When you receive updated server SSL certificates or intermediate certificates, you import the certificates into the Windows local computer certificate store on each View Connection Server, security server, or View Composer host.

Typically, server certificates expire after 12 months. Root and intermediate certificates expire after 5 or 10 years.

For detailed information about importing server and intermediate certificates, see "Configure View Connection Server, Security Server, or View Composer to Use a New SSL Certificate" in the VMware Horizon View Installation document.

Obtain updated server and intermediate certificates from the CA before the currently valid certificates expire.

Verify that the Certificate snap-in was added to MMC on the Windows Server on which the View Connection Server instance, security server, or View Composer service was installed.

1

Import the signed SSL server certificate into the Windows local computer certificate store on the Windows Server host.

a

In the Certificate snap-in, import the server certificate into the Certificates (Local Computer) > Personal > Certificates folder.

b

Select Mark this key as exportable.

c

Click Next and click Finish.

2

For View Connection Server or security server, delete the certificate Friendly name, vdm, from the old certificate that was issued to the View server.

a

Right-click the old certificate and click Properties

b

On the General tab, delete the Friendly name text, vdm.

3

For View Connection Server or security server, add the certificate Friendly name, vdm, to the new certificate that is replacing the previous certificate.

a

Right-click the new certificate and click Properties

b

On the General tab, in the Friendly name field, type vdm.

c

Click Apply and click OK.

4

For a server certificate that is issued to View Composer, run the SviConfig ReplaceCertificate utility to bind the new certificate to the port used by View Composer.

This utility replaces the old certificate binding with the new certificate binding.

a

Stop the View Composer service.

b

In a Windows command prompt, type the SviConfig ReplaceCertificate command. For example:

sviconfig -operation=ReplaceCertificate
          -delete=false

The utility displays a numbered list of SSL certificates that are available in the Windows local computer certificate store.

c

To select a certificate, type the number of the certificate and press Enter.

5

If intermediate certificates are issued to a View Connection Server, security server, or View Composer host, import the most recent update to the intermediate certificates into the Certificates (Local Computer) > Intermediate Certification Authorities > Certificates folder in the Windows certificate store.

6

Restart the View Connection Server service, Security Server service, or View Composer service to make your changes take effect.