Note: Horizon Web Client is available with Horizon 8 versions 2412 and later. For Horizon 8 versions 2406 and earlier, Horizon Web Client is called "HTML Access." This documentation page uses the name "Horizon Web Client" to refer to both Horizon Web Client and HTML Access.
To support Horizon Web Client, you must install Apache Tomcat, the nginx package, and the Horizon Web Client warball on the Linux-based desktop. Follow the procedure described in this article for your Linux distribution.
Note: The Horizon Agent Direct-Connection Plug-In is supported on Linux desktops running Horizon Agent 2111 or later.
Set Up an Ubuntu/Debian Desktop for Horizon Web Client
-
Install the Apache Tomcat software.
-
For Debian 12.x, install Tomcat 10.
sudo apt-get install tomcat10 -
For other Debian releases and Ubuntu, install Tomcat 9.
sudo apt-get install tomcat9
-
-
Install the nginx package.
sudo apt-get install nginx -
Edit the
/etc/nginx/conf.d/hznvadc.confconfiguration file so that it includes the following content.server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
Download the Horizon Web Client
portal.warzip file from the product downloads site at https://customerconnect.omnissa.com/downloads/#all_products.Navigate to the download page for your release of Omnissa Horizon and find the Horizon Web Client zip file.
-
Deploy the Horizon Web Client warball.
-
For Debian 12.x, run the following commands.
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /var/lib/tomcat10/webapps chown tomcat: /var/lib/tomcat10/webapps/portal.war chmod 755 /var/lib/tomcat10/webapps/portal.war cp -r /var/lib/tomcat10/webapps/portal /var/lib/tomcat10/webapps/ROOT/ -
For other Debian releases and Ubuntu, run the following commands.
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /var/lib/tomcat9/webapps chmod 755 /var/lib/tomcat9/webapps/portal.war
-
-
Restart the machine for the changes to take effect.
Set Up a RHEL/CentOS Desktop for Horizon Web Client
-
Install and configure the Tomcat software.
a. (RHEL 8.x only) Before installing Tomcat, install the latest Extra Packages for Enterprise Linux (EPEL) release.
yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpmb. Install Tomcat, and configure Security-Enhanced Linux (SELinux) settings for Tomcat.
sudo yum install tomcat /usr/lib/omnissa/viewagent/vadc/tomcat_selinux.sh -
Install the nginx package.
a. (RHEL/CentOS 7.x only) Before installing nginx, install the latest EPEL release.
yum install epel-releaseb. Install the nginx package.
yum install nginx -
Edit the
/etc/nginx/conf.d/hznvadc.confconfiguration file so that it includes the following content.server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
Download the Horizon Web Client
portal.warzip file from the product downloads site at https://customerconnect.omnissa.com/downloads/#all_products. -
Deploy the Horizon Web Client warball.
#To get portal.war unzip {Horizon Web Client zip file name} sudo cp portal.war /var/lib/tomcat/webapps/ sudo chown tomcat: /var/lib/tomcat/webapps/portal.war sudo chmod -R 750 /var/lib/tomcat/webapps/portal.war -
Restart the machine for the changes to take effect.
Set Up a SUSE Desktop for Horizon Web Client
-
Install and configure the Tomcat software.
The following example shows the command sequence for installing Tomcat on a SUSE 15 SP3 machine. In the first command line, replace the example address with the Java download URL for your SUSE version.
sudo zypper addrepo https://download.opensuse.org/repositories/Java:packages/SLE_15_SP3/Java:packages.repo sudo zypper refresh sudo zypper install tomcat #Link tomcat.service to /usr/libexec/tomcat/server cd /usr/ sudo ln -s lib libexec -
Install the nginx package, if it is not already installed on the SUSE system.
sudo zypper addrepo -G -t yum -c 'http://nginx.org/packages/sles/15' nginx wget http://nginx.org/keys/nginx_signing.key sudo rpm --import nginx_signing.key sudo zypper install nginx -
Edit the
/etc/nginx/conf.d/hznvadc.confconfiguration file so that it includes the following content.server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
Download the Horizon Web Client
portal.warzip file from the product downloads site at https://customerconnect.omnissa.com/downloads/#all_products.Note: To use Tomcat 10, you must download and deploy Horizon Web Client or HTML Access 2406 or later.
-
Deploy the Horizon Web Client warball.
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /usr/share/tomcat/webapps/ -
Restart the machine for the changes to take effect.
Was deze pagina nuttig?