VMware Horizon View Client for iOS User Guide

Using VMware Horizon View Client for

iOS

January 2014 Horizon View

This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http://www.vmware.com/support/pubs.

EN-001161-00

Using VMware Horizon View Client for iOS

You can find the most up-to-date technical documentation on the VMware Web site at:

http://www.vmware.com/support/

The VMware Web site also provides the latest product updates.

If you have comments about this documentation, submit your feedback to:

docfeedback@vmware.com

VMware, Inc.

3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com

2 VMware, Inc.

Using VMware Horizon View Client for iOS 5

Setup and Installation 7

System Requirements 7

Preparing View Connection Server for Horizon View Client 8

Using Embedded RSA SecurID Software Tokens 9

Configure Advanced SSL Options 10

Supported Desktop Operating Systems 11

Configure the View Client Download Links Displayed in View Portal 11

Install or Upgrade Horizon View Client for iOS 12

Horizon View Client Data Collected by VMware 13

Using URIs to Configure Horizon View Client 15

Syntax for Creating vmware-view URIs 15

Examples of vmware-view URIs 17

Managing Server Connections and Desktops 19

Certificate Checking Modes for Horizon View Client 21

Manage the Saved List of Servers 21

Disconnecting from a Desktop 22

Log Off from a Desktop 22

Roll Back a Desktop 23

Manage Desktop Shortcuts 24

VMware, Inc.

Using a Microsoft Windows Desktop on a Mobile Device 25

Feature Support Matrix 25

External Keyboards and Input Devices 26

Enable the Japanese 106/109 Keyboard Layout 27

Starting, Minimizing, and Closing Applications with Unity Touch 27

Horizon View Client Tools 30

Gestures 32

Multitasking 33

Configure Horizon View Client to Support Reversed Mouse Buttons 34

Screen Resolutions and Using External Displays 34

PCoIP Client-Side Image Cache 35

Internationalization 35

Troubleshooting Horizon View Client 37

Collecting and Sending Logging Information 37

Enable View Client Log Collection 37

Using VMware Horizon View Client for iOS

Manually Retrieve and Send Horizon View Client Log Files 38

Disable View Client Log Collection 38

Reset a Desktop 38

Uninstall the VMware View App 39

Horizon View Client Stops Responding or the Remote Desktop Freezes 40

Problem Establishing a Connection When Using a Proxy 40

Index 41

4 VMware, Inc.

Using VMware Horizon View Client for iOS

This guide, Using VMware Horizon View Client for iOS, provides information about installing and using VMware® Horizon View™ software on an iOS device to connect to a desktop in the datacenter.

The information in this document includes system requirements and instructions for installing Horizon View Client. This document also provides tips for improving the user experience of navigating and using Windows desktop elements on an iOS device such as an iPad.

This information is intended for administrators who need to set up a Horizon View deployment that includes iOS client devices. The information is written for experienced system administrators who are familiar with virtual machine technology and datacenter operations.

VMware, Inc. 5

Using VMware Horizon View Client for iOS

6 VMware, Inc.

Setup and Installation 1

Setting up an Horizon View deployment for iOS clients involves using certain View Connection Server configuration settings, meeting the system requirements for View servers and iOS clients, and installing the VMware View app from the Apple App Store. VMware also recommends that you set up a View security server so that your iOS clients will not need a VPN connection.

This chapter includes the following topics:

“System Requirements,” on page 7

“Preparing View Connection Server for Horizon View Client,” on page 8

“Using Embedded RSA SecurID Software Tokens,” on page 9

“Configure Advanced SSL Options,” on page 10

“Supported Desktop Operating Systems,” on page 11

“Configure the View Client Download Links Displayed in View Portal,” on page 11

“Install or Upgrade Horizon View Client for iOS,” on page 12

“Horizon View Client Data Collected by VMware,” on page 13

System Requirements

You can install Horizon View Client on all models of iPad and iPhone.

The iOS device on which you install Horizon View Client, and the peripherals it uses, must meet certain system requirements.

iPad and iPhone Models

VMware, Inc. 7

Horizon View Client for iOS 2.3: iPhone 4, 4S, 5, 5S, and 5C; and iPad,

iPad 2, iPad (3rd generation), iPad (4th generation), iPad mini, iPad mini with Retina display, and iPad Air

Horizon View Client for iOS 2.2: iPhone 4, 4S, 5, 5S, and 5C; and iPad,

iPad 2, iPad (3rd generation), iPad (4th generation), and iPad mini

Horizon View Client for iOS 2.0 and 2.1: iPhone 4, 4S, and 5; and iPad,

iPad 2, iPad (3rd generation), iPad (4th generation), and iPad mini

View Client for iOS 1.7: iPhone 4, 4S, and 5; and iPad, iPad 2, iPad (3rd

generation), iPad (4th generation), and iPad mini

View Client for iOS 1.6: iPhone 4 and 4S; and iPad, iPad 2, and iPad (3rd

generation)

View Client for iPad 1.5: iPad, iPad 2, and iPad (3rd generation)

Using VMware Horizon View Client for iOS

View Client for iPad 1.2 1.3, and 1.4: iPad and iPad 2

View Client for iPad 1.0 and 1.1: iPad

Operating systems

External keyboards

View Connection Server, Security Server, and View Agent

Horizon View Client for iOS 2.2 and 2.3: iOS 5.0 and later, including iOS

6.x and iOS 7.x

Horizon View Client for iOS 2.1: iOS 5.0 and later, including iOS 6.x

Horizon View Client for iOS 2.0: iOS 4.2 and later, including iOS 6.x

View Client for iOS 1.7: iOS 4.2 and later, including iOS 6.x

View Client for iOS 1.6: iOS 4.2 through 5.x

View Client for iPad 1.5: iOS 4.2 through 5.x

View Client for iPad 1.2, 1.3, and 1.4: iOS 4.2

View Client for iPad 1.0 and 1.1: iOS 4.2

IMPORTANT To use the Unity Touch feature, you must have iOS 5.0 or later.

(Optional) iPad Keyboard Dock and Apple Wireless Keyboard (Bluetooth)

Latest maintenance release of VMware View 4.6.x and later VMware View and VMware Horizon View releases

VMware recommends that you use a security server so that your iOS clients will not require a VPN connection.

IMPORTANT The Unity Touch feature requires Horizon View 5.2 servers and desktops. The Remote Experience Agent must also be installed on the desktop. For more information, see the VMware Horizon View Feature Pack Installation and Administration document and see “Starting, Minimizing, and

Closing Applications with Unity Touch,” on page 27.

Display protocol for

PCoIP

Horizon View

Preparing View Connection Server for Horizon View Client

Administrators must perform specific tasks to enable end users to connect to remote desktops.

Before end users can connect to View Connection Server or a security server and access a remote desktop, you must configure certain pool settings and security settings:

If you are using a security server, as VMware recommends, verify that you are using the latest

maintenance releases of View Connection Server 4.6.x and View Security Server 4.6.x or later releases. See the VMware Horizon View Installation documentation.

If you plan to use a secure tunnel connection for client devices and if the secure connection is

configured with a DNS host name for View Connection Server or a security server, verify that the client device can resolve this DNS name.

To enable or disable the secure tunnel, in View Administrator, go to the Edit View Connection Server Settings dialog box and use the check box called Use secure tunnel connection to desktop.

Verify that a desktop pool has been created and that the user account that you plan to use is entitled to

access the remote desktop. See the topics about creating desktop pools in the VMware Horizon View Administration documentation.

8 VMware, Inc.

To use two-factor authentication with Horizon View Client, such as RSA SecurID or RADIUS

authentication, you must enable this feature on View Connection Server. RADIUS authentication is available with View 5.1 or later View Connection Server. For more information, see the topics about two-factor authentication in the VMware Horizon View Administration documentation.

To allow end users to save their passwords with Horizon View Client, so that users do not always need

to supply credentials when logging in to a remote desktop, configure the policy for this feature on View Connection Server.

This feature is available for View Client 1.5 and later connecting to remote desktops through View Connection Server 5.1 or later . Users can save their passwords if the policy is configured to allow it and if Horizon View Client can fully verify the server certificate that View Connection Server presents. For instructions about configuring this policy, see the topic called "Allow Users to Save Credentials" in the chapter called "Setting Up User Authentication," in the VMware Horizon View Administration documentation.

Verify that the desktop pool is set to use the PCoIP display protocol. See the VMware Horizon View

Administration documentation.

Using Embedded RSA SecurID Software Tokens

If you create and distribute RSA SecurID software tokens to end users, they need enter only their PIN, rather than PIN and token code, to authenticate.

Chapter 1 Setup and Installation

Setup Requirements

NOTE This feature is available only if you are using View Client 1.2 or later.

You can use Compressed Token Format (CTF) or dynamic seed provisioning, which is also called CT-KIP (Cryptographic Token Key Initialization Protocol), to set up an easy-to-use RSA authentication system. With this system, you generate a URL to send to end users. To install the token, end users paste this URL directly into Horizon View Client on their client devices. The dialog box for pasting this URL appears when end users connect to View Connection Server with Horizon View Client.

After the software token is installed, end users enter a PIN to authenticate. With external RSA tokens, end users must enter a PIN and the token code generated by a hardware or software authentication token.

The following URL prefixes are supported if end users will be copying and pasting the URL into Horizon View Client when Horizon View Client is connected to an RSA-enabled View Connection Server:

viewclient-securid://

com.rsa.securid.iphone://

com.rsa.securid://

For end users who will be installing the token by tapping the URL, only the prefix viewclient-securid:// is supported.

For information about using dynamic seed provisioning or file-based (CTF) provisioning, see the Web page

RSA SecurID Software Token for iPhone Devices at http://www.rsa.com/node.aspx?id=3652 or RSA SecurID Software Token for Android at http://www.rsa.com/node.aspx?id=3832.

VMware, Inc. 9

Using VMware Horizon View Client for iOS

Instructions to End Users

When you create a CTFString URL or CT-KIP URL to send to end users, you can generate a URL with or without a password or activation code. You send this URL to end users in an email that must include the following information:

Instructions for navigating to the Install Software Token dialog box.

Tell end users to tap External Token in the Horizon View Client dialog box that prompts them for RSA SecurID credentials when they connect to View Connection Server.

CTFString URL or CT-KIP URL in plain text.

If the URL has formatting on it, end users will get an error message when they try to use it in View Client.

Activation code, if the CT-KIP URL that you create does not already include the activation code.

End users must enter this activation code in a text field of the dialog box.

If the CT-KIP URL includes an activation code, tell end users that they need not enter anything in the

Password or Activation Code text box in the Install Software Token dialog box.

Configure Advanced SSL Options

In Horizon View Client 2.3 and later, you can select the security protocols that Horizon View Client can use to connect to a View server. You can also specify the cipher control string.

IMPORTANT Horizon View Client and View Connection Server support TLS v1.0 and TLS v1.1 by default. You should change the security protocols in Horizon View Client only if your View administrator instructs you to do so, or if your View server does not support the latest protocols.

Prerequisites

Verify that you have Horizon View Client 2.3 or later.

Verify the security protocol that your View server can use. If you configure a security protocol for

Horizon View Client that is not enabled on your View server, the connection fails with an SSL error.

For information about configuring security protocols for View Connection Server, see the VMware Horizon View Security document.

Procedure

1 On your iOS device, tap Settings > VMware View.

2 Tap Advanced SSL Options.

3 Make sure that the Reset to Default Settings option is set to Off.

4 To enable or disable a security protocol, tap the On or Off toggle next to the security protocol name.

TLS v1.0 and TLS v1.1 are enabled by default.

5 To change the cipher control string, tap inside the text box and replace the default string.

The default cipher control string (AES:!aNULL:@STRENGTH) includes cipher suites that use either 128bit or 256-bit AES encryption, except for anonymous DH algorithms, and sorts them by strength.

6 (Optional) If you need to revert to the default settings, tap to toggle the Reset to Default Settings

option to On.

Your changes take effect the next time you connect to a View server.

10 VMware, Inc.

Chapter 1 Setup and Installation

Supported Desktop Operating Systems

Administrators create virtual machines with a guest operating system and install View Agent in the guest operating system. End users can log in to these virtual machines from a client device.

For a list of the supported guest operating systems, see the "Supported Operating Systems for View Agent" topic in the Horizon View 4.6.x or 5.x installation documentation.

Configure the View Client Download Links Displayed in View Portal

By default, when you open a browser and enter the URL of a View Connection Server instance, the portal page that appears contains links to the VMware Download site for downloading Horizon View Client. You can change the default .

The default Horizon View Client links on portal page ensure that you are directed to the latest compatible Horizon View Client installers. In some cases, however, you might want to have the links point to an internal Web server, or you might want to make specific client versions available on your own View Connection Server. You can reconfigure the page to point to a different URL.

When you make links for Mac OS X, Linux, and Windows client systems, the correct operating system specific link is shown on the portal page. For example, if you browse to the portal page from a Windows system, only the link or links for Windows installers appear. You can make separate links for 32-bit and 64bit installers. You can also make links for iOS and Android systems, but these operating systems are not automatically detected, so that if you browse to the portal page from an iPad, for example, you see the links for both iOS and Android, if you created links for both.

IMPORTANT If you customize the portal page links, as described in this topic, and later install VMware Horizon View HTML Access on the server, your customized portal page is replaced by an HTML Access page. For information about customizing that page, see Using VMware Horizon View HTML Access.

Prerequisites

Download the installer files for the Horizon View Client types that you want to use in your

environment. The URL to the client download page is https://www.vmware.com/go/viewclients.

Determine which HTTP server will host the installer files. The files can reside on a View Connection

Server instance or on another HTTP server.

Procedure

1 On the HTTP server where the installer files will reside, create a folder for the installer files.

For example, to place the files in a downloads folder on the View Connection Server host, in the default installation directory, use the following path:

C:\Program Files\VMware\VMware View\Server\broker\webapps\downloads

The links to the files would then use URLs with the format https://server-name/downloads/client-

installer-file-name. For example, a server with the name view.mycompany.com might use the following

URL for View Client for Windows: https://view.mycompany.com/downloads/VMware-Horizon-View-

Client.exe. In this example, the folder named downloads is located in the webapps root folder.

2 Copy the installer files into the folder.

If the folder resides on View Connection Server, you can replace any files in this folder without having to restart the VMware View Connection Server service.

3 On the View Connection Server machine, copy the portal-links.properties file and the

portal.properties file located in install-path\Server\Extras\PortalExamples.

VMware, Inc. 11

Using VMware Horizon View Client for iOS

4 Create a portal folder the directory C:\ProgramData\VMware\VDM, and copy the portal-

links.properties and portal.properties files into the portal folder.

5 Edit C:\ProgramData\VMware\VDM\portal\portal-links.properties file to point to the new location of

the installer files.

You can edit the lines in this file and add to them if you need to create more links. You can also delete lines.

The following examples show properties for creating two links for View Client for Windows and two links for View Client for Linux:

link.win=https://server-name/downloads/VMware-Horizon-View-Client-x86_64-y.y.y-XXXX.exe#win link.win.1=https://server-name/downloads/VMware-Horizon-View-Client-y.y.y-XXXX.exe#win link.linux=https://server-name/downloads/VMware-Horizon-View-Client-x86_64-y.y.y- XXXX.rpm#linux link.linux.1=https://server-name/downloads/VMware-Horizon-View-Client-y.y.y-XXXX.tar.gz#linux

In this example, y.y.y-XXXX indicates the version and build number. The win text at the end of the line indicates that this link should appear in the browser if the client has a Windows operating system. Use

win for Windows, linux for Linux, and mac for Mac OS X. For other operating systems, use unknown.

6 Edit C:\ProgramData\VMware\VDM\portal\portal.properties file to specify the text to display for the

links.

