Skip to main content

2026 年 7 月 21 日

Linux - 設定 Omnissa Horizon Web Client 桌面平台

**附註:**Horizon Web Client 可在 Horizon 8 版本 2412 及更新版本中使用。在 Horizon 8 版本 2406 及更早版本中,Horizon Web Client 稱為「HTML Access」。本說明文件頁面中「Horizon Web Client」一詞同時指稱 Horizon Web Client 與 HTML Access。

若要支援 Horizon Web Client,您必須在 Linux 型桌面平台上安裝 Apache Tomcat、nginx 套件,以及 Horizon Web Client 的 warball。請遵循本文所述適用於您 Linux 發行版的程序來進行。

**附註:**Horizon Agent Direct-Connection 外掛程式支援執行 Horizon Agent 2111 或更新版本的 Linux 桌面平台。

為 Horizon Web Client 設定 Ubuntu/Debian 桌面平台

  1. 安裝 Apache Tomcat 軟體。

    • 對於 Debian 12.x,請安裝 Tomcat 10。

      sudo apt-get install tomcat10
      
    • 對於其他 Debian 版本和 Ubuntu,請安裝 Tomcat 9。

      sudo apt-get install tomcat9
      
  2. 安裝 nginx 套件。

    sudo apt-get install nginx
    
  3. 編輯 /etc/nginx/conf.d/hznvadc.conf 組態檔案,讓其中包含下列內容。

    server {
        listen 443 ssl;
        listen [::]:443 ssl;
     
        ###Enable https
        ssl_certificate /etc/omnissa/ssl/rui.crt;
        ssl_certificate_key /etc/omnissa/ssl/rui.key;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        access_log /var/log/nginx/nginx.vadc.access.log;
        error_log /var/log/nginx/nginx.vadc.error.log;
        
        ###Add security settings
        proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-XSS-Protection "1; mode=block";
        
        ###Enable user certificate(smartcard) authentication
        #ssl_verify_client optional;
        #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
        
        location /broker {
            ###Forward user certificate
            #proxy_hide_header SSL-CLIENT-VERIFY;
            #proxy_hide_header X-SSL-CERT;
            #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
            #proxy_set_header X-SSL-CERT $ssl_client_cert;
        
            proxy_pass https://localhost:8443;
            proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
            proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
            proxy_ssl_protocols TLSv1.2 TLSv1.3;
            proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
        
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    
        ###Enable Web Client
        location /portal/webclient {
            proxy_pass http://localhost:8080/portal/webclient;
            proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass_header Content-Security-Policy;
        }
    
        ###Set Web Client as default page
        location =/ {
            rewrite / /portal/webclient;
        }
    }
    
  4. 從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client portal.war zip 檔。

    導覽至您所使用的 Omnissa Horizon 版本下載頁面,並找到 Horizon Web Client 的 zip 檔。

  5. 部署 Horizon Web Client warball。

    • 對於 Debian 12.x,請執行下列命令。

      #To get portal.war
      unzip {Horizon Web Client zip file name}
          
      cp portal.war /var/lib/tomcat10/webapps
      chown tomcat: /var/lib/tomcat10/webapps/portal.war
      chmod 755 /var/lib/tomcat10/webapps/portal.war
      cp -r /var/lib/tomcat10/webapps/portal /var/lib/tomcat10/webapps/ROOT/
      
    • 對於其他 Debian 版本和 Ubuntu,請執行下列命令。

      #To get portal.war
      unzip {Horizon Web Client zip file name}
           
      cp portal.war /var/lib/tomcat9/webapps
      chmod 755 /var/lib/tomcat9/webapps/portal.war
      
  6. 重新啟動機器以使變更生效。

為 Horizon Web Client 設定 RHEL/CentOS 桌面平台

  1. 安裝和設定 Tomcat 軟體。

    a. (僅限 RHEL 8.x) 在安裝 Tomcat 之前,請安裝最新的 Extra Packages for Enterprise Linux (EPEL) 版本。

    yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
    

    b. 安裝 Tomcat,並為 Tomcat 設定安全增強式 Linux (SELinux) 設定。

    sudo yum install tomcat
    /usr/lib/omnissa/viewagent/vadc/tomcat_selinux.sh
    
  2. 安裝 nginx 套件。

    a. (僅限 RHEL/CentOS 7.x) 在安裝 nginx 之前,請安裝最新的 EPEL 版本。

    yum install epel-release
    

    b. 安裝 nginx 套件。

    yum install nginx
    
  3. 編輯 /etc/nginx/conf.d/hznvadc.conf 組態檔案,讓其中包含下列內容。

    server {
        listen 443 ssl;
        listen [::]:443 ssl;
     
        ###Enable https
        ssl_certificate /etc/omnissa/ssl/rui.crt;
        ssl_certificate_key /etc/omnissa/ssl/rui.key;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        access_log /var/log/nginx/nginx.vadc.access.log;
        error_log /var/log/nginx/nginx.vadc.error.log;
        
