Install an SSL Certificate for Horizon Blast on a Windows Machine

Installing an SSL certificate involves a post sysprep script/batch file and copying the certificate.

Use the post build configuration script SetupComplete.cmd to import the SSL certificate and configure the registry keys related to Horizon Web Client (applies to Windows 7 and later). Note: Horizon Web Client is available with Horizon 8 versions 2412 and later. For Horizon 8 versions 2406 and earlier, Horizon Web Client is called "HTML Access." This page uses the name "Horizon Web Client" to refer to both Horizon Web Client and HTML Access.

See https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/dd744268(v=ws.10).

Procedure

1. Copy the SSL certificate file to <path>.

2. Create a file SetupComplete.cmd in the < folder>. Create a folder called Scripts if it does not exist.

3. Add the following commands in the SetupComplete.cmd file.

4. If you have the root certificate and intermediate certificates in the certificate chain, then add the appropriate CertUtil commands in a batch file.

   CertUtil  -importPFX -f  -p "<password>" "C:\<path>"
           reg add "HKLM\SOFTWARE\Omnissa\Horizon\Blast\Config" /f /v "SslHash" /t REG_SZ /d "31 2a 32 50 1a 0b 34 b1 65 46 13 a8 0a 5e f7 43 6e a9 2c 3e"
   del /F /Q "C:\<path>"
   del /F /Q "%systemroot%\setup\scripts\SetupComplete.cmd"
   
   

5. Save the SetupComplete.cmd file. You can test the SetupComplete.cmd file on a test machine.