In this post I will demonstrate the configuration that are required to deploy the VMware Enrollment Servers for High availability and redundancy. This includes two Certificate Authority CA’s and Enrollment Servers
My colleague Tarique Chowdhury has an excellent post on the TrueSSO Lab Setup. However in that deployment it talks about a single Enrollment Server and Certificate Authority Server.
This post is not a replacement of the Setting Up TrueSSO guide on VMware Pubs. However the below mentioned two sections complement during the configurations for everything else follow the setup guide/blogs:
Certificate deployment – Enrollment Agent (Computer).
Deploying the Enrollment Agent (Computer) certificate onto this server, we are authorizing this ES to act as an Enrollment Agent and generate Certificates on behalf of users.
Both the Certificate Authority Server Enrollment Agent (Computer) certificate needs to be added. They are added one-by-one. The Personal –> Certificate store should look like below on the ES:
Configure TrueSSO on the Horizon Connection Servers:
Step1: Adding both the Enrollment Server (ES) – Adding the ES to the environment, we are able to query the ES about the domain and relevant True SSO info.
|
Step2 – List both the newly deployed Enrollment Server – We will get info about various components of the environment which will be useful for configuring True SSO.
|
Step3 – Adding the Connector for TrueSSO – A True SSO Connector is a configuration set where we specify details like ES(s), CA(s) and a Certificate Template to use for a certain Domain. When a Horizon CS gets a request to launch a desktop for an AD user, it will look up True SSO Connector for the domain the user belongs to and will use the components as specified to obtain a Certificate on behalf of the user.
|
Step4 – List the SAML Authenticator available in Horizon environment – A SAML Authenticator contains the trust and metadata exchange between Horizon View and vIDM. To use True SSO, we need to identify the correct SAML Authenticator and enable True SSO.
|
Step5 – Enable TrueSSO for the SAML Authenticator
|
Step6 – Check the status on the Horizon Administrator Dashboard
I hope you find these steps useful during the TrueSSO Availability and Redundancy configurations.
Thanks,
Aresh
Hi, I hoped to check with you. If my customer only has 1 enrollment server with 1 connection server to begin with, then a replicate server is added, how could we add the newly added replicate server onto the existing enrollment server? vdmutil reports error when we create connector. It complains the connector has been created.
Great Article Final Year Project Domains for CSE Project Centers in Chennai JavaScript Training in Chennai JavaScript Training in Chennai
The post is very helpful for developing myself and most of the required contents are there. Thanks for your great post with your sharing us…!Unix Training in ChennaiUnix shell scripting Training in ChennaiExcel Training in ChennaiCorporate Training in ChennaiOracle Training in ChennaiOracle DBA Training in ChennaiPega Training in ChennaiUnix Training in ChennaiUnix shell scripting Training in Chennai
Aresh, Cheers this is exactly what I was looking for. If I have any feedback during my build I will post. Thank you for providing this.
This comment has been removed by the author.
I like to learn a piece of new information about technology. Im really like your post. Good job.Struts Training in ChennaiStruts course in ChennaiStruts Training center in Chennaistruts Training in Anna NagarWordPress Training in ChennaiWordPress Training Institutes in ChennaiSpring Training in ChennaiHibernate Training in Chennai
Awesome blog…thanks for sharing valuable articles…..Struts Training in ChennaiStruts Training institutes in ChennaiStruts Training Chennaistruts Training in Anna Nagarstruts Training in T NagarWordPress Training in ChennaiSAS Training in ChennaiSpring Training in ChennaiPhotoshop Classes in ChennaiDOT NET Training in Chennai
Wonderful Blog!!! Waiting for your upcoming data… thanks for sharing with us.Software Testing Training in Chennaisoftware testing course in chennaisoftware testing training institute in chennaisoftware testing courseSoftware testing training in vadapalaniSoftware testing training in porurPython Training in ChennaiHadoop Training in ChennaiBig data training in chennaiJAVA Training in Chennai
Thank you for your efforts and I am inspiried with your written style. IELTS Coaching in ChennaiBest IELTS Coaching in Chennaigerman classeslearn Japanese in ChennaiBest Spoken English Class in ChennaiTOEFL Coaching Centres in ChennaiIELTS Coaching in OMRIELTS Coaching in Porur