        ###Add security settings
        proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-XSS-Protection "1; mode=block";
        
        ###Enable user certificate(smartcard) authentication
        #ssl_verify_client optional;
        #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
        
        location /broker {
            ###Forward user certificate
            #proxy_hide_header SSL-CLIENT-VERIFY;
            #proxy_hide_header X-SSL-CERT;
            #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
            #proxy_set_header X-SSL-CERT $ssl_client_cert;
        
            proxy_pass https://localhost:8443;
            proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
            proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
            proxy_ssl_protocols TLSv1.2 TLSv1.3;
            proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
        
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    
        ###Enable Web Client
        location /portal/webclient {
            proxy_pass http://localhost:8080/portal/webclient;
            proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass_header Content-Security-Policy;
        }
    
        ###Set Web Client as default page
        location =/ {
            rewrite / /portal/webclient;
        }
    }
    
  4. 從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client portal.war zip 檔。

  5. 部署 Horizon Web Client warball。

    #To get portal.war
    unzip {Horizon Web Client zip file name}
     
    sudo cp portal.war /var/lib/tomcat/webapps/
    sudo chown tomcat: /var/lib/tomcat/webapps/portal.war
    sudo chmod -R 750 /var/lib/tomcat/webapps/portal.war
    
  6. 重新啟動機器以使變更生效。

為 Horizon Web Client 設定 SUSE 桌面平台

  1. 安裝和設定 Tomcat 軟體。

    以下範例顯示在 SUSE 15 SP3 機器上安裝 Tomcat 的命令順序。在第一個命令列中,將範例位址取代為您 SUSE 版本的 Java 下載 URL。

    sudo zypper addrepo https://download.opensuse.org/repositories/Java:packages/SLE_15_SP3/Java:packages.repo
    sudo zypper refresh
    sudo zypper install tomcat
     
    #Link tomcat.service to /usr/libexec/tomcat/server
    cd /usr/
    sudo ln -s lib libexec
    
  2. 安裝 nginx 套件 (如果尚未安裝到 SUSE 系統上)。

    sudo zypper addrepo -G -t yum -c 'http://nginx.org/packages/sles/15' nginx
    wget http://nginx.org/keys/nginx_signing.key
    sudo rpm --import nginx_signing.key
    sudo zypper install nginx
    
  3. 編輯 /etc/nginx/conf.d/hznvadc.conf 組態檔案,讓其中包含下列內容。

    server {
        listen 443 ssl;
        listen [::]:443 ssl;
     
        ###Enable https
        ssl_certificate /etc/omnissa/ssl/rui.crt;
        ssl_certificate_key /etc/omnissa/ssl/rui.key;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
    
        access_log /var/log/nginx/nginx.vadc.access.log;
        error_log /var/log/nginx/nginx.vadc.error.log;
        
        ###Add security settings
        proxy_cookie_path / "/; SameSite=Lax; HTTPOnly; Secure";
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-XSS-Protection "1; mode=block";
        
        ###Enable user certificate(smartcard) authentication
        #ssl_verify_client optional;
        #ssl_client_certificate /etc/omnissa/ssl/trustCerts.pem;
        
        location /broker {
            ###Forward user certificate
            #proxy_hide_header SSL-CLIENT-VERIFY;
            #proxy_hide_header X-SSL-CERT;
            #proxy_set_header SSL-CLIENT-VERIFY $ssl_client_verify;
            #proxy_set_header X-SSL-CERT $ssl_client_cert;
        
            proxy_pass https://localhost:8443;
            proxy_ssl_certificate /etc/omnissa/ssl/rui.crt;
            proxy_ssl_certificate_key /etc/omnissa/ssl/rui.key;
            proxy_ssl_protocols TLSv1.2 TLSv1.3;
            proxy_ssl_ciphers !aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256;
        
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    
        ###Enable Web Client
        location /portal/webclient {
            proxy_pass http://localhost:8080/portal/webclient;
            proxy_redirect http://$host:$server_port/ https://$host:$server_port/;
            proxy_set_header Host $host:$server_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass_header Content-Security-Policy;
        }
    
        ###Set Web Client as default page
        location =/ {
            rewrite / /portal/webclient;
        }
    }
    
  4. 從產品下載網站 https://customerconnect.omnissa.com/downloads/#all_products 下載 Horizon Web Client portal.war zip 檔。

    **附註:**若要使用 Tomcat 10,您必須下載並部署 Horizon Web Client 或 HTML Access 2406 或更新版本。

  5. 部署 Horizon Web Client warball。

    #To get portal.war
    unzip {Horizon Web Client zip file name}
    
    cp portal.war /usr/share/tomcat/webapps/
    
  6. 重新啟動機器以使變更生效。

此頁面對您有幫助嗎?

針對本主題提供意見回饋

本主題對您有幫助嗎?

請勿填寫任何個人或機密資訊。

正在產生連結…