, click Add Application.

c Select Android from the Platform drop-down menu, click Search App Store, enter

com.vmware.view.client.android in the Name text box, and click Next.

d Click Select next to the Horizon Client application.

e Click Save & Publish.

4 Assign the Horizon Client application to users and congure the deployment details.

a Select Apps & Books > Applications > List View.

b On the Public tab, click the Edit icon next to the Horizon Client application.

c On the Assignment tab, assign the Horizon Client application to the smart group that you created.

d On the Deployment tab, select a push mode, select the Send Application  check box,

enter broker_list in the  Key text box, select String from the Value Type drop-down menu, and enter a list of default servers in the  Value text box in JSON format.

The servers that you specify appear as shortcuts in Horizon Client.

The following example species four default servers. The server property species the IP address or host name of the server, the username and domain properties specify the name and domain of a user that is entitled to the server, and the description property species a description of the server.

{"settings":{

"server-list":[

{"server":"123.456.1.1","username":"User1","domain":"TestDomain1","description":"View

server 1"},

{"server":"123.456.1.2","username":"User2","domain":"TestDomain2","description":"View

server 2"},

{"server":"123.456.1.3","username":"User3","domain":"TestDomain3","description":"View

server 3"},

{"server":"viewserver4.mydomain.com","username":"User4","domain":"TestDomain4","descripti

on":"View server 4"}

]

}

e Click Save & Publish to make the Horizon Client application available to end users.

5 Enroll Android for Work devices.

You use your corporate Google account to enroll the devices.

6 In the AirWatch Console, install the Horizon Client application on each device.

VMware, Inc. 21

Page 22

Using VMware Horizon Client for Android

AirWatch delivers Horizon Client to the devices in the smart group that you created.

When a user starts Horizon Client, Horizon Client communicates with the AirWatch Agent on the device.

If you congured a default list of Connection Server instances, AirWatch pushes the server information to the AirWatch Agent on devices and shortcuts for those servers appear in Horizon Client.

What to do next

You can use the AirWatch console to edit the Horizon Client application and push those changes to mobile devices. For example, you can add a default Connection Server instance to the server list for the Horizon Client application.

Horizon Client Data Collected by VMware

If your company participates in the customer experience improvement program, VMware collects data from certain Horizon Client elds. Fields containing sensitive information are made anonymous.

VMware collects data on the clients to prioritize hardware and software compatibility. If your company's administrator has opted to participate in the customer experience improvement program, VMware collects anonymous data about your deployment in order to improve VMware's response to customer requirements. No data that identies your organization is collected. Horizon Client information is sent rst to Connection Server and then on to VMware, along with data from Connection Server instances, desktop pools, and remote desktops.

Although the information is encrypted while in transit to Connection Server, the information on the client system is logged unencrypted in a user-specic directory. The logs do not contain any personally identiable information.

The administrator who installs Connection Server can select whether to participate in the VMware customer experience improvement program while running the Connection Server installation wizard, or an administrator can set an option in Horizon Administrator after the installation.

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program

Is This Field Made Anonymous

Description

Company that produced the Horizon Client application

Product name No VMware Horizon Client

Client product version No (The format is x.x.x-yyyyyy, where x.x.x is the client version

Client binary architecture No Examples include the following:

Client build name No Examples include the following:

? Example Value

No VMware

number and yyyyyy is the build number.)

i386

x86_64

arm

VMware-Horizon-Client-Win32-Windows

VMware-Horizon-Client-Linux

VMware-Horizon-Client-iOS

VMware-Horizon-Client-Mac

VMware-Horizon-Client-Android

VMware-Horizon-Client-WinStore

22 VMware, Inc.

Page 23

Chapter 1 Setup and Installation

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program (Continued)

Is This Field Made Anonymous

Description

Host operating system No Examples include the following:

Host operating system kernel No Examples include the following:

Host operating system architecture No Examples include the following:

Host system model No Examples include the following:

Host system CPU No Examples include the following:

Number of cores in the host system's processor

MB of memory on the host system No Examples include the following:

Number of USB devices connected No 2 (USB device redirection is supported only for Linux,

Maximum concurrent USB device connections

USB device vendor ID No Examples include the following:

? Example Value

Windows 8.1

Windows 7, 64-bit Service Pack 1 (Build 7601 )

iPhone OS 5.1.1 (9B206)

Ubuntu 12.04.4 LTS

Mac OS X 10.8.5 (12F45)

Windows 6.1.7601 SP1

Darwin Kernel Version 11.0.0: Sun Apr 8 21:52:26 PDT

2012; root:xnu-1878.11.10~1/RELEASE_ARM_S5L8945X

Darwin 11.4.2

Linux 2.6.32-44-generic #98-Ubuntu SMP Mon Sep 24

17:27:10 UTC 2012

unknown (for Windows Store)

x86_64

i386

armv71

ARM

Dell Inc. OptiPlex 960

iPad3,3

MacBookPro8,2

Dell Inc. Precision WorkStation T3400 (A04 03/21/2008)

Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GH

Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GH

unknown (for iPad)

For example: 4

4096

unknown (for Windows Store)

Windows, and Mac clients.)

No 2

Kingston

NEC

Nokia

Wacom

VMware, Inc. 23

Page 24

Using VMware Horizon Client for Android

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program (Continued)

Description

USB device product ID No Examples include the following:

USB device family No Examples include the following:

USB device usage count No (Number of times the device was shared)

Is This Field Made Anonymous ? Example Value

DataTraveler

Gamepad

Storage Drive

Wireless Mouse

Security

Human Interface Device

Imaging

24 VMware, Inc.

Page 25

Using URIs to Configure

Horizon Client 2

Using uniform resource identiers (URIs), you can create a Web page or an email with links that end users click to start Horizon Client, connect to a server, and open a specic desktop or application with specic conguration options.

You can simplify the process of connecting to a remote desktop or application by creating Web or email links for end users. You create these links by constructing URIs that provide some or all the following information, so that your end users do not need to supply it:

Connection Server address

Port number for Connection Server

Active Directory user name

RADIUS or RSA SecurID user name, if dierent from the Active Directory user name

Domain name

Desktop or application display name

Actions including reset, log out, and start session

To construct a URI, you use the vmware-view URI scheme with Horizon Client specic path and query parts.

N You can use URIs to start Horizon Client only if the client software is already installed on client computers.

This chapter includes the following topics:

“Syntax for Creating vmware-view URIs,” on page 25

“Examples of vmware-view URIs,” on page 28

Syntax for Creating vmware-view URIs

Syntax includes the vmware-view URI scheme, a path part to specify the desktop or application, and, optionally, a query to specify desktop or application actions or conguration options.

URI Specification

Use the following syntax to create URIs to start Horizon Client:

vmware-view://[authority-part][/path-part][?query-part]

VMware, Inc.

Page 26

Using VMware Horizon Client for Android

The only required element is the URI scheme, vmware-view. For some versions of some client operating systems, the scheme name is case-sensitive. Therefore, use vmware-view.

I In all parts, non-ASCII characters must rst be encoded according to UTF-8 [STD63], and then each octet of the corresponding UTF-8 sequence must be percent-encoded to be represented as URI characters.

For information about encoding for ASCII characters, see the URL encoding reference at

hp://www.utf8-chartable.de/.

authority-part

path-part

query-part

Species the server address and, optionally, a user name, a non-default port number, or both. Underscores (_) are not supported in server names. Server names must conform to DNS syntax.

To specify a user name, use the following syntax:

user1@server-address

You cannot specify a UPN address, which includes the domain. To specify the domain, you can use the domainName query part in the URI.

To specify a port number, use the following syntax:

server-address:port-number

Species the desktop or application. Use the desktop display name or application display name. This name is the one specied in Horizon Administrator when the desktop or application pool was created. If the display name has a space in it, use the %20 encoding mechanism to represent the space.

Species the conguration options to use or the desktop or application actions to perform. Queries are not case-sensitive. To use multiple queries, use an ampersand (&) between the queries. If queries conict with each other, the last query in the list is used. Use the following syntax:

query1=value1[&query2=value2...]

Supported Queries

This topic lists the queries that are supported for this type of Horizon Client. If you are creating URIs for multiple types of clients, such as desktop clients and mobile clients, see the Using VMware Horizon Client guide for each type of client system.

action

26 VMware, Inc.

Table 2‑1. Values That Can Be Used With the action Query

Value Description

browse

start-session

Displays a list of available desktops and applications hosted on the specied server. You are not required to specify a desktop or application when using this action.

If you use the browse action and specify a desktop or application, the desktop or application is highlighted in the list of available items.

Opens the specied desktop or application. If no action query is provided and the desktop or application name is provided, start-session is the default action.

Page 27

Chapter 2 Using URIs to Configure Horizon Client

Table 2‑1. Values That Can Be Used With the action Query (Continued)

Value Description

reset

restart

logoff

Shuts down and restarts the specied desktop. Unsaved data is lost. Reseing a remote desktop is the equivalent of pressing the Reset buon on a physical PC. Specifying an application is not supported. If you specify an application, an error message appears.

If you do not specify a desktop or application, Horizon Client quits all remote applications.

Shuts down and restarts the specied desktop. Restarting a remote desktop is the equivalent of the Windows operating system restart command. The operating system usually prompts the user to save any unsaved data before it restarts.

Logs the user out of the guest operating system in the remote desktop. If you specify an application, the action is ignored or the end user sees the warning message "Invalid URI action."

args

appProtocol

defaultLaunchView

desktopProtocol

domainName

tokenUserName

Species command-line arguments to add to remote application launch. Use the syntax args=value, where value is a string. Use percent encoding for the following characters:

For a colon (:), use %3A

For a back slash (\), use %5C

For a space ( ), use %20

For a double quotation mark ("), use %22

For example, to specify the lename "My new file.txt" for the Notepad++ application, use %22My%20new%20file.txt%22.

For remote applications, valid values are PCOIP and BLAST. For example, to specify PCoIP, use the syntax appProtocol=PCOIP.

Sets the default launch view for Horizon Client. Valid values are recent and

servers.

For remote desktops, valid values are PCOIP and BLAST. For example, to specify PCoIP, use the syntax desktopProtocol=PCOIP.

The NETBIOS domain name associated with the user who is connecting to the remote desktop or application. For example, you might use mycompany rather than mycompany.com.