These lines appear in the section of the file called # keys based on key names in portal-

links.properties.

The following example shows the text that corresponds to the links specified for link.win and

link.win.1:

text.win=View Client for Windows 32 bit Client users text.win.1=View Client for Windows 64 bit Client users

7 Restart the VMware View Connection Server service.

When end users enter the URL for View Connection Server, they see links with the text you specified. The links point to the locations you specified.

Install or Upgrade Horizon View Client for iOS

You can install Horizon View Client from the VMware Downloads page or from the App Store.

Prerequisites

If you have not already set up the iOS device, do so. See the user guide from Apple.

Verify that you have the URL for a download page that contains the VMware Horizon View Client

installer. This URL might be the VMware Downloads page at http://www.vmware.com/go/viewclients, or it might be the URL for a View Connection Server instance.

When you browse to a View Connection Server URL, by default the links on that portal page point to the VMware Downloads page. You can configure the links to point to a different location. For more information, see “Configure the View Client Download Links Displayed in View Portal,” on page 11. Depending on how the page is configured, you might also see a link for VMware Horizon View HTML Access. HTML Access allows you to connect to a virtual desktop using the browser, without installing any client software. Because VMware Horizon View Client offers more features and better performance than the HTML Access client, VMware generally recommends that you install the client software.

12 VMware, Inc.

Procedure

1 On your iOS device, Mac, or PC, browse to the URL for downloading the installer file, or search the

App Store for the VMware View application.

2 Download the application.

3 If you downloaded the application to a Mac or PC, connect your iOS device to the computer and follow

the onscreen instructions in iTunes.

4 To determine that installation succeeded, verify that the VMware View application icon appears on one

of the desktops of the Home screen on the device.

Horizon View Client Data Collected by VMware

If your company participates in the customer experience improvement program, VMware collects data from certain Horizon View Client fields. Fields containing sensitive information are made anonymous.

NOTE This feature is available only if your Horizon View deployment uses View Connection Server 5.1 or later. Client information is sent for View Client 1.7 and later clients.

VMware collects data on the clients to prioritize hardware and software compatibility. If your company's administrator has opted to participate in the customer experience improvement program, VMware collects anonymous data about your deployment in order to improve VMware's response to customer requirements. No data that identifies your organization is collected. Horizon View Client information is sent first to View Connection Server and then on to VMware, along with data from Horizon View servers, desktop pools, and remote desktops.

Chapter 1 Setup and Installation

Although the information is encrypted while in transit to View Connection Server, the information on the client system is logged unencrypted in a user-specific directory. The logs do not contain any personally identifiable information.

To participate in the VMware customer experience improvement program, the administrator who installs View Connection Server can opt in while running the View Connection Server installation wizard, or an administrator can set an option in View Administrator after the installation.

Table 1‑1. Data Collected from Horizon View Clients for the Customer Experience Improvement Program

Is This Field Made

Description

Company that produced the Horizon View Client application

Product name No VMware Horizon View Client

Client product version No The format is x.x.x-yyyyyy, where x.x.x is the client version

Client binary architecture No Examples include the following:

Client build name No Examples include the following:

Anonymous? Example Value

No VMware

number and yyyyyy is the build number.

i386

x86_64

arm

VMware-Horizon-View-Client-Win32-Windows

VMware-Horizon-View-Client-Linux

VMware-Horizon-View-Client-iOS

VMware-Horizon-View-Client-Mac

VMware-Horizon-View-Client-Android

VMware-Horizon-View-Client-WinStore

VMware, Inc. 13

+ 29 hidden pages

VMware Horizon View Client for iOS User Guide

Contents

Using VMware Horizon View Client for iOS

Setup and Installation 1

System Requirements

Preparing View Connection Server for Horizon View Client

Using Embedded RSA SecurID Software Tokens

Configure Advanced SSL Options

Supported Desktop Operating Systems

Configure the View Client Download Links Displayed in View Portal

Install or Upgrade Horizon View Client for iOS

Horizon View Client Data Collected by VMware