**附註:**Horizon Web Client 可在 Horizon 8 版本 2412 及更新版本中使用。在 Horizon 8 版本 2406 及更早版本中,Horizon Web Client 稱為「HTML Access」。本說明文件頁面中「Horizon Web Client」一詞同時指稱 Horizon Web Client 與 HTML Access。
若要支援 Horizon Web Client,您必須在 Linux 型桌面平台上安裝 Apache Tomcat、nginx 套件,以及 Horizon Web Client 的 warball。請遵循本文所述適用於您 Linux 發行版的程序來進行。
**附註:**Horizon Agent Direct-Connection 外掛程式支援執行 Horizon Agent 2111 或更新版本的 Linux 桌面平台。
為 Horizon Web Client 設定 Ubuntu/Debian 桌面平台
-
安裝 Apache Tomcat 軟體。
-
對於 Debian 12.x,請安裝 Tomcat 10。
sudo apt-get install tomcat10 -
對於其他 Debian 版本和 Ubuntu,請安裝 Tomcat 9。
sudo apt-get install tomcat9
-
-
安裝 nginx 套件。
sudo apt-get install nginx -
編輯
/etc/nginx/conf.d/hznvadc.conf組態檔案,讓其中包含下列內容。server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client
portal.warzip 檔。導覽至您所使用的 Omnissa Horizon 版本下載頁面,並找到 Horizon Web Client 的 zip 檔。
-
部署 Horizon Web Client warball。
-
對於 Debian 12.x,請執行下列命令。
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /var/lib/tomcat10/webapps chown tomcat: /var/lib/tomcat10/webapps/portal.war chmod 755 /var/lib/tomcat10/webapps/portal.war cp -r /var/lib/tomcat10/webapps/portal /var/lib/tomcat10/webapps/ROOT/ -
對於其他 Debian 版本和 Ubuntu,請執行下列命令。
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /var/lib/tomcat9/webapps chmod 755 /var/lib/tomcat9/webapps/portal.war
-
-
重新啟動機器以使變更生效。
為 Horizon Web Client 設定 RHEL/CentOS 桌面平台
-
安裝和設定 Tomcat 軟體。
a. (僅限 RHEL 8.x) 在安裝 Tomcat 之前,請安裝最新的 Extra Packages for Enterprise Linux (EPEL) 版本。
yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpmb. 安裝 Tomcat,並為 Tomcat 設定安全增強式 Linux (SELinux) 設定。
sudo yum install tomcat /usr/lib/omnissa/viewagent/vadc/tomcat_selinux.sh -
安裝 nginx 套件。
a. (僅限 RHEL/CentOS 7.x) 在安裝 nginx 之前,請安裝最新的 EPEL 版本。
yum install epel-releaseb. 安裝 nginx 套件。
yum install nginx -
編輯
/etc/nginx/conf.d/hznvadc.conf組態檔案,讓其中包含下列內容。server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client
portal.warzip 檔。 -
部署 Horizon Web Client warball。
#To get portal.war unzip {Horizon Web Client zip file name} sudo cp portal.war /var/lib/tomcat/webapps/ sudo chown tomcat: /var/lib/tomcat/webapps/portal.war sudo chmod -R 750 /var/lib/tomcat/webapps/portal.war -
重新啟動機器以使變更生效。
為 Horizon Web Client 設定 SUSE 桌面平台
-
安裝和設定 Tomcat 軟體。
以下範例顯示在 SUSE 15 SP3 機器上安裝 Tomcat 的命令順序。在第一個命令列中,將範例位址取代為您 SUSE 版本的 Java 下載 URL。
sudo zypper addrepo https://download.opensuse.org/repositories/Java:packages/SLE_15_SP3/Java:packages.repo sudo zypper refresh sudo zypper install tomcat #Link tomcat.service to /usr/libexec/tomcat/server cd /usr/ sudo ln -s lib libexec -
安裝 nginx 套件 (如果尚未安裝到 SUSE 系統上)。
sudo zypper addrepo -G -t yum -c 'http://nginx.org/packages/sles/15' nginx wget http://nginx.org/keys/nginx_signing.key sudo rpm --import nginx_signing.key sudo zypper install nginx -
編輯
/etc/nginx/conf.d/hznvadc.conf組態檔案,讓其中包含下列內容。server { listen 443 ssl; listen [::]:443 ssl; ###Enable https ssl_certificate /etc/omnissa/ssl/rui.crt; ssl_certificate_key /etc/omnissa/ssl/rui.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; access_log /var/log/nginx/nginx.vadc.access.log; error_log /var/log/nginx/nginx.vadc.error.log; ###Add security settings proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-XSS-Protection "1; mode=block"; ###Enable user certificate(smartcard) authentication #ssl_verify_client optional; #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem; location /broker { ###Forward user certificate #proxy_hide_header SSL-CLIENT-VERIFY; #proxy_hide_header X-SSL-CERT; #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify; #proxy_set_header X-SSL-CERT $ssl_client_cert; proxy_pass https://localhost:8443; proxy_ssl_certificate /etc/omnissa/ssl/rui.crt; proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key; proxy_ssl_protocols TLSv1.2 TLSv1.3; proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ###Enable Web Client location /portal/webclient { proxy_pass http://localhost:8080/portal/webclient; proxy_redirect http://$host:$server_port/ https://$host:$server_port/; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Content-Security-Policy; } ###Set Web Client as default page location =/ { rewrite / /portal/webclient; } } -
從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client
portal.warzip 檔。**附註:**若要使用 Tomcat 10,您必須下載並部署 Horizon Web Client 或 HTML Access 2406 或更新版本。
-
部署 Horizon Web Client warball。
#To get portal.war unzip {Horizon Web Client zip file name} cp portal.war /usr/share/tomcat/webapps/ -
重新啟動機器以使變更生效。
此頁面對您有幫助嗎?