Species the RSA or RADIUS user name. Use this query only if the RSA or RADIUS user name is dierent from the Active Directory user name. If you do not specify this query and RSA or RADIUS authentication is required, the Windows user name is used. The syntax is tokenUserName=name.

VMware, Inc. 27

Page 28

Using VMware Horizon Client for Android

unauthenticatedAccess Enabled

If this option is set to true, the Unauthenticated Access feature is enabled by default. If this option is set to false, the Unauthenticated Access feature is disabled. When this option is set to "", the Unauthenticated Access feature is disabled. The Log in anonymously using Unauthenticated Access option is available in the Horizon Client seings. An example of the syntax is

unauthenticatedAccessEnabled=true.

unauthenticatedAccess Account

Sets the account to use if the Unauthenticated Access feature is enabled. If Unauthenticated Access is disabled, then this query is ignored. An example of the syntax using the anonymous1 user account is

unauthenticatedAccessAccount=anonymous1.

Examples of vmware-view URIs

You can create hypertext links or buons with the vmware-view URI scheme and include these links in email or on a Web page. Your end users can click these links to, for example, open a particular remote desktop with the startup options you specify.

URI Syntax Examples

Each URI example is followed by a description of what the end user sees after clicking the URI link.

vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user for a user name, domain name, and password. After a successful login, the client connects to the desktop whose display name is displayed as Primary Desktop, and the user is logged in to the guest operating system.

N The default display protocol and window size are used. The default display protocol is PCoIP. The default window size is full screen.

vmware-view://view.mycompany.com:7555/Primary%20Desktop

This URI has the same eect as the previous example, except that it uses the nondefault port of 7555 for Connection Server. (The default port is 443.) Because a desktop identier is provided, the desktop opens even though the start-session action is not included in the URI.

vmware-view://fred@view.mycompany.com/Finance%20Desktop?desktopProtocol=PCOIP

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the User name text box is populated with the name fred. The user must supply the domain name and password. After a successful login, the client connects to the desktop whose display name is displayed as Finance Desktop, and the user is logged in to the guest operating system. The connection uses the PCoIP display protocol.

vmware-view://view.mycompany.com/Calculator?action=start-session&appProtocol=BLAST

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the user must supply the user name, domain name, and password. After a successful login, the client connects to the application whose display name is displayed as Calculator. The connection uses the VMware Blast display protocol.

vmware-view://fred@view.mycompany.com/Finance%20Desktop?domainName=mycompany

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the User name text box is populated with the name fred, and the Domain text box is populated with mycompany. The user must supply only a password. After a successful login, the client connects to the desktop whose display name is displayed as Finance Desktop, and the user is logged in to the guest operating system.

28 VMware, Inc.

Page 29

Chapter 2 Using URIs to Configure Horizon Client

vmware-view://view.mycompany.com/

Horizon Client starts and the user is taken to the login prompt for connecting to the

view.mycompany.com server.

vmware-view://view.mycompany.com/Primary%20Desktop?action=reset

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user for a user name, domain name, and password. After a successful login, Horizon Client displays a dialog box that prompts the user to conrm the reset operation for Primary Desktop.

N This action is available only if a Horizon administrator has enabled the desktop reset feature for the desktop.

vmware-view://view.mycompany.com/Primary%20Desktop?action=restart

N This action is available only if a Horizon administrator has enabled the desktop restart feature for the desktop.

vmware-view://view.mycompany.com?action=reset

vmware-view://

If the client is already running, the Horizon Client application comes to the foreground. If the client is not already running, Horizon Client starts.

vmware-view://?defaultlaunchview=recent

Horizon Client starts and the user sees the Recent tab.

vmware-view://10.10.10.10/My%20Notepad++?args=%22My%20new%20file.txt%22

Launches My Notepad++ on server 10.10.10.10 and passes the argument My new file.txt in the application launch command. The lename is enclosed in double quotes because it contains spaces.

vmware-view://10.10.10.10/Notepad++%2012?args=a.txt%20b.txt

Launches Notepad++ 12 on server 10.10.10.10 and passes the argument a.text b.txt in the application launch command. Because the argument is not enclosed in quotes, a space separates the lenames and the two les are opened separately in Notepad++.

N Applications can dier in the way they use command line arguments. For example, if you pass the argument a.txt b.txt to Wordpad, Wordpad will open only one le, a.txt.

vmware-view://view.mycompany.com/Notepad?

unauthenticatedAccessEnabled=true&unauthenticatedAccessAccount=anonymous1

Horizon Client starts and connects to the view.mycompany.com server using the anonymous1 user account. The Notepad application is launched without prompting the user to provide login credentials.

VMware, Inc. 29

Page 30

Using VMware Horizon Client for Android

HTML Code Examples

You can use URIs to make hypertext links and buons to include in emails or on Web pages. The following examples show how to use the URI from the rst URI example to code a hypertext link that says, Test Link, and a buon that says, .

<html>

<body>

<a href="vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session">Test

Link</a><br>

<form><input type="button" value="TestButton" onClick="window.location.href=

'vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session'"></form> <br>

</body>

</html>

30 VMware, Inc.

Page 31

Managing Remote Desktop and

Application Connections 3

Use Horizon Client to connect to a server, edit the list of servers you connect to, log in to or o of remote desktops, and use remote applications. For troubleshooting purposes, you can also reset remote desktops and applications.

Depending on how the administrator congures policies for remote desktops, end users might be able to perform many operations on their desktops.

This chapter includes the following topics:

“Seing the Certicate Checking Mode for Horizon Client,” on page 31

“Connect to a Remote Desktop or Application,” on page 32

“Use Unauthenticated Access to Connect to Remote Applications,” on page 35

“Share Access to Local Storage,” on page 36

“Add a Desktop or Application Shortcut to the Android Home Screen,” on page 37

“Manage Server Shortcuts,” on page 37

“Select a Favorite Remote Desktop or Application,” on page 38

“Disconnecting From a Remote Desktop or Application,” on page 38

“Log O From a Remote Desktop,” on page 39

“Manage Desktop and Application Shortcuts,” on page 39

“Using Android 7.0 Nougat Multi-Window Modes with Horizon Client,” on page 40

“Using Horizon Client with Samsung DeX,” on page 40

Setting the Certificate Checking Mode for Horizon Client

Administrators and sometimes end users can congure whether client connections are rejected if any or some server certicate checks fail.

Certicate checking occurs for SSL connections between Connection Server and Horizon Client. Certicate verication includes the following checks:

Is the certicate intended for a purpose other than verifying the identity of the sender and encrypting

server communications? That is, is it the correct type of certicate?

Has the certicate expired, or is it valid only in the future? That is, is the certicate valid according to

the computer clock?

VMware, Inc.

Page 32

Using VMware Horizon Client for Android

Does the common name on the certicate match the host name of the server that sends it? A mismatch

can occur if a load balancer redirects Horizon Client to a server that has a certicate that does not match the host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IP address rather than a host name in the client.

Is the certicate signed by an unknown or untrusted certicate authority (CA)? Self-signed certicates

are one type of untrusted CA.

To pass this check, the certicate's chain of trust must be rooted in the device's local certicate store.

I For information about distributing a self-signed root certicate that users can install on their Android devices, as well as instructions for installing a certicate on an Android device, see the documentation on the Google Web site, such as the Android 3.0 User's Guide.

To set the security mode, open . If you are connected to a remote desktop or application in fullscreen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon. If you are not using fullscreen mode,  is in the menu in the upper right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window. In , tap Security options and tap Security mode. You have three choices:

Never connect to untrusted servers. If any of the certicate checks fails, the client cannot connect to the

server. An error message lists the checks that failed.

Warn before connecting to untrusted servers. If a certicate check fails because the server uses a self-

signed certicate, you can click Continue to ignore the warning. For self-signed certicates, the certicate name is not required to match the server name you entered in Horizon Client.

Do not verify server identity . This seing means that no certicate checking occurs.

If the certicate checking mode is set to Warn, you can still connect to a Connection Server instance that uses a self-signed certicate.

If an administrator later installs a security certicate from a trusted certicate authority, so that all certicate checks pass when you connect, this trusted connection is remembered for that specic server. In the future, if that server ever presents a self-signed certicate again, the connection fails. After a particular server presents a fully veriable certicate, it must always do so.

Connect to a Remote Desktop or Application

To connect to a remote desktop or application, you must provide the name of a server and supply credentials for your user account.

To use remote applications, you must connect to Connection Server 6.0 or later.

N Before you have end users access their remote desktops, test that you can log in to a remote desktop from a client device.

Prerequisites

Obtain login credentials, such as a user name and password, RSA SecurID user name and passcode,

RADIUS authentication user name and passcode, or smart card personal identication number (PIN).

Obtain the NETBIOS domain name for logging in. For example, you might use mycompany rather than

mycompany.com.

Perform the administrative tasks described in “Preparing Connection Server for Horizon Client,” on

page 13.

32 VMware, Inc.

Page 33

Chapter 3 Managing Remote Desktop and Application Connections

If you are outside the corporate network and are not using a security server to access the remote

desktop or application, verify that your client device is set up to use a VPN connection and turn on that connection.

I In most cases, use a security server rather than a VPN.

If your company has an internal wireless network to provide routable access to remote desktops that your device can use, you do not have to set up a security server or VPN connection.

Verify that you have the fully qualied domain name (FQDN) of the server that provides access to the

remote desktop or application. Underscores (_) are not supported in server names. If the port is not 443, you also need the port number.

If you plan to use embedded RSA SecurID software, verify that you have the correct CT-KIP URL and

activation code. See “Using Embedded RSA SecurID Software Tokens,” on page 16.

Congure the certicate checking mode for the SSL certicate presented by Connection Server. See

“Seing the Certicate Checking Mode for Horizon Client,” on page 31.

If you plan to use ngerprint authentication, verify that the Fingerprint Authentication option is

enabled and at least one ngerprint is enrolled on your Android device. For complete ngerprint authentication requirements, see “Fingerprint Authentication Requirements,” on page 12.

Procedure

1 If a VPN connection is required, turn on the VPN.

2 On your Android device, tap the Horizon app icon.

3 Connect to a server.

Option Action

Connect to a new server

Connect to an existing server

Enter the name of a server, enter a description (optional), and tap Connect.

Tap the server shortcut on the Servers tab.

Connections between Horizon Client and servers always use SSL. The default port for SSL connections is 443. If the server is not congured to use the default port, use the format shown in this example:

view.company.com:1443.

