You can select the security protocols and cryptographic algorithms that are used to encrypt communications between Omnissa Horizon Client and servers, and between Horizon Client and the agent in a remote desktop.
These options are also used to encrypt the USB channel (communication between the USB service daemon and the agent).
With the default setting, cipher suites use 128-bit or 256-bit AES, remove anonymous DH algorithms, and then sort the current cipher list in order of encryption algorithm key length.
By default, TLS v1.1 and TLS v1.2 are enabled. SSL v2.0, SSL v3.0, and TLS v1.0 are not supported.
If you configure a security protocol for Horizon Client that is not enabled on the server to which the client connects, a TLS error occurs and the connection fails.
Important: At least one of the protocols that you enable in Horizon Client must also be enabled on the remote desktop or USB devices cannot be redirected to the remote desktop.
On the client system, you can use either configuration file properties or command-line options for these settings:
-
To use configuration file properties, use the following properties:
- view.sslProtocolString
- view.sslCipherString
- view.disableTLSv13
- view.sslCipherSuites
For more information, look up the property names in the table in Horizon Client Configuration Settings and Command-Line Options.
-
To use command-line configuration options, use the following options.
- --sslProtocolString=
- --sslCipherString=
- --disableTLSv13
- --sslCipherSuites=
For more information, look up the option names in the table in Horizon Client Configuration Settings and Command-Line Options.
이 페이지가 도움이 되었나요?