EnglishFrançaisDeutschEspañolItaliano日本語한국어NederlandsPortuguês (Brasil)中文 (简体)中文 (繁體, 台灣)
Skip to main content

2026 年 7 月 21 日

Linux - 设置适用于 Omnissa Horizon Web Client 的桌面

**注意：**Horizon Web Client 在 Horizon 8 版本 2412 及更高版本中可用。在 Horizon 8 版本 2406 及更低版本中，Horizon Web Client 名为“HTML Access”。本文档页面使用名称“Horizon Web Client”来表示 Horizon Web Client 和 HTML Access。

要支持 Horizon Web Client，必须在基于 Linux 的桌面上安装 Apache Tomcat、nginx 软件包和 Horizon Web Client warball。按照本文中所述的适用于 Linux 分发包的过程进行操作。

**注意：**运行 Horizon Agent 2111 或更高版本的 Linux 桌面支持 Horizon Agent Direct-Connection 插件。

设置适用于 Horizon Web Client 的 Ubuntu/Debian 桌面

  1. 安装 Apache Tomcat 软件。

    • 对于 Debian 12.x，请安装 Tomcat 10。

      sudo apt-get install tomcat10

    • 对于其他 Debian 版本和 Ubuntu，请安装 Tomcat 9。

      sudo apt-get install tomcat9

  2. 安装 nginx 软件包。

    sudo apt-get install nginx

  3. 编辑 /etc/nginx/conf.d/hznvadc.conf 配置文件，使其包含以下内容。

    server {
    listen 443 ssl;
    listen [::]:443 ssl;
 
    ###Enable https
    ssl_certificate /etc/omnissa/ssl/rui.crt;
    ssl_certificate_key /etc/omnissa/ssl/rui.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;

    access_log /var/log/nginx/nginx.vadc.access.log;
    error_log /var/log/nginx/nginx.vadc.error.log;
    
    ###Add security settings
    proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    add_header X-XSS-Protection "1; mode=block";
    
    ###Enable user certificate(smartcard) authentication
    #ssl_verify_client optional;
    #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
    
    location /broker {
        ###Forward user certificate
        #proxy_hide_header SSL-CLIENT-VERIFY;
        #proxy_hide_header X-SSL-CERT;
        #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
        #proxy_set_header X-SSL-CERT $ssl_client_cert;
    
        proxy_pass https://localhost:8443;
        proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
        proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
        proxy_ssl_protocols TLSv1.2 TLSv1.3;
        proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    ###Enable Web Client
    location /portal/webclient {
        proxy_pass http://localhost:8080/portal/webclient;
        proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass_header Content-Security-Policy;
    }

    ###Set Web Client as default page
    location =/ {
        rewrite / /portal/webclient;
    }
}

  4. 从产品下载站点下载 Horizon Web Client portal.war zip 文件，网址为 https://customerconnect.omnissa.com/downloads/#all_products。

    导航到您的 Omnissa Horizon 版本的下载页面，并找到 Horizon Web Client zip 文件。

  5. 部署 Horizon Web Client warball。

    • 对于 Debian 12.x，请运行以下命令。

      #To get portal.war
unzip {Horizon Web Client zip file name}
    
cp portal.war /var/lib/tomcat10/webapps
chown tomcat: /var/lib/tomcat10/webapps/portal.war
chmod 755 /var/lib/tomcat10/webapps/portal.war
cp -r /var/lib/tomcat10/webapps/portal /var/lib/tomcat10/webapps/ROOT/

    • 对于其他 Debian 版本和 Ubuntu，请运行以下命令。

      #To get portal.war
unzip {Horizon Web Client zip file name}
     
cp portal.war /var/lib/tomcat9/webapps
chmod 755 /var/lib/tomcat9/webapps/portal.war

  6. 重新启动计算机以使更改生效。

设置适用于 Horizon Web Client 的 RHEL/CentOS 桌面

  1. 安装和配置 Tomcat 软件。

    a. （仅限 RHEL 8.x）在安装 Tomcat 之前，请安装最新的 Extra Packages for Enterprise Linux (EPEL) 版本。

    yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

    b. 安装 Tomcat，并为 Tomcat 配置安全增强 Linux (SELinux) 设置。

    sudo yum install tomcat
/usr/lib/omnissa/viewagent/vadc/tomcat_selinux.sh

  2. 安装 nginx 软件包。

    a. （仅限 RHEL/CentOS 7.x）在安装 nginx 之前，请安装最新的 EPEL 版本。

    yum install epel-release

    b. 安装 nginx 软件包。

    yum install nginx

  3. 编辑 /etc/nginx/conf.d/hznvadc.conf 配置文件，使其包含以下内容。

    server {
    listen 443 ssl;
    listen [::]:443 ssl;
 