4 If a smart card is required or optional, select the smart card certicate to use and enter your PIN.

If your smart card has only one certicate, that certicate is already selected. If there are many certicates, you can scroll through them if necessary.

5 If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, either type

your credentials or, if you plan to use an embedded RSA SecurID token, install an embedded token.

Option Action

Existing token

Install software token

If you use a hardware authentication token or software authentication token on a smart phone, enter your user name and passcode. The passcode might include both a PIN and the generated number on the token.

Click External Token. In the Install Software Token dialog box, paste the CT-KIP URL or CTFString URL that your administrator sent to you in email. If the URL contains an activation code, you do not need to enter anything in the Password or Activation Code text box.

VMware, Inc. 33

Page 34

Using VMware Horizon Client for Android

6 If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials,

enter the next generated number on the token.

Do not enter your PIN and do not enter the same generated number entered previously. If necessary, wait until a new number is generated.

If this step is required, it is required only when you mistype the rst passcode or when conguration seings in the RSA server change.

7 If you are prompted for a user name and password, supply Active Directory credentials.

a Type the user name and password of a user who is entitled to use at least one desktop or

application pool.

b Select a domain.

If the Domain drop-down menu is hidden, you must type the user name as username@domain or

domain\username.

c (Optional) If the Enable Fingerprint check box is available, select it to use ngerprint

authentication.

The Enable Fingerprint check box is available only if biometric authentication is enabled on the server and you have not previously authenticated with ngerprint authentication.

d (Optional) Select the Save Password check box if your administrator has enabled this feature and if

the server certicate can be fully veried.

If this is the rst time you are saving a password, you are prompted to activate the device administrator, which is required to save a password on Android devices.

e Tap Connect.

If ngerprint authentication is enabled and you are logging in for the rst time, your Active Directory credentials are stored securely in the Android device's database for future use.

8 If you are prompted for ngerprint authentication, place your nger on the ngerprint sensor.

If you do not want to use ngerprint authentication, tap Cancel. You can connect to the server again and tap Use password to enter a user name and password.

9 (Optional) Tap the display protocol seings icon in the upper-right corner of the window to select the

display protocol to use.

VMware Blast provides beer baery life and is the best protocol for high-end 3D and mobile device users. The default display protocol is PCoIP.

10 Tap a desktop or application to connect to it.

If you are using smart card authentication, you are not prompted to supply your PIN again, but the login process takes longer than if you use Active Directory authentication.

If you are connecting to a published desktop, which is hosted on a Microsoft RDS host, and if the desktop is already set to use the Microsoft RDP display protocol, you cannot connect immediately. You are prompted to have the system log you o the remote operating system so that a connection can be made with the PCoIP display protocol or the VMware Blast display protocol. VMware Blast requires Horizon Agent 7.0 or later.

After you connect to a desktop or application for the rst time, a shortcut for the desktop or application is saved to the Recent tab. The next time you want to connect to the remote desktop or application, you can tap the shortcut instead of tapping the server icon.

34 VMware, Inc.

Page 35

Chapter 3 Managing Remote Desktop and Application Connections

Use Unauthenticated Access to Connect to Remote Applications

A Horizon administrator can use the Unauthenticated Access feature to create Unauthenticated Access users and entitle those users to remote applications on a Connection Server instance. Unauthenticated Access users can log in to the server anonymously to connect to their remote applications.

Prerequisites

Perform the administrative tasks described in “Preparing Connection Server for Horizon Client,” on

page 13.

Set up Unauthenticated Access users on the Connection Server instance. For information, see

"Providing Unauthenticated Access for Published Applications" in the View Administration document.

Congure the certicate checking mode for the SSL certicate presented by Connection Server. See

“Seing the Certicate Checking Mode for Horizon Client,” on page 31.

If you are accessing remote applications outside of the corporate network, verify that your client device

is set up to use a VPN connection and turn on that connection.

Procedure

1 If a VPN connection is required, turn on the VPN.

2 On your Android device, tap the Horizon app icon.

3 Tap the  (gear) icon in the upper-right corner of the Horizon Client window, tap

Unauthenticated access, and select the Unauthenticated access check box.

4 Connect to the server on which you have unauthenticated access to remote applications.

Option Description

Connect to a new server

Connect to an existing server

Enter the name of a server, enter a description (optional), and tap Connect.

Tap the server shortcut on the Servers tab.

view.company.com:1443.

5 When the login window appears, select a user account from the User account drop-down menu, if

required.

If only one user account is available, the user account is automatically selected.

6 (Optional) Select the Always use this account check box to bypass the login window the next time you

connect to the server.

To deselect this seing before you connect to the server the next time, touch and hold the server shortcut until the context menu appears, tap Edit, tap Forget the saved Unauthenticated Access account (name), and tap Done.

7 Tap Connect to log in to the server.

The application selection window appears.

8 Tap an application icon to start the application.

After you connect to a remote application for the rst time, a shortcut for the application is saved to the Recent tab. The next time you want to connect to the application, you can tap the shortcut instead of tapping the server icon.

VMware, Inc. 35

Page 36

Using VMware Horizon Client for Android

Share Access to Local Storage

You can congure Horizon Client to share local storage with a remote desktop or application. This feature is called client drive redirection.

In a Windows remote desktop or remote application, local storage appears in the Devices and drives section in the This PC folder, or in the Other section in the Computer folder. The folders and storage devices that you select for sharing use the naming format name on HorizonClient.

Prerequisites

Enable the client drive redirection feature. This task includes installing View Agent 6.1.1 or later, or

Horizon Agent 7.0 or later, and enabling the agent Client Drive Redirection option. It can also include seing policies or registry seings to control client drive redirection behavior. For more information, see the Conguring Remote Desktop Features in Horizon 7 document.

Connect to the remote desktop or application with which you want to share local storage. If you have

not logged in at least once, become familiar with the procedure “Connect to a Remote Desktop or

Application,” on page 32.

Procedure

1 Open  and tap Local storage redirection.

If you are connected to the remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon. If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar.

2 Tap Local Storage Redirection and congure the local storage redirection options.

Option Action

Automatically share all removable storage devices

Do not automatically share all removable storage devices

Share a specific folder or removable storage device

Stop sharing a specific folder or removable storage device

Select the Enable auto direct for mounted storage check box. All removable storage devices mounted to your device are automatically shared with the remote desktop or application. This option is selected by default.

Deselect the Enable auto direct for mounted storage check box. The next time you connect to the remote desktop or application, removable storage devices mounted to your device are not automatically shared with the remote desktop or application.

N Deselecting the Enable auto direct for mounted storage check box does not stop sharing a removable storage device that is already shared with the remote desktop or application.

Select the check box next to the name of the local folder or removable storage device in the list. The device becomes available in the remote desktop or application.

When you connect a removable storage device, its name appears in the list. When you disconnect a removable storage device, its name is removed from the list.

Deselect the check box next to the name of the local folder or removable storage device in the list. The device is no longer available in the remote desktop or application.

3 Tap OK to save your seings.

36 VMware, Inc.

Page 37

Chapter 3 Managing Remote Desktop and Application Connections

What to do next

Verify your changes from within the remote desktop or application.

From within a Windows remote desktop, open the This PC folder and look in the Devices and drives

section, or open the Computer folder and look in the Other section. If you shared a folder or storage device, you should see the folder or device. Shared folders and storage devices use the naming format name on HorizonClient.

From a remote application, select File > Open or File > Save As, if applicable. If you shared a folder or

storage device, you should be able to navigate to the folder or device. Shared folders and storage devices use the naming format name on HorizonClient.

Add a Desktop or Application Shortcut to the Android Home Screen

You can use a desktop or application shortcut to add a shortcut for your Android home screen.

N This feature is not available on Kindle Fire devices.

Prerequisites

Connect to the remote desktop or application at least once from the device so that a shortcut for the desktop or application appears on the Recent tab.

If you have not logged in at least once, familiarize yourself with the procedure “Connect to a Remote

Desktop or Application,” on page 32.

Procedure

1 On the Recent tab, touch and hold the shortcut.

Add To Home appears at the boom of the window.

2 Drag the shortcut to Add To Home.

3 Type a name for the shortcut and tap OK.

If the name is longer than 12 characters, the extra characters do not appear on the Android home screen.

Manage Server Shortcuts

After you connect to a server, Horizon Client creates a server shortcut. You can edit and remove server shortcuts.

Horizon Client saves the server name or IP address in a shortcut, even if you mistype the server name or type the wrong IP address. You can delete or change this information by editing the server name or IP address. If you do not type a server description, the server name or IP address becomes the server description.

Server shortcuts can appear on multiple pages and you can swipe across pages to see more shortcuts. Horizon Client creates new pages, as needed, to accommodate all of your server shortcuts.

Procedure

1 On the Servers tab, touch and hold the server shortcut until the context menu appears.

2 Use the context menu to delete the server or edit the server name, server description, or user name.

You can also remove a credential that was saved for ngerprint authentication by tapping Remove Credential.

VMware, Inc. 37

Page 38

Using VMware Horizon Client for Android

Select a Favorite Remote Desktop or Application

You can select remote desktops and applications as favorites. Favorites are identied by a star. The star helps you quickly nd your favorite desktops and applications. Your favorite selections are saved, even after you log o from the server.

Prerequisites

Obtain the credentials you need to connect to the server, such as a user name and password or RSA SecurID and passcode.

Procedure

1 On the Servers tab, tap the server shortcut to connect to the server.

2 If prompted, supply your RSA user name and passcode, your Active Directory user name and

password, or both.

3 Perform these steps to select or deselect a desktop or application as a favorite.

Option Action

Select a favorite

Deselect a favorite

4 (Optional) Tap the Favorites tab to display only favorite desktops or applications.

Touch and hold the desktop or application name until the context menu appears and tap Mark as Favorite. A star appears in the upper right corner of the name and the name appears on the Favorites tab.

On the All or Favorites tab, touch and hold the desktop or application name until the context menu appears and tap Unmark Favorite. A star no longer appears in the upper right corner of the name and the name disappears from the Favorites tab.

You can tap the All tab to display all the available desktops and applications.

Disconnecting From a Remote Desktop or Application

You can disconnect from a remote desktop without logging o, so that applications remain open on the remote desktop. You can also disconnect from a remote application so that the remote application remains open.

