Initialize the Key Distribution Center in the Omnissa Access Appliance

Before you can use the Omnissa Access Mobile SSO for iOS authentication method, you must initialize the Key Distribution Center (KDC) in the Omnissa Access appliance.

To initialize KDC, you assign your Omnissa Access hostname to the Kerberos realms. The realm name is entered in upper-case letters. If you configure subdomains, type the subdomain name in lower-case letters.

Prerequisites

Omnissa Access is installed and configured.

Realm name identified. See Using the Built-in KDC for Omnissa Access.

Procedure

1. SSH into the Omnissa Access appliance as the root user.

2. Initialize the KDC. Enter /etc/init.d/wss-kdc init --realm \{REALM.COM\} --subdomain \{sva-name.subdomain\}

   For example, /etc/init.d/wss-kdc init --realm MY-IDM.EXAMPLE.COM --subdomain my-idm.example.com

   If you are using a load balancer with multiple Omnissa Access appliances, use the name of the load balancer in both cases.

3. Restart the Omnissa Access service. Enter service horizon-workspace restart.

4. Start the KDC service. Enter service wss-kdc restart.

What to do next

Create public DNS entries. DNS records must be provisioned to allow the clients to find the KDC. See Creating Public DNS Entries for KDC with Built-in Kerberos in Omnissa Access.