it document - vdi connectivity guide document - vdi connectivity guide.pdf · it document - vdi...

17
IT Document - VDI Connectivity Guide Page 1 of 17 Revision: 2 10/10/2019 IT Document - VDI Connectivity Guide Information Technology Department Nevada National Security Site PO Box 98521 Las Vegas, NV 89193-8521 2621 Losee Road North Las Vegas, NV 89030-4129 NNSS.GOV Background This Connectivity Guide will explain how a user can connect to the company’s Virtual Desktop Infrastructure (VDI) workstations from an alternate location using a software application called VMware Horizon Client (most optimal and recommended) or VMware Horizon HTML Access. This guide describes the necessary steps to download and configure the VMware Horizon Client on a system that meets the following system requirements: Operating System (s): Windows 7/8/8.1/10 and macOS 10.12 (Sierra)/10.13 (High Sierra)/10.14 (Mojave)/10.15 (Catalina) System RAM (Memory): At least 2 GB of RAM VMware Horizon Client 5.2 or later Figure 1: This is the VMware Horizon Client's latest icon, indicating a 5.2 or later client installation. Systems NOT meeting these minimum requirements are not addressed by this guide. Furthermore, technical support from Information Technology (IT) will not be available. If you are currently using a VMware Horizon Client icon on your system that does not match the icon in Figure 1 above, then you must follow this guide to upgrade your VMware Horizon Client to the latest version currently available 5.2, at the time of this guide’s revision. This is to ensure that you receive the most optimal experience possible when utilizing a remote experience from home. Note: This guide is provided as is and assistance when connecting remotely using personally owned devices outside of this guide may be limited. Downloading VMware Horizon Client 1. Open the following URL: https://vdi.nnss.gov or navigate to it by copy and pasting into any web browser’s address bar. 2. Click on Install VMware Horizon Client.

Upload: others

Post on 05-Apr-2020

24 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 1 of 17 Revision: 2 10/10/2019

IT Document - VDI Connectivity Guide

Information Technology Department Nevada National Security Site PO Box 98521 Las Vegas, NV 89193-8521 2621 Losee Road North Las Vegas, NV 89030-4129 NNSS.GOV

Background This Connectivity Guide will explain how a user can connect to the company’s Virtual Desktop

Infrastructure (VDI) workstations from an alternate location using a software application called VMware Horizon Client (most optimal and recommended) or VMware Horizon HTML Access. This guide describes the necessary steps to download and configure the VMware Horizon Client on a system that meets the following system requirements:

Operating System (s): Windows 7/8/8.1/10 and macOS 10.12 (Sierra)/10.13 (High Sierra)/10.14 (Mojave)/10.15 (Catalina)

System RAM (Memory): At least 2 GB of RAM VMware Horizon Client 5.2 or later

Figure 1: This is the VMware Horizon Client's latest icon, indicating a 5.2 or later client installation.

Systems NOT meeting these minimum requirements are not addressed by this guide. Furthermore, technical support from Information Technology (IT) will not be available.

If you are currently using a VMware Horizon Client icon on your system that does not match the icon in Figure 1 above, then you must follow this guide to upgrade your VMware Horizon Client to the latest version currently available 5.2, at the time of this guide’s revision. This is to ensure that you receive the most optimal experience possible when utilizing a remote experience from home.

Note: This guide is provided as is and assistance when connecting remotely using personally owned devices outside of this guide may be limited.

Downloading VMware Horizon Client 1. Open the following URL: https://vdi.nnss.gov or navigate to it by copy and pasting into any web

browser’s address bar. 2. Click on Install VMware Horizon Client.

Page 2: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 2 of 17 Revision: 2 10/10/2019

Figure 2: Click the red highlighted region to perform step 2.

3. Performing step 2 will redirect you to VMware’s website. Click on “Go to Downloads” for either VMware Horizon Client for Windows or VMware Horizon Client for Mac.

Figure 3: Select the red highlighted area for a Windows operating system or the green highlighted area for a macOS operating system.

Page 3: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 3 of 17 Revision: 2 10/10/2019

4. Performing step 3 will redirect you to the selected operating system’s download page. Click on Download and save the file to your computer.

Figure 4: Selecting the download button highlighted in red will download the VMware Horizon Client, as seen in this example for the Windows operating system.

Windows Installation 1. After the download has been saved to your computer, double-click the file to begin

installation. 2. Click on “Agree & Install” button to proceed with installation.

Figure 5: This is agreeing to the End-User License Agreement (EULA) to proceed with installation.

Page 4: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 4 of 17 Revision: 2 10/10/2019

Figure 6: This shows the progress of the installation. Note: You may receive a prompt to restart. If you do, re-run the installer application until you see a screen, as shown in the figure below.

3. Wait for the installation to show a “Success!” screen with a Finish button. Click Finish to complete the installation.

Figure 7: This is a good installation screen, click Finish to complete the installation.