On a mobile device, when you are using a remote desktop or application in full-screen mode, you can disconnect by tapping the Horizon Client Tools radial menu icon and tapping the Disconnect icon. If you are not using full-screen mode, Disconnect is in the menu in the upper-right corner of the Horizon Client toolbar.

On a thin client, when you are connected to a remote desktop or application, you disconnect by clicking the Disconnect icon in the Unity Touch sidebar or in a pop-up menu, depending on your thin client model. For more information, see “Using Horizon Client on a Thin Client,” on page 15.

N A Horizon administrator can congure your desktop to automatically log o when disconnected. In that case, any open programs in your desktop are stopped.

38 VMware, Inc.

Page 39

Log Off From a Remote Desktop

You can log o from a remote desktop operating system, even if you do not have a desktop open in Horizon Client.

If you are currently connected to and logged in to a remote desktop, you can use the Windows Start menu to log o. After Windows logs you o, the desktop is disconnected.

N Any unsaved les that are open on the remote desktop are closed during the logo operation.

Prerequisites

Obtain the credentials that you need to log in, such as Active Directory user name and password, RSA

SecurID user name and passcode, or RADIUS authentication user name and passcode.

If you have not logged in at least once, become familiar with the procedure “Connect to a Remote

Desktop or Application,” on page 32.

Procedure

1 On the Servers tab, tap the server shortcut.

2 If prompted, supply your RSA user name and passcode, your Active Directory user name and

password, or both.

Chapter 3 Managing Remote Desktop and Application Connections

3 Touch and hold the desktop name until the context menu appears.

You can perform this step from either the All or Favorites tab.

4 Tap Log  in the context menu.

What to do next

Tap the Android Back buon or the Disconnect icon in the upper-right corner of the window and tap Log Out to disconnect from the server.

Manage Desktop and Application Shortcuts

After you connect to a remote desktop or application, Horizon Client saves a shortcut for the recently used desktop or application. You can rearrange and remove these shortcuts.

Desktop and application shortcuts can appear on multiple pages and you can swipe across pages to see more shortcuts. Horizon Client creates new pages, as needed, to accommodate all of your shortcuts.

Procedure

Perform these steps to remove a desktop or application shortcut from the Recent tab.

a Touch and hold the shortcut until Remove Shortcut appears at the boom of the window.

b Drag the shortcut to Remove Shortcut.

To move a desktop or application shortcut, touch and hold the shortcut and drag it to the new location.

You cannot drag a shortcut to another page unless that page already exists.

VMware, Inc. 39

Page 40

Using VMware Horizon Client for Android

Using Android 7.0 Nougat Multi-Window Modes with Horizon Client

Android 7.0 Nougat allows several apps to share the screen at the same time. You can use split-screen mode with Horizon Client on an Android 7.0 Nougat device. Horizon Client does not support picture-in-picture mode.

With split-screen mode, you can run Horizon Client and another app side-by-side, or one-above-the other. A dividing line separates the two apps, and you can make one app larger and the other app smaller.

Using Horizon Client with Samsung DeX

If your Android device supports Samsung DeX, you can use Horizon Client in DeX desktop mode.

When your device is in DeX desktop mode, Horizon Client treats your device as a thin client and Thin Client mode is enabled. For more information, see “Using Horizon Client on a Thin Client,” on page 15.

The following features are supported when you use Horizon Client in Horizon DeX desktop mode:

You can congure Horizon Client to start automatically when you switch to DeX desktop mode. See

“Enable the DeX Mode Auto Launch Feature,” on page 40.

Desktop and application sessions continue to run after you enter or exit from DeX desktop mode.

If Horizon Client is maximized, remote desktops enter full-screen mode after you switch to DeX

desktop mode..

You can use the language switch key on your Samsung physical keyboard to switch the language input

method in a remote desktop.

Enable the DeX Mode Auto Launch Feature

You can congure Horizon Client to start automatically when you switch your Android device to DeX desktop mode.

If you added a desktop or application shortcut to the Android home screen, Horizon Client connects to the most recent shortcut after Horizon Client starts. For information about adding shortcuts to the Android home screen, see “Add a Desktop or Application Shortcut to the Android Home Screen,” on page 37.

The DeX mode auto launch feature is disabled by default.

Prerequisites

Verify that your Android device supports Samsung DeX.

Procedure

1 Before you log in to a server, tap the  (gear) icon in the upper-right corner of the Horizon Client

window.

2 Tap Display, tap Dex Mode Auto Launch, and select the Dex Mode Auto Launch check box.

The DeX mode seings are hidden if your device does not support Samsung DeX.

40 VMware, Inc.

Page 41

Using a Microsoft Windows Desktop

or Application 4

On Android devices and thin clients,Horizon Client includes additional features to aid in navigation.

This chapter includes the following topics:

“Feature Support Matrix for Android,” on page 41

“Input Devices, Keyboards, and Keyboard Seings,” on page 44

“Enable the Japanese 106/109 Keyboard Layout,” on page 44

“Using the Real-Time Audio-Video Feature for Microphones,” on page 45

“Using Native Operating System Gestures with Touch Redirection,” on page 45

“Using the Unity Touch Sidebar with a Remote Desktop,” on page 45

“Using the Unity Touch Sidebar with a Remote Application,” on page 48

“Horizon Client Tools on a Mobile Device,” on page 49

“Gestures,” on page 52

“Multitasking,” on page 53

“Copying and Pasting Text and Images,” on page 53

“Saving Documents in a Remote Application,” on page 54

“Screen Resolutions and Using External Displays,” on page 54

“PCoIP Client-Side Image Cache,” on page 55

“Internationalization and International Keyboards,” on page 56

Feature Support Matrix for Android

Some features are supported on one type of Horizon Client but not on another.

Table 4‑1. Features Supported on Windows Desktops for Android Horizon Clients

Windows 10

Feature

RSA SecurID or RADIUS X X X Limited Limited X

Single sign-on X X X Limited Limited X

RDP display protocol

Desktop

Windows

8.x Desktop

Windows 7 Desktop

Windows Vista Desktop

Windows XP Desktop

Windows Server 2008/2012 R2 or Windows Server 2016 Desktop

VMware, Inc. 41

Page 42

Using VMware Horizon Client for Android

Table 4‑1. Features Supported on Windows Desktops for Android Horizon Clients (Continued)

Feature

PCoIP display protocol X X X Limited Limited X

VMware Blast display protocol

USB redirection

Client drive redirection X X X X

Real-Time Audio-Video (audio-in only)

Wyse MMR

Windows 7 MMR

Virtual printing

Location-based printing X X X Limited Limited X

Smart cards X X X Limited Limited X

Multiple monitors

Windows 10 Desktop

X X X X

Windows

8.x Desktop

Windows 7 Desktop

Windows Vista Desktop

Windows XP Desktop

Windows Server 2008/2012 R2 or Windows Server 2016 Desktop

Windows 10 desktops require View Agent 6.2 or later or Horizon Agent 7.0 or later. Windows Server 2012 R2 desktops require View Agent 6.1 or later or Horizon Agent 7.0 or later. Windows Server 2016 desktops require Horizon Agent 7.0.2 or later.

I View Agent 6.1 and later and Horizon Agent 7.0 and later releases do not support Windows XP and Windows Vista desktops. View Agent 6.0.2 is the last View release that supports these guest operating systems. Customers who have an extended support agreement with Microsoft for Windows XP and Vista, and an extended support agreement with VMware for these guest operating systems, can deploy the View Agent 6.0.2 version of their Windows XP and Vista desktops with Connection Server 6.1.

For descriptions of these features, see the View Planning document.

Feature Support for Published Desktops on RDS Hosts

RDS hosts are server computers that have Windows Remote Desktop Services and View Agent or Horizon Agent installed. Multiple users can have desktop sessions on an RDS host simultaneously. An RDS host can be either a physical machine or a virtual machine.

N The following table contains rows only for the features that are supported. Where the text species a minimum version of View Agent, the text "and later" is meant to include Horizon Agent 7.0.x and later.

Table 4‑2. Features Supported for RDS Hosts with View Agent 6.0.x or Later, or Horizon Agent 7.0.x or Later, Installed

Windows Server 2008 R2

Feature

RSA SecurID or RADIUS X X Horizon Agent 7.0.2 and later

Smart card View Agent 6.1 and later View Agent 6.1 and later Horizon Agent 7.0.2 and later

Single sign-on X X Horizon Agent 7.0.2 and later

RDP display protocol (for desktop clients)

RDS Host

X X Horizon Agent 7.0.2 and later

Windows Server 2012 RDS Host

Windows Server 2016 RDS Host

42 VMware, Inc.

Page 43

Chapter 4 Using a Microsoft Windows Desktop or Application

Table 4‑2. Features Supported for RDS Hosts with View Agent 6.0.x or Later, or Horizon Agent 7.0.x or Later, Installed (Continued)

Windows Server 2008 R2

Feature

PCoIP display protocol X X Horizon Agent 7.0.2 and later

VMware Blast display protocol

HTML Access View Agent 6.0.2 and later

Client drive redirection View Agent 6.1.1 and later View Agent 6.1.1 and

Virtual printing (for desktop clients)

Location-based printing View Agent 6.0.1 and later

Multiple monitors (for desktop clients)

Unity Touch (for mobile and Chrome OS clients)

Real-Time Audio-Video (RTAV)

RDS Host

Horizon Agent 7.0 and later Horizon Agent 7.0 and

(virtual machine only)

View Agent 6.0.1 and later (virtual machine only)

(virtual machine only)

X X Horizon Agent 7.0.2 and later

Horizon Agent 7.0.2 and later

Windows Server 2012 RDS Host

later

View Agent 6.0.2 and later (virtual machine only)

later

View Agent 6.0.1 and later (virtual machine only)

Horizon Agent 7.0.2 and later

Windows Server 2016 RDS Host

Horizon Agent 7.0.2 and later

Horizon Agent 7.0.2 and later (virtual machine only)

Horizon Agent 7.0.3 and later

For information about which editions of each guest operating system are supported, or which service packs, see the View Installation document.

Limitations for Specific Features

Specic features that are supported on Windows desktops for Horizon Client for Android have certain restrictions.

Table 4‑3. Requirements for Specific Features

Feature Requirements

Location-based printing for Windows Server 2008 R2 desktops, RDS desktops (on virtual machine RDS hosts), and remote applications

Smart cards for RDS desktops View Agent 6.1 and later or Horizon Agent 7.0 and later.

