You can select the security protocols and cryptographic algorithms that are used to encrypt communications between Omnissa Horizon Client and Omnissa Horizon Connection Server or Omnissa Unified Access Gateway instances, and between Horizon Client and Horizon Agent in a remote desktop.
Supported TLS Protocols
Horizon Client supports the TLS 1.1, TLS 1.2, and TLS 1.3 security protocols. Older protocols such as TLS 1.0, SSL 2.0, and SSL 3.0 are not supported.
Default TLS Settings
Horizon Client uses the following default TLS settings:
| Security Protocol | Default Setting in Non-FIPS Mode | Default Setting in FIPS Mode |
|---|---|---|
| TLS 1.3 | Enabled | Not enabled |
| TLS 1.2 | Enabled | Enabled |
| TLS 1.1 | Not enabled | Not enabled |
The default cipher control strings are as follows:
- TLS v1.1 or TLS v1.2 -
- (Non-FIPS mode) !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES
- (FIPS mode) !aNULL:ECDHE+AES
- TLS v1.3-
- (Non-FIPS mode) TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
- (FIPS mode) TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256
Guidelines for Configuring TLS Settings
Before changing any TLS settings from the defaults, review the guidelines and limitations described in this section.
If you configure security protocols for Horizon Client and none of these protocols are enabled on the Horizon Connection Server or Unified Access Gateway instance to which the client connects, a TLS error occurs and the connection fails.
For information about configuring the security protocols that Horizon Connection Server can accept, see the Horizon Security document.
To configure the cipher list, specify one or more cipher strings in order of preference, separated by colons. The cipher string is case-sensitive.
Configuring Advanced TLS Settings
Note: Before changing any TLS settings from the defaults, review the Guidelines for Configuring TLS Settings.
- Tap Settings at the bottom of the Horizon Client window.
- Tap Advanced SSL Options.
- Verify that the Reset to Default Settings option is set to off.
- To activate or deactivate a security protocol, tap the On or Off toggle next to the security protocol name.
- To change the cipher list, replace the default string.
- (Optional) To revert to the default settings, tap Reset in the upper right corner of the window.
Your changes take effect the next time you connect to the server.
Was this page helpful?