Note: Any other version of the VMware Horizon Client for windows may not work properly or provide the most optimal experience.

Page 5: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 5 of 17 Revision: 2 10/10/2019

macOS Installation 1. After the download has been saved to your computer, double-click the file to begin

installation. Note: This should be located in your “downloads” folder.

Figure 8: This shows the downloaded VMware Horizon Client DMG file to be double-clicked. Note: The version one downloads may be newer than that depicted above, this is acceptable and recommended.

2. After double-clicking this file, the following screen will appear. Click Agree.

Figure 9: This is agreeing to the End-User License Agreement (EULA) to proceed with installation.

Page 6: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 6 of 17 Revision: 2 10/10/2019

3. After clicking the Agree button, the following two windows will appear:

Figure 10: This shows the application opening up to begin installation. This will also add a VMware Horizon Client icon on your desktop and present the window in the next image.

Figure 11: This is the application installation window for macOS computers.

4. Click and drag the “VMware Horizon Client” icon to the “Applications” folder icon to begin installation of the application.

a. Note: If you already have an older version of this application installed, you may receive the following dialog. Click Replace to ensure you are on the latest VMware Horizon Client.

Figure 12: One will only receive this message if a prior version of the VMware Horizon Client is installed. If you do not receive this, then your installation has been completed.

Page 7: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 7 of 17 Revision: 2 10/10/2019

5. After this is done, the application is installed on your system. Navigate to it by clicking the

Launch Pad ( ) icon on your macOS dock.

6. Navigate to and click the VMware Horizon Client ( ) icon to launch the application.

VMware Horizon Client Application Configuration 1. Double-click on the VMware Horizon Client icon from the desktop, as shown below.

Figure 13: This is the VMware Horizon Client Version 5.2 icon that will be the same on both Windows and macOS systems.

2. After launching the application, double-click on New Server.

Smart Badge Configuration The following explains how to setup and configure the VMware Horizon Client for smart badge usage, which includes the Local Site Specific Office (LSSO) and Homeland Security Presidential Directive -12 (HSPD-12) Smart Card badges. This login method will soon be the only method to login, replacing the Remote Secure Appliance (RSA) login.

IMPORTANT – macOS Users: It is highly recommended that the Remote Secure Appliance (RSA) Configuration be utilized at this time for all macOS computer users and not this method. This is due to possible damage that can be experienced on your personally owned device associated with your Smart Badge usage. This can result in complete loss of ability to login to your personally owned macOS device. Instructions concerning proper usage of the Smart Badge on these systems will come soon.

3. Type in “vdi.nnss.gov”.

Page 8: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 8 of 17 Revision: 2 10/10/2019

Figure 14: This demonstrates how one adds a VDI connection server to the VMware Horizon Client application.

4. Insert your company issued HSPD-12 or LSSO Smart Badge into your company issued Smart Badge Reader.

a. The company only allows the ACS ACR38U-N1 PocketMate (shown in figure below) Smart Badge Reader for remote utilization. While other Smart Badge readers may work, they may not provide the most optimal experience. Submit a hardware request via our internal self-service portal for the ASC ACR38U-N1 PocketMate Smart Badge reader or visit the Service Desk. These Smart Badge readers are provided at no costs.

Figure 15: This is the company approved remote utilization Smart Badge reader.

5. Click Connect. You will see the following Disclaimer window upon connecting:

Page 9: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 9 of 17 Revision: 2 10/10/2019

Figure 16: This is our government system disclaimer, which must be accepted before continuing on with connecting.

6. Click Accept and the following figure will be displayed, which is a prompt for your Smart Badge credential. Always select the certificate with a valid “Valid From” date and a certificate with the title containing “Authentication – “, click OK.

Figure 17: This is the account credentialed login process using an HSPD-12 Smart Badge login.

7. After clicking OK, you will be presented with a prompt for your pin, as shown in the Figure below. After entering these credentials, click Login.

Page 10: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 10 of 17 Revision: 2 10/10/2019

Figure 18: This is the account credentialed login processing using your Smart Badge PIN credentials.

8. Upon connection, you may be presented with one or more icons. These are known as your VDI workstations. Click one to be launched immediately into that VDI workstation of your choice.

Page 11: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 11 of 17 Revision: 2 10/10/2019

Figure 19: This shows all available VDI workstation assignments available to the user.

a. Note: The “Provisional Workstation” is a temporary VDI workstation pool and is randomly assigned to you for the duration of your session. Upon closing your VDI session, you will not be returned to the same temporary VDI workstation so save your work accordingly.

Remote Secure Appliance (RSA) Configuration The following explains how to setup and configure the VMware Horizon Client for RSA token usage. This login method will be phased out in favor of the new Smart Badge Configuration methods within the coming year.

The settings below apply to both the Windows and macOS platforms.

3. Type in “connect.nv.doe.gov”.

Page 12: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019

Figure 20: This demonstrