You can use the silent installation feature of the Microsoft Windows Installer (MSI) to install a security server on several Windows computers. In a silent installation, you use the command line and do not have to respond to wizard prompts.

With silent installation, you can efficiently deploy View components in a large enterprise.

Determine the type of topology to use. For example, determine which load balancing solution to use. Decide if the View Connection Server instances that are paired with security servers will be dedicated to users of the external network. For information, see the VMware Horizon View Architecture Planning document.

Important

If you use a load balancer, you must have static IP addresses for the load balancer and each security server. For example, if you use a load balancer with two security servers, you need 3 static IP addresses.

Verify that your installation satisfies the requirements described in View Connection Server Requirements.

Prepare your environment for the installation. See Installation Prerequisites for View Connection Server.

Verify that the View Connection Server instance to be paired with the security server is installed and configured and is running a View Connection Server version that is compatible with the security server version. See "Horizon View Component Compatibility Matrix" in the VMware Horizon View Upgrades document.

Verify that the View Connection Server instance to be paired with the security server is accessible to the computer on which you plan to install the security server.

Configure a security server pairing password. See Configure a Security Server Pairing Password.

Familiarize yourself with the format of external URLs. See Configuring External URLs for Secure Gateway and Tunnel Connections.

Verify that Windows Firewall with Advanced Security is set to on in the active profiles. It is recommended that you turn this setting to on for all profiles. By default, IPsec rules govern connections between security server and View Connection Server and require Windows Firewall with Advanced Security to be enabled.

Familiarize yourself with the network ports that must be opened on the Windows Firewall for a security server. See Firewall Rules for View Connection Server.

If your network topology includes a back-end firewall between the security server and View Connection Server, you must configure the firewall to support IPsec. See Configuring a Back-End Firewall to Support IPsec.

If you are upgrading or reinstalling the security server, verify that the existing IPsec rules for the security server were removed. See Prepare to Upgrade or Reinstall a Security Server.

Familiarize yourself with the MSI installer command-line options. See Microsoft Windows Installer Command-Line Options.

Familiarize yourself with the silent installation properties available with a security server. See Silent Installation Properties for a Security Server.

1

Download the View Connection Server installer file from the VMware product page at http://www.vmware.com/products/ to the Windows Server computer.

The installer filename is VMware-viewconnectionserver-x86_64-y.y.y-xxxxxx.exe, where xxxxxx is the build number and y.y.y is the version number.

2

Open a command prompt on the Windows Server computer.

3

Type the installation command on one line.

For example: VMware-viewconnectionserver-y.y.y-xxxxxx.exe /s /v"/qn VDM_SERVER_INSTANCE_TYPE=3 VDM_SERVER_NAME=cs1.internaldomain.com VDM_SERVER_SS_EXTURL=https://view.companydomain.com:443 VDM_SERVER_SS_PCOIP_IPADDR=10.20.30.40 VDM_SERVER_SS_PCOIP_TCPPORT=4172 VDM_SERVER_SS_PCOIP_UDPPORT=4172 VDM_SERVER_SS_BSG_EXTURL=https://view.companydomain.com:8443 VDM_SERVER_SS_PWD=secret"

The View services are installed on the Windows Server computer. For details, see Install a Security Server.

Note

If the installation is cancelled or aborted, you might have to remove IPsec rules for the security server before you can begin the installation again. Take this step even if you already removed IPsec rules prior to reinstalling or upgrading security server. For instructions on removing IPsec rules, see Prepare to Upgrade or Reinstall a Security Server.

Configure an SSL server certificate for the security server. See Configuring SSL Certificates for View Servers.

You might have to configure client connection settings for the security server, and you can tune Windows Server settings to support a large deployment. See Configuring View Client Connections and Sizing Windows Server Settings to Support Your Deployment.

If your users connect to the security server through HTML Access, you must enable a rule in the Windows Firewall to open the HTML Access port. See Open the Port Used by HTML Access on Security Servers.