Install an SSL Certificate for Horizon Blast on a Windows Machine

Installing an SSL certificate involves a post sysprep script/batch file and copying the certificate.

Use the post build configuration script SetupComplete.cmd to import the SSL certificate and configure the HTML Access registry (applies to Windows 7 and later).

Read this Microsoft documentation page to understand where the SetupComplete.cmd must be located: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/dd744268(v=ws.10).

Read this Microsoft documentation page to understand the reg add command used to add the key SslHash to the Horizon Blast Config registry key.

Procedure

1. Copy the SSL certificate file to a location where Windows can access it, typically on the C drive. This path and file name together make the <certificatefile> in Step 3.

2. In the Windows machine, create a file SetupComplete.cmd in %WINDIR%\Setup\Scripts. Create the Scripts folder if it does not exist.

3. Add the following commands in the SetupComplete.cmd file, replacing the placeholder values with your specific values.

If you have the root certificate and intermediate certificates in the certificate chain, then add the appropriate CertUtil commands in a batch file.

The thumbprint value in the following code sample is the thumbprint you copy from the SSL certificate file.

For the reg add line, you must specify the appropriate HKLM\SOFTWARE key for Horizon Blast Config where this sample has <blastconfig-registrykey>. Contact Omnissa Support for the specific key that's appropriate for your Horizon release.

```
CertUtil  -importPFX -f  -p "<your-certificate-password>" "C:\<certificatefile>"
reg add "<blastconfig-registrykey" /f /v "SslHash" /t REG_SZ /d "31 2a 32 50 1a 0b 34 b1 65 46 13 a8 0a 5e f7 43 6e a9 2c 3e"
del /F /Q "C:\<path>"
del /F /Q "%systemroot%\setup\scripts\SetupComplete.cmd"

```

5. Save the SetupComplete.cmd file. You can test the SetupComplete.cmd file on a test machine.