    ###Enable https
    ssl_certificate /etc/omnissa/ssl/rui.crt;
    ssl_certificate_key /etc/omnissa/ssl/rui.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;

    access_log /var/log/nginx/nginx.vadc.access.log;
    error_log /var/log/nginx/nginx.vadc.error.log;
    
    ###Add security settings
    proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    add_header X-XSS-Protection "1; mode=block";
    
    ###Enable user certificate(smartcard) authentication
    #ssl_verify_client optional;
    #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
    
    location /broker {
        ###Forward user certificate
        #proxy_hide_header SSL-CLIENT-VERIFY;
        #proxy_hide_header X-SSL-CERT;
        #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
        #proxy_set_header X-SSL-CERT $ssl_client_cert;
    
        proxy_pass https://localhost:8443;
        proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
        proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
        proxy_ssl_protocols TLSv1.2 TLSv1.3;
        proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    ###Enable Web Client
    location /portal/webclient {
        proxy_pass http://localhost:8080/portal/webclient;
        proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass_header Content-Security-Policy;
    }

    ###Set Web Client as default page
    location =/ {
        rewrite / /portal/webclient;
    }
}

  4. 从产品下载站点下载 Horizon Web Client portal.war zip 文件，网址为 https://customerconnect.omnissa.com/downloads/#all_products。

  5. 部署 Horizon Web Client warball。

    #To get portal.war
unzip {Horizon Web Client zip file name}
 
sudo cp portal.war /var/lib/tomcat/webapps/
sudo chown tomcat: /var/lib/tomcat/webapps/portal.war
sudo chmod -R 750 /var/lib/tomcat/webapps/portal.war

  6. 重新启动计算机以使更改生效。

设置适用于 Horizon Web Client 的 SUSE 桌面

  1. 安装和配置 Tomcat 软件。

    以下示例显示在 SUSE 15 SP3 计算机上安装 Tomcat 的命令序列。在第一个命令行中，将示例地址替换为您的 SUSE 版本的 Java 下载 URL。

    sudo zypper addrepo https://download.opensuse.org/repositories/Java:packages/SLE_15_SP3/Java:packages.repo
sudo zypper refresh
sudo zypper install tomcat
 
#Link tomcat.service to /usr/libexec/tomcat/server
cd /usr/
sudo ln -s lib libexec

  2. 安装 nginx 软件包（如果尚未在 SUSE 系统上安装）。

    sudo zypper addrepo -G -t yum -c 'http://nginx.org/packages/sles/15' nginx
wget http://nginx.org/keys/nginx_signing.key
sudo rpm --import nginx_signing.key
sudo zypper install nginx

  3. 编辑 /etc/nginx/conf.d/hznvadc.conf 配置文件，使其包含以下内容。

    server {
    listen 443 ssl;
    listen [::]:443 ssl;
 
    ###Enable https
    ssl_certificate /etc/omnissa/ssl/rui.crt;
    ssl_certificate_key /etc/omnissa/ssl/rui.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;

    access_log /var/log/nginx/nginx.vadc.access.log;
    error_log /var/log/nginx/nginx.vadc.error.log;
    
    ###Add security settings
    proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    add_header X-XSS-Protection "1; mode=block";
    
    ###Enable user certificate(smartcard) authentication
    #ssl_verify_client optional;
    #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
    
    location /broker {
        ###Forward user certificate
        #proxy_hide_header SSL-CLIENT-VERIFY;
        #proxy_hide_header X-SSL-CERT;
        #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
        #proxy_set_header X-SSL-CERT $ssl_client_cert;
    
        proxy_pass https://localhost:8443;
        proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
        proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
        proxy_ssl_protocols TLSv1.2 TLSv1.3;
        proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    ###Enable Web Client
    location /portal/webclient {
        proxy_pass http://localhost:8080/portal/webclient;
        proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass_header Content-Security-Policy;
    }

    ###Set Web Client as default page
    location =/ {
        rewrite / /portal/webclient;
    }
}

  4. 从产品下载站点下载 Horizon Web Client portal.war zip 文件，网址为 https://customerconnect.omnissa.com/downloads/#all_products。

    **注意：**要使用 Tomcat 10，您必须下载并部署 Horizon Web Client 或者 HTML Access 2406 或更高版本。

  5. 部署 Horizon Web Client warball。

    #To get portal.war
unzip {Horizon Web Client zip file name}

cp portal.war /usr/share/tomcat/webapps/

  6. 重新启动计算机以使更改生效。

此页面对您有帮助吗?

对本主题提供反馈

本主题对您有帮助吗?

请勿填写任何个人信息或机密信息。

正在生成链接…