Real-Time Audio-Video (audio-in only) See “System Requirements for Real-Time Audio-Video,” on page 9.

Client drive redirection View Agent 6.1.1 and later or Horizon Agent 7.0 and later.

N You can also use Horizon Client to securely access remote Windows-based applications, in addition to remote desktops. Selecting an application in Horizon Client opens a window for that application on the local client device, and the application looks and behaves as if it were locally installed.

You can use remote applications only if you are connected to Connection Server 6.0 or later. For information about which operating systems are supported for the RDS host, which provides published applications and published desktops, see the View Installation document.

Horizon 6.0.1 with View and later servers.

VMware, Inc. 43

Page 44

Using VMware Horizon Client for Android

Feature Support for Linux Desktops

Some Linux guest operating systems are supported if you have View Agent 6.1.1 or later or Horizon Agent

7.0 or later. For a list of supported Linux operating systems and information about supported features, see the Seing Up Horizon 6 for Linux Desktops or Seing Up Horizon 7 for Linux Desktops document.

Input Devices, Keyboards, and Keyboard Settings

Horizon Client for Android supports Bluetooth and docked keyboard devices and keyboards. You can also set preferences for seings such as auto-capitalization and text correction.

External Keyboards and Input Devices

For information about the devices that your specic tablet supports, see the documentation from the tablet manufacturer.

External keyboards are sometimes automatically detected by Horizon Client. For some external keyboards, you must either tap the tablet screen with three ngers at the same time, or you must tap the Keyboard icon. If you are using a remote desktop or application in full-screen mode, the Keyboard icon is in the Horizon Client Tools radial menu. If you are not using full-screen mode, the Keyboard icon is on the Horizon Client toolbar.

N On Kindle Fire tablets, tapping with three ngers does not display the onscreen keyboard. You can instead use the Keyboard icon to display the onscreen keyboard.

After the external keyboard is detected, you might not be able to use the Horizon Client Tools or three-nger tap to display the onscreen keyboard. You might rst have to deactivate the external keyboard by pressing its Eject key.

International Onscreen Keyboards

With the correct input methods installed, you can input characters for the following languages: EnglishUnited States, Japanese, French, German, Simplied Chinese, Traditional Chinese, Korean, and Spanish.

To choose a language for the keyboard or voice, tap the Keyboard Seings key on the onscreen keyboard. The Keyboard Seings key is the left-most key on the boom row of the onscreen keyboard. When you nish selecting seings, tap the Android Back buon to dismiss the dialog box.

Enable the Japanese 106/109 Keyboard Layout

If you are connected to a Windows XP desktop, you can congure Horizon Client to use the Japanese 106/109 keyboard layout.

Prerequisites

Use Horizon Client to connect to a Windows XP desktop that has the Japanese keyboard layout enabled.

Procedure

1 Open  and tap Keyboard.

If you are using the remote desktop in full-screen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon. If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

44 VMware, Inc.

Page 45

Chapter 4 Using a Microsoft Windows Desktop or Application

2 Tap Use Japanese 106/109 Keyboard Layout to select the check box.

This seing is disabled if the keyboard layout on the Windows XP desktop is not set to Japanese or if the desktop is not running Windows XP.

Using the Real-Time Audio-Video Feature for Microphones

With the Real-Time Audio-Video feature, you can use a microphone connected to your mobile device on your remote desktop. Real-Time Audio-Video is compatible with standard audio devices and with standard conferencing applications such as Skype, WebEx, and Google Hangouts.

Real-Time Audio-Video is enabled by default when you install Horizon Client on your device.

N Only the audio-in feature is supported. The video feature is not supported.

For information about seing up the Real-Time Audio-Video feature on a remote desktop, see the Conguring Remote Desktop Features in Horizon 7 document.

When you install Horizon Client on an Android 6.0 device, Horizon Client prompts you for permission to access the microphone. You must grant permission for the microphone to work with your remote desktop. You can enable or disable access to the microphone by changing the Microphone permission for Horizon Client in the Android Seings app. For Android devices earlier than Android 6, permission to the microphone is opened by default.

Using Native Operating System Gestures with Touch Redirection

You can use native operating system gestures from your touch-based mobile device when you are connected to a Windows 8, Windows 10, or Windows Server 2012 remote desktop, or to a remote application that is hosted on Windows Server 2012. For example, you can touch, hold, and release an item on a Windows 8 desktop to display the item's context menu.

When touch redirection is enabled, you can use only native operating system touch gestures. Horizon Client local gestures, such as double-click and pinch, no longer work. You must drag the Unity Touch tab buon to display the Unity Touch sidebar.

Touch redirection is enabled by default when you connect to a Windows 8, Windows 10, or Windows Server 2012 remote desktop, or to a remote application that is hosted on Windows Server 2012.

To disable touch redirection, open , tap Touch, and deselect the Windows native touch gestures check box. If you are connected to a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon. If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Using the Unity Touch Sidebar with a Remote Desktop

You can quickly navigate to a remote desktop application or le from a Unity Touch sidebar. From this sidebar, you can open les and applications, switch between running applications, and minimize, maximize, restore, or close windows and applications in a remote desktop.

If the Unity Touch feature is enabled, the sidebar appears on the left side of the window when you rst access a remote desktop.

VMware, Inc. 45

Page 46

Using VMware Horizon Client for Android

Figure 4‑1. Unity Touch Sidebar for a Remote Desktop on a Mobile Device

Figure 4‑2. Unity Touch Sidebar for a Remote Desktop on a Thin Client

If you access a desktop that has Unity Touch enabled but the sidebar is not displayed, you can see a tab on the left side of the window. Besides swiping this tab to the right to open the sidebar, you can slide the tab up or down.

From this sidebar, you can perform many actions on a le or application.

Table 4‑4. Unity Touch Sidebar Actions for a Remote Desktop

Action Procedure

Show or hide the onscreen keyboard

Change the Horizon Client

seings

Disconnect from the desktop (Thin client only) Select the Disconnect icon.

Show the sidebar Swipe the tab to the right. When the sidebar is open, you cannot perform actions on the

Hide the sidebar Swipe the tab to the left to close the sidebar. When the sidebar is open, you cannot

(Thin client only) Select the Keyboard icon.

(Thin client only) Select the  icon.

desktop window or the Horizon Client Tools radial menu.

perform actions on the desktop window or the Horizon Client Tools radial menu.

46 VMware, Inc.

Page 47

Chapter 4 Using a Microsoft Windows Desktop or Application

Table 4‑4. Unity Touch Sidebar Actions for a Remote Desktop (Continued)

Action Procedure

Navigate to an application Tap All Programs and navigate to the application just as you would from the Windows

Start menu.

Navigate to a le

Search for an application or le

Open an application or le Tap the name of the le or application in the sidebar. The application starts and the

Switch between running applications or open windows

Minimize a running application or window

Maximize a running application or window

Close a running application or window

Restore a running application or window to its previous size and position

Create a list of favorite applications or les

Remove an application or le from the favorites list

Reorder an application or le in the favorites list

Tap My Files to access the User folder, and navigate to the le. My Files includes folders such as My Pictures, My Documents, and Downloads.

My Files includes the folders in the user prole (%USERPROFILE% directory). If you relocate the system folder in the %USERPROFILE% directory, the My Files menu can also display content from the relocated folder, whether it is a local relocated folder or a network share folder.

Tap in the Search box and type the name of the application or le.

To use voice dictation, tap the microphone on the keyboard.

To launch an application or le, tap the name of the application or le in the search

results.

To return to the home view of the sidebar, tap the X to close the Search box.

sidebar closes.

Tap the application name under Running Applications. If more than one le is open for one application, tap the chevron (>) next to the application to expand the list.

Touch and hold the application name under Running Applications until the context menu appears. Tap Minimize.

Touch and hold the application name under Running Applications until the context menu appears. Tap Maximize.

Touch and hold the application name under Running Applications until the context menu appears. Tap Close.

Touch and hold the application name under Running Applications until the context menu appears. Tap Restore.

1 Search for the application or le, or tap Manage under the Favorite Applications

or Favorite Documents list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applications or Favorite Files.

2 Tap the check box next to the names of your favorites in the search results or in the

list of available applications or les.

The favorite that you add last appears at the top of your favorites list.

Your favorites are remembered across all of your mobile devices so that, for example, you have the same list whether using your smart phone or your tablet.

1 Search for the application or le, or tap Manage under the Favorite Applications

or Favorite Dcuments list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applications or Favorite Documents.

2 Tap to remove the check mark next to the name of the application or le in the

favorites list.

1 Tap Manage under the Favorite Applications or Favorite Documents list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applications or Favorite Documents.

2 In the favorites list, touch and hold the handle on the left side of the application or

le name and drag the favorite up or down the list.

VMware, Inc. 47

Page 48

Using VMware Horizon Client for Android

N To use the Unity Touch feature with View 5.3.x desktops, the Remote Experience Agent must be installed on the desktops. If you have the Remote Experience Agent installed but want to turn o this feature, you can set a registry value on the remote desktop.

If users have a oating desktop, users’ favorite applications and les can be saved only if Windows roaming user proles are congured for the desktop. Administrators can create a default Favorite Applications list that end users see the rst time the sidebar appears.

Using the Unity Touch Sidebar with a Remote Application

You can quickly navigate to a remote application from a Unity Touch sidebar. From this sidebar, you can launch applications, switch between running applications, and minimize, maximize, restore, or close remote applications. You can also switch to a remote desktop.

When you access a remote application, the Unity Touch sidebar appears on the left side of the window. If the Unity Touch sidebar is closed, a tab appears on the left side of the window. You can swipe this tab to the right to reopen the sidebar. You can also slide the tab up or down.

N You can use remote applications only if you are connected to Connection Server 6.0 or later.

Figure 4‑3. Unity Touch Sidebar for a Remote Application on a Mobile Device

Figure 4‑4. Unity Touch Sidebar for a Remote Application on a Thin Client

48 VMware, Inc.

Page 49

Chapter 4 Using a Microsoft Windows Desktop or Application

From the Unity Touch sidebar, you can perform many actions on a remote application.

Table 4‑5. Unity Touch Sidebar Actions for a Remote Application

Action Procedure

Show or hide the onscreen keyboard

Modify Horizon Client seings (Thin client only) Select the  icon.

Disconnect from the application (Thin client only) Select the Disconnect icon.

Show the sidebar Swipe the tab to the right to open the sidebar. When the sidebar is open, you cannot

Hide the sidebar Swipe the tab to the left to close the sidebar. When the sidebar is open, you cannot

Switch between running applications

Open an application Tap the name of the application under Applications in the sidebar. The application

Close a running application 1 Touch and hold the application name under Current Connection until the

Minimize a running application 1 Touch and hold the application name under Current Connection until the

Maximize a running application 1 Touch and hold the application name under Current Connection until the

Restore a running application 1 Touch and hold the application name under Current Connection until the

Switch to a remote desktop Tap the desktop name under Desktops.

(Thin client only) Select the Keyboard icon.

perform actions on the application window.

Tap the application under Current Connection.

starts and the sidebar closes.

context menu appears.

2 Tap Close.

context menu appears.

2 Tap Minimize.

context menu appears.

2 Tap Maximize.

context menu appears.

2 Tap Restore.

Horizon Client Tools on a Mobile Device

On a mobile device, the Horizon Client Tools include buons for displaying the onscreen keyboard, virtual touchpad, conguration seings, and a virtual keypad for arrow keys and function keys.

When you use a remote desktop or application in full-screen mode, the Horizon Client Tools radial menu icon appears at the right edge of the window. You can drag the radial menu icon to relocate it. Tap to expand the radial menu and display icons for each tool, which you can tap to select. Tap outside the tool icons to collapse the icons back into the radial menu icon.

If the remote desktop or application is not in full-screen mode, a toolbar appears on the right side of the menu bar at the top of the window. You can tap the Full Screen icon on the toolbar to enter full-screen mode. When you are in full-screen mode, you can tap a similar icon in the radial menu to exit full-screen mode.

The radial menu includes several tools.

VMware, Inc. 49

Page 50

Using VMware Horizon Client for Android

Table 4‑6. Radial Menu Icons

Icon Description

Horizon Client Tools radial menu

Disconnect

Onscreen keyboard (toggles to show or hide)

Seings

Navigation keys

Virtual touchpad

Gesture help

Onscreen Keyboard

The onscreen keyboard has more keys than the standard onscreen keyboard, for example, Control keys and function keys are available. To display the onscreen keyboard, tap the screen with three ngers at the same time or tap the Keyboard icon.

If you are using a remote desktop or application in full-screen mode, the Keyboard icon is in the Horizon Client Tools radial menu. If you are not using full-screen mode, the Keyboard icon is on the Horizon Client toolbar.

You can also use the feature that displays the onscreen keyboard whenever you tap a text eld, such as in a note or new contact. If you then tap in an area that is not a text eld, the keyboard is dismissed.

To turn this feature on or o, use the Keyboard popup and Keyboard dismiss options. To display these options when you are using a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, and tap Keyboard. If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

N On Kindle Fire tablets, tapping with three ngers does not display the onscreen keyboard. You can instead tap the Keyboard icon on the Horizon Client toolbar to display the onscreen keyboard.

Even if you use an external keyboard, a one-row onscreen keyboard might still appear, which contains function keys, and the Ctrl, Alt, Win, and arrow keys. Some external keyboards do not have all these keys.

50 VMware, Inc.

Page 51

Chapter 4 Using a Microsoft Windows Desktop or Application

Sending a String of Characters

From the onscreen keyboard, tap the pen icon on the left side of the Ctrl key to display the local input buer. Text that you type into this text box is not sent to an application until you tap Send. For example, if you open an application such as Notepad and tap the pen icon, the text that you type does not appear in the Notepad application until you tap Send.

Use this feature if you have a poor network connection. That is, use this feature if, when you type a character, the character does not immediately appear in the application. With this feature, you can quickly type up to 1,000 characters and then either tap Send or tap Return to have all 1,000 characters appear at once in the application.

Navigation Keys

Tap the Ctrl/Page icon in the Horizon Client Tools or onscreen keyboard to display the navigation keys. These keys include Page Up, Page Down, arrow keys, function keys, and other keys that you often use in Windows environments, such as Alt, Del, Shift, Ctrl, Win, and Esc. You can press and hold arrow keys for continuous key strokes. For a picture of the Ctrl/Page icon, see the table at the beginning of this topic.

Use the Shift key on this keypad when you need to use key combinations that include the Shift key, such as Ctrl+Shift. To tap a combination of these keys, such as Ctrl+Alt+Shift, rst tap the onscreen Ctrl key. After the Ctrl key turns blue, tap the onscreen Alt key. After the Alt key turns blue, tap the onscreen Shift key. A single onscreen key is provided for the key combination Ctrl+Alt+Del.

Onscreen Touchpad and Full-Screen Touchpad

The virtual touchpad can be either regular-size, to resemble a touchpad on a laptop computer, or full screen, so that the entire device screen is a touchpad.

By default, when you tap the touchpad icon, you can touch anywhere on the screen to move the mouse pointer. The screen becomes a full-screen touchpad.

Moving your nger around the touchpad creates a mouse pointer that moves around the remote

desktop or application.

You can use the regular-size and full-screen virtual touchpad for single-clicking and double-clicking.

The regular touchpad also contains left-click and right-click buons.

You can tap with two ngers and then drag to scroll vertically.

You can drag the regular-size virtual touchpad to the side of the device so that you can use your thumb to operate the touchpad while you are holding the device.

You can make the virtual touchpad resemble the touchpad on a laptop, including right-click and left-click buons, by seing the Full screen touchpad seing to o. If you are using the remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Touch, and deselect the Full screen touchpad seing.

To adjust how quickly the pointer moves when you use the touchpad, adjust the Touchpad sensitivity option. If you are using the remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Touch, tap Touchpad sensitivity, and drag the slider.

If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

VMware, Inc. 51

Page 52

Using VMware Horizon Client for Android

Gestures

VMware has created user interaction aids to help you navigate conventional Windows user interface elements on a non-Windows device.

Clicking

As in other applications, you tap to click a user interface element.

Right-Clicking

The following options are available for right-clicking:

Use the Horizon Client Tools to display the regular virtual touchpad and use the touchpad's right-click

buon.

On a touch screen, tap with two ngers at nearly the same time. The right-click occurs where the rst

nger tapped.

On some devices, you can use an external mouse, such as a USB or Bluetooth mouse, to right-click.

Scrolling and Scrollbars

The following options are available for vertical scrolling.

On a touch screen, tap with one or two ngers and then drag to scroll. The text under your ngers

moves in the same direction as your ngers.

I Scrolling with one nger has the following limitations: It does not work if you have zoomed in, or when the onscreen keyboard is displayed, or when you are using the full-screen touchpad.

Use the Horizon Client Tools to display the touchpad, tap the touchpad with two ngers, and then drag

to scroll.

Use the onscreen touchpad to move the mouse pointer and click scroll bars.

Zooming In and Out

As in other applications, pinch your ngers together or apart to zoom on a touch screen.

Window Resizing

If you use the full-screen touchpad to resize a window, touch and hold one nger at the corner or side of the window and drag to resize.

If you use the regular-size virtual touchpad, touch and hold the left-click buon while dragging the corner or side of a window.

Sound, Music, and Video

If sound is turned on for your device, you can play audio in a remote desktop.

Using a Thin Client

How you interact with Windows user interface elements when Horizon Client is installed on a thin client depends on your thin client model and the external input device you are using with your thin client. For more information, see “Using Horizon Client on a Thin Client,” on page 15.

52 VMware, Inc.

Page 53

Multitasking

You can switch between Horizon Client and other apps without losing a remote desktop or application connection.

In a WiFi network, by default Horizon Client runs in the background indenitely. In a 3G network, Horizon Client suspends data transmission when you switch to another app. Data transmission resumes when you switch back to Horizon Client.

The Horizon Client icon appears in the status bar when the app is running in the background and there is a connection to a remote desktop. To switch back to Horizon Client, tap the icon in the status bar.

You can copy and paste plain text between an Android device application and a remote desktop or between two remote desktops. Formaing information is not copied.

Text that you copy to your Android device's clipboard is automatically copied to your remote desktop's

clipboard when you log in to the remote desktop.

If you are logged in to a remote desktop, text that you copy to the remote desktop's clipboard is copied

to your Android device's clipboard when you press the Home buon or switch to the background.

By default, you can copy and paste plain text between an Android device application and a remote application. The clipboard can accommodate up to 64K characters for copy and paste operations.

Chapter 4 Using a Microsoft Windows Desktop or Application

To enable users to copy plain text between a remote application and an Android device application, you must modify the PCoIP or VMware Blast group policy seing called  clipboard redirection on the RDS host that hosts the remote application pool.

For information about conguring PCoIP and VMware Blast group policy seings, see the Conguring Remote Desktop Features in Horizon 7 document.

Copying and Pasting Text and Images

By default, you can copy and paste plain text from your Android device to a remote desktop or application. If a Horizon administrator enables the feature, you can also copy and paste plain text from a remote desktop or application to your Android device, or between two remote desktops or applications.

A Horizon administrator can set this feature so that copy and paste operations are allowed only from your Android device to a remote desktop or application, or only from a remote desktop or application to your Android device, or both, or neither.

You can also copy and paste images and Rich Text Format (RTF) text, but the following restrictions apply:

You can copy and paste images and RTF text from your Android device to a remote desktop or

application. You cannot copy and paste images and RTF text from a remote desktop or application to your Android device.

Only Google apps are supported. For example, you can copy and paste images and RTF text from

Google Docs, Gmail, Chrome, Google+, Google Hangouts, Google Calendar, Google Sheets, and Google Slides.

You can copy and paste images only when your Android device can access the Google website.

If you select an image and RTF text (or plain text) together, the image is discarded and only the text is

copied and pasted. To copy and paste an image, you must select only the image.

A Horizon administrator can use group policies to restrict clipboard formats during copy and paste

operations. The clipboard format lter policies for Microsoft Oce Chart and Smart Art data and Microsoft Text Eects data are not supported. For information about clipboard format lter policies, see the Conguring Remote Desktop Features in Horizon 7 document. Using Smart Policies to control copy and paste behavior in remote desktops is not supported.

