Q-See Remote Client Software V 4.0.1 Spécifications télécharger pdf (Page 110)

View Manager Administration Guide

110 VMware, Inc.

Using keytool to Create a Truststore

Fromacommandprompt,enterthefollowing:

keytool -import -alias <alias> -file <certificate>

-keystore <truststore_filename>

Inthiscommand,<alias>isaunique(case‐insensiti v e)nameforanewentityentryinthe

truststore(inthiscase,th ecertificateyouareabouttoimport), <certificate>isthe

nameoftherootCA certificateyoupreviouslyobtainedorexported,and<truststore

filename>isthenameofthetruststore

outputfile.

Enabling Smart Card Authentication on the Server

AlltypesofViewConnectionServersupportsmartcardauthenticationbutitis

recommendedthatonlysecurityserversareconfiguredtoallowsmartcardaccess.

If youaddsmartcardsupporttostandardorreplicaserversyouwillbepromptedto

selectacertificateeverytimeyouconnecttoViewAdministratoron

thosesystems.

To add smart card authentication to View Connection Server

1Copythetruststorefileyoupreviouslycreated(<truststore_filename>)tothe

followinglocationonViewConnectionServer:

C:\Program Files\VMware\VMware View\Server\sslgateway\conf\

2 Createatextfilecalledlocked.propertiesthatcontainsthefollowingentries:

trustKeyfile=<truststore filename>

trustStoretype=JKS

useCertAuth=true

ThevaluefortrustKeyfilemustcorrespondtothatof

<truststore filename>.

YoumustrestarttheViewConnectionServerserviceforthesechangestotakeeffect.

OTEYoumaybeaskedtocreateapasswordforthekeystore—thisisnotrequiredfor

futureprocedures,butyoushouldrememberitifyouwanttoaddadditional

certificatestothetruststoreatalaterdate.

NOTEInenvironmentswherenotalluserswillauthenticateusingasmartcarditis

alsorecommendedthatyouconfigureanew(oranadditional)securityserver

specificallyforthepurposeofclientsmartcardauthentication.

OTEOnceastandardorreplicaViewConnectionServerhasbeenconfigured,you

willbepromptedtochooseacertificatewhenloggingintoViewPortalortoView

Administratoronthatserver.

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 231 232

Pas de commentaire

Q-See Remote Client Software V 4.0.1 Spécifications Page 110