VMware, Inc. 53

Page 54

Using VMware Horizon Client for Android

The clipboard can accommodate a maximum of 1 MB of data for copy and paste operations. If the text and RTF data together use less than maximum clipboard size, the formaed text is pasted. Often the RTF data cannot be truncated, so that if the text and formaing use more than the maximum clipboard size amount, the RTF data is discarded, and plain text is pasted. If you are unable to paste all of the formaed text you selected in one operation, you might need to copy and paste smaller amounts in each operation.

Saving Documents in a Remote Application

With certain remote applications, such as Microsoft Word or WordPad, you can create and save documents. Where these documents are saved depends on your company's network environment. For example, your documents might be saved to a home share mounted on your local computer.

Administrators can use an ADMX template le to set a group policy that species where documents are saved. This policy is called Set Remote Desktop Services User Home Directory. For more information, see the Conguring Remote Desktop Features in Horizon 7 document.

Screen Resolutions and Using External Displays

You can use Horizon Client with external displays and you can change screen resolutions.

When you connect your device to an external display or projector, Horizon Client supports certain maximum display resolutions. You can change the screen resolution used on your device to allow scrolling a larger screen resolution.

Enlarging the Screen Resolution for a Remote Desktop

By default, the display resolution is set so that the entire Windows desktop ts inside your device, and the desktop icons and task bar icons are a certain size. If you change the default to a higher resolution, the desktop still ts inside the device, but the desktop and taskbar icons become smaller.

You can pinch your ngers apart to zoom in and make the desktop larger than the device screen. You can then tap and drag to access the edges of the desktop.

Changing the Display Resolution Setting

You can use the Resolution seing to set the display resolution to a larger value. If you are using a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Display, and tap Resolution. If you are not using full-screen mode,  is in the menu in the upperright corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Using High Quality Mode

You can use the High Quality Mode feature to obtain the best display quality in remote desktops and applications.

To enable High Quality Mode, before you connect to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window, tap Display, and then tap High Quality Mode. You cannot enable the High Quality Mode seing after you connect to a remote desktop or application.

The High Quality Mode feature has the following requirements and limitations:

You cannot use the High Quality Mode feature for existing sessions. You must log out and log in to a

new session for the feature to take eect.

The High Quality Mode seing is not available if your Android device has less than an extra-high

density (xhdpi) screen.

54 VMware, Inc.

Page 55

Chapter 4 Using a Microsoft Windows Desktop or Application

The High Quality Mode feature requires Horizon Agent 7.0.3 or later.

High Quality Mode is disabled by default.

Using External Displays

You can use the Enable External display seing to congure seings for external displays, such as projectors and aached monitors.

When the Enable External display seing is selected, you can select the Presentation mode, Multi-Monitor

mode, Keep screen on when external display is connected, and Zoom seings. When the Enable External display seing is not selected, all of the external display seings are disabled.

In Presentation mode, a keyboard and expanded onscreen touchpad appear on the device when you display a remote desktop on an external display. The expanded touchpad and keyboard appear when you plug the device into the external display. The device detects the maximum resolution provided by the external display. The presentation mode feature is supported only if you have an Android 4.2 or later device.

You can use the Multi-Monitor mode seing to extend a secondary desktop on an external display. The Unity Touch sidebar is supported only on the device monitor. You cannot change the orientation and fullscreen mode. You can interact with remote desktops and applications on the external display with the onscreen touchpad and full-screen touchpad. You cannot use the physical mouse on the external display. The multi-monitor mode feature is supported only if you have an Android 4.2 or later device.

You can use the Keep screen on when external display is connected seing to keep the display from turning o after a period of inactivity. You can drag the Zoom slider to set the resolution for the external display.

If you are connected to a remote desktop or application, pressing the Android Back buon quits presentation mode or multi-monitor mode and the Enable External display seing is deselected.

To congure external display seings if you are using a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Display, and then tap External Display Options. If you are not using full-screen mode,  is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Do not use an external mouse, such as a Bluetooth mouse, when using the Presentation mode seing. Instead, use the large onscreen touchpad on the Android device. If you aempt to use a mouse, the mouse pointer might not be able to move to the boom or right side of the screen, and when moved to the top of the screen, might conict with some of the function keys shown on the large onscreen touchpad, rather than the top of the remote desktop.

PCoIP Client-Side Image Cache

PCoIP client-side image caching stores image content on the client to avoid retransmission. This feature reduces bandwidth usage.

The PCoIP image cache captures spatial, as well as temporal, redundancy. For example, when you scroll down through a PDF document, new content appears from the boom of the window and the oldest content disappears from the top of the window. All the other content remains constant and moves upward. The PCoIP image cache is capable of detecting this spatial and temporal redundancy.

Because during scrolling, the display information sent to the client device is primarily a sequence of cache indices, using the image cache saves a signicant amount of bandwidth. This ecient scrolling has benets both on the LAN and over the WAN.

On the LAN, where bandwidth is relatively unconstrained, using client-side image caching delivers

signicant bandwidth savings.

VMware, Inc. 55

Page 56

Using VMware Horizon Client for Android

Over the WAN, to stay within the available bandwidth constraints, scrolling performance would be

degraded without client-side caching. Over the WAN, client-side caching saves bandwidth and ensure a smooth, highly responsive scrolling experience.

With client-side caching, the client stores portions of the display that were previously transmied. The cache size is 250 MB.

Internationalization and International Keyboards

Both the Horizon Client user interface and the documentation are available in English, Japanese, French, German, Simplied Chinese, Traditional Chinese, Korean, and Spanish. International keyboards of EnglishUnited States, Japanese, French, German, Simplied Chinese, Traditional Chinese, Korean, and Spanish are supported.

To choose a language for the keyboard or voice, tap the Keyboard Seings key on the onscreen keyboard. The Keyboard Seings key is the left-most key on the boom row of the onscreen keyboard.

56 VMware, Inc.

Page 57

Troubleshooting Horizon Client 5

You can solve most Horizon Client problems by reseing the desktop or reinstalling the app.

You can also enable log collection and send log les to VMware for troubleshooting.

This chapter includes the following topics:

“Collecting and Sending Logging Information,” on page 57

“Restart a Remote Desktop,” on page 59

“Reset a Remote Desktop or Remote Applications,” on page 60

“Uninstall Horizon Client,” on page 60

“Horizon Client Stops Responding or the Remote Desktop Freezes,” on page 61

“Problem Establishing a Connection When Using a Proxy,” on page 61

“Connecting to a Server in Workspace ONE Mode,” on page 61

Collecting and Sending Logging Information

You can congure Horizon Client to collect log information and send log les to VMware for troubleshooting.

If Horizon Client quits unexpectedly, Horizon Client immediately prompts you to send log les to VMware. If log collection is enabled, the crash log le contains detailed debug information. If log collection is disabled, only certain exception information is included in the crash log le.

Horizon Client generates three types of log les (Horizon_View_Client_logs_timestamp.txt,

libcdk_timestamp.txt, and pcoip_client_timestamp.txt) and keeps the last ve log les of each type.

If you choose to send log les to VMware, Horizon Client uses the available email client on your device to create a message. If your email client can send multiple aachments, Horizon Client aaches the last ve log les of each type to the message. If your email client cannot send multiple aachments, Horizon Client compresses the last ve log les of each type and aaches a ZIP le to the message. The ZIP le name contains a time stamp, for example, Horizon_View_Client_logs_timestamp.zip.

You can also manually retrieve and send log les at any time.

Enable Horizon Client Log Collection

When you enable log collection, Horizon Client creates log les that contain information that can help VMware troubleshoot problems with Horizon Client.

Because log collection aects the performance of Horizon Client, enable log collection only if you are experiencing a problem.

VMware, Inc.

Page 58

Using VMware Horizon Client for Android

Prerequisites

Verify that an email client is available on your device. Horizon Client requires an email client to send log

les.

Procedure

1 Open  and tap Log collection.

If you are connected to a remote desktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon and tap the gear icon. If you are not using full-screen mode,  is in the menu in the upper right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

2 Tap Enable log to select the check box and tap OK to conrm your choice.

After log collection is enabled, Horizon Client generates a log le it quits unexpectedly or when it is exited and relaunched.

Manually Retrieve and Send Horizon Client Log Files

When Horizon Client log collection is enabled on your device, you can manually retrieve and send log les at any time.

This procedure shows you how retrieve and send log les through Horizon Client. You can also retrieve log les by using tools that can access app storage space. Horizon Client saves log les in the

Android/data/com.vmware.view.client.android/files directory.

Prerequisites

Verify that an email client is available on your device. Horizon Client requires an email client to send

log les.

Enable Horizon Client log collection. See “Enable Horizon Client Log Collection,” on page 57.

Procedure

1 Open  and tap Log collection.

2 Tap Send the log.

Horizon Client uses the email client on your device to create a message. The body of the message contains information about your device. If your email client can send multiple aachments, Horizon Client aaches the last ve log les of each type to the message. If your email client cannot send multiple aachments, Horizon Client compresses the last ve log les of each type and aaches a ZIP le to the message.

58 VMware, Inc.

Page 59

Disable Horizon Client Log Collection

Because log collection aects the performance of Horizon Client, disable log collection if you are not troubleshooting a problem.

Procedure

1 Open  and tap Log collection.

2 Tap Enable log to clear the check box.

Restart a Remote Desktop

You might need to restart a remote desktop if the desktop operating system stops responding. Restarting a remote desktop is the equivalent of the Windows operating system restart command. The desktop operating system usually prompts you to save any unsaved data before it restarts.

You can restart a remote desktop only if a Horizon administrator has enabled the desktop restart feature for the desktop.

Chapter 5 Troubleshooting Horizon Client

For information about enabling the desktop restart feature, see the Seing Up Virtual Desktops in Horizon 7 or Seing Up Published Desktops and Applications in Horizon 7 document.

Prerequisites

Obtain login credentials, such as a user name and password, RSA SecurID user name and passcode,

RADIUS authentication user name and passcode, or smart card personal identication number (PIN).

If you have not logged in at least once, become familiar with the procedure “Connect to a Remote

Desktop or Application,” on page 32.

Procedure

1 On the Servers tab, tap the server shortcut to connect to the server.

2 If prompted, supply your RSA user name and passcode, your Active Directory user name and

password, or both.

3 Touch and hold the desktop name until the context menu appears.

You can perform this step from either the All or Favorites tab.

4 Tap Restart in the context menu.

Restart is available only if the status of the desktop is such that the action can be taken.

The operating system in the remote desktop reboots and Horizon Client disconnects and logs o from the desktop.

What to do next

Wait an appropriate amount of time for system startup before you aempt to reconnect to the remote desktop.

If restarting the remote desktop does not solve the problem, you might need to reset the remote desktop. See

“Reset a Remote Desktop or Remote Applications,” on page 60.

VMware, Inc. 59

Page 60

Using VMware Horizon Client for Android

Reset a Remote Desktop or Remote Applications

You might need to reset a remote desktop if the desktop operating system stops responding and restarting the remote desktop does not solve the problem. Reseing remote applications quits all open applications.

Reseing a remote desktop is the equivalent of pressing the Reset buon on a physical PC to force the PC to restart. Any les that are open on the remote desktop are closed and are not saved.

Reseing remote applications is the equivalent of quiing the applications without saving any unsaved data. All open remote applications are closed, even applications that come from dierent RDS server farms.

You can reset a remote desktop only if a Horizon administrator has enabled the desktop reset feature for the desktop.

For information about enabling the desktop reset feature, see the Seing Up Virtual Desktops in Horizon 7 or Seing Up Published Desktops and Applications in Horizon 7 document.

Prerequisites

Obtain login credentials, such as a user name and password, RSA SecurID user name and passcode,

RADIUS authentication user name and passcode, or smart card personal identication number (PIN).

If you have not logged in at least once, become familiar with the procedure “Connect to a Remote

Desktop or Application,” on page 32.

Procedure

1 On the Servers tab, tap the server shortcut to connect to the server.

2 If prompted, supply your RSA user name and passcode, your Active Directory user name and

password, or both.

3 Touch and hold the desktop or application name until the context menu appears.

You can perform this step from either the All or Favorites tab.

4 Tap Reset in the context menu.

Reset is available only if the status of the desktop or application is such that the action can be taken.

When you reset a remote desktop, the operating system in the remote desktop reboots and Horizon Client disconnects and logs o from the desktop. When you reset remote applications, the applications quit.

What to do next

Wait an appropriate amount of time for system startup before aempting to reconnect to the remote desktop or application.

Uninstall Horizon Client

You can sometimes resolve problems with Horizon Client by uninstalling and reinstalling Horizon Client.

You uninstall Horizon Client just as you would any Android app.

Procedure

1 On your device, go to the Horizon app.

2 Touch and hold the app icon until the Uninstall (trash can) icon appears on your device.

3 Drag the app to the Uninstall (trash can) icon.

Alternatively, you can go to Apps >  and select Applications > Manage Applications to uninstall Horizon Client.

60 VMware, Inc.

Page 61

Chapter 5 Troubleshooting Horizon Client

What to do next

Reinstall Horizon Client.

See “Install or Upgrade Horizon Client,” on page 14.

Horizon Client Stops Responding or the Remote Desktop Freezes

When the window freezes, rst, try reseing the remote desktop operating system.

Problem

Horizon Client does not work or repeatedly exits unexpectedly or the remote desktop freezes.

Cause

Assuming that Horizon servers are congured properly and that rewalls surrounding them have the correct ports open, other issues usually relate to Horizon Client on the device or to the guest operating system on the remote desktop.

Solution

If the operating system in the remote desktop freezes, use Horizon Client on the device to reset the

desktop.

This option is available only if the Horizon administrator has enabled this feature.

Uninstall and reinstall the app on the device.

If reseing the remote desktop and reinstalling Horizon Client do not help, you can reset the Android

device, as described in the user guide for your Android device.

If you get a connection error when you aempt to connect to the server, you might need to change your

proxy seings.

Problem Establishing a Connection When Using a Proxy

Sometimes if you aempt to connect to Connection Server using a proxy while on the LAN, an error occurs.

Problem

If the Horizon environment is set up to use a secure connection from the remote desktop to Connection Server, and if the client device is congured to use an HTTP proxy, you might not be able to connect.

Cause

Unlike Windows Internet Explorer, the client device does not have an Internet option to bypass the proxy for local addresses. When an HTTP proxy is used for browsing external addresses, and you try to connect to Connection Server using an internal address, you might see the error message Could not establish

connection.

Solution

Remove the proxy seings so that the device no longer uses a proxy.

Connecting to a Server in Workspace ONE Mode

If you cannot connect to a server directly through Horizon Client, or if your desktop and application entitlements are not visible in Horizon Client, Workspace ONE mode might be enabled on the server.

Problem

When you try to connect to the server directly through Horizon Client, Horizon Client redirects you to

the Workspace ONE portal.

VMware, Inc. 61

Page 62

Using VMware Horizon Client for Android

When you open a desktop or application through a URI or shortcut, or when you open a local le

through le association, the request redirects you to the Workspace ONE portal for authentication.

After you open a desktop or application through Workspace ONE and Horizon Client starts, you cannot

see or open other entitled remote desktops or applications in Horizon Client.

Cause

Beginning with Horizon 7 version 7.2, an administrator can enable Workspace ONE mode on a Connection Server instance. This behavior is normal when Workspace ONE mode is enabled on a Connection Server instance.

Solution

Use Workspace ONE to connect to a Workspace ONE enabled server and access your remote desktops and applications.

62 VMware, Inc.

Page 63

Index

agent, installation requirements 13 AirWatch integration 19, 20 Android, installing Horizon Client on 8

Android Horizon Client, uninstalling 60

background multitasking 53

caching, client-side image 55 certificates, ignoring problems 31

Chromebooks 9 client image cache 55 Connection Server 13 connection problems 61 copying and pasting 53 customer experience program, desktop pool

data 22

default view 18 DeX Mode 40 disconnecting from a remote desktop 38 display requirements 54 displays, external 54

external displays 54

setup for Android devices 7 system requirements for Android devices 8 troubleshooting 61

Horizon Client for Android

installing 14 uninstalling 60

image cache, client 55 input devices for the Android 44

Japanese keyboard layout 44

keyboard

navigation keys 49

onscreen 49, 52 keyboard support 44, 56 keys, navigation 49

local storage redirection 36 log collection 58, 59 log off 39 logging 57 logging in

to a desktop 32

to a server 32

favorites 38 favorites list in Unity Touch sidebar 45 feature support matrix 41 fingerprint authentication 12

Google Play Store 14, 60

hardware requirements

Android devices 8 smart card authentication 10

Horizon Client

disconnect from a desktop 38 logging in 32

VMware, Inc.

manage desktop shortcuts 39 managing desktops 31 multitasking 53

navigation keys 49

operating systems, supported on the agent 13 options, configuration 49

PCoIP client image cache 55 picture in picture mode 40 prerequisites for client devices 13

Page 64

Using VMware Horizon Client for Android

projectors 54 proxy connections 61

Real-Time Audio-Video feature 9, 45 reset a desktop 60 resizing windows 52 resolution, screen 54 restart desktop 59 RSA SecurID tokens 16 running in the background 53

Samsung DeX Mode 40 saving documents in a remote application 54 screen resolution 54 scrolling 52 security servers 13 server connections, managing 31

shortcut

desktops 39

Home screen 37 sidebar, Unity Touch 45 smart card authentication

on devices 11

requirements 10 software tokens 16 split screen mode 40 SSL options 17 system requirements, for Android devices 8

Windows 8 gestures 45 Workspace ONE 61

tablet gestures 52 thin client 15 thin client requirements 8 Thin Client mode 15 tokens, RSA SecurID 16

toolbar, Horizon Client 49 touchpad, virtual 49 troubleshooting, connection problems 61

Unauthenticated Access 35 Unity Touch feature 45 Unity Touch sidebar 48 URI examples 28 URI syntax for Horizon Clients 25 URIs (uniform resource identifiers) 25

VMware Blast 17

64 VMware, Inc.

VMware Horizon Client 4.5 User Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

Using VMware Horizon Client for Android

Setup and Installation 1

System Requirements

System Requirements for Thin Clients

System Requirements for Chromebooks

System Requirements for Real-Time Audio-Video

Smart Card Authentication Requirements

Configure Smart Card Authentication

Fingerprint Authentication Requirements

Supported Desktop Operating Systems

Preparing Connection Server for Horizon Client

Install or Upgrade Horizon Client

Configure Horizon Client in Thin Client Mode

Using Horizon Client on a Thin Client

Using Embedded RSA SecurID Software Tokens

Configure Advanced TLS/SSL Options

Configure VMware Blast Options

Configure the Horizon Client Default View

Configure AirWatch to Deliver Horizon Client to Android Devices

Configure AirWatch to Deliver Horizon Client to Android for Work Devices

Horizon Client Data Collected by VMware

Syntax for Creating vmware-view URIs

Examples of vmware-view URIs

Setting the Certificate Checking Mode for Horizon Client

Connect to a Remote Desktop or Application

Use Unauthenticated Access to Connect to Remote Applications

Share Access to Local Storage

Add a Desktop or Application Shortcut to the Android Home Screen

Manage Server Shortcuts

Select a Favorite Remote Desktop or Application

Disconnecting From a Remote Desktop or Application

Log Off From a Remote Desktop

Manage Desktop and Application Shortcuts

Using Android 7.0 Nougat Multi-Window Modes with Horizon Client

Using Horizon Client with Samsung DeX

Enable the DeX Mode Auto Launch Feature

Feature Support Matrix for Android

Input Devices, Keyboards, and Keyboard Settings

Enable the Japanese 106/109 Keyboard Layout

Using the Real-Time Audio-Video Feature for Microphones

Using Native Operating System Gestures with Touch Redirection

Using the Unity Touch Sidebar with a Remote Desktop

Using the Unity Touch Sidebar with a Remote Application

Horizon Client Tools on a Mobile Device

Gestures

Multitasking

Copying and Pasting Text and Images

Saving Documents in a Remote Application

Screen Resolutions and Using External Displays

PCoIP Client-Side Image Cache

Internationalization and International Keyboards

Troubleshooting Horizon Client 5

Collecting and Sending Logging Information

Enable Horizon Client Log Collection

Manually Retrieve and Send Horizon Client Log Files

Disable Horizon Client Log Collection

Restart a Remote Desktop

Reset a Remote Desktop or Remote Applications

Uninstall Horizon Client

Horizon Client Stops Responding or the Remote Desktop Freezes

Problem Establishing a Connection When Using a Proxy

Connecting to a Server in Workspace ONE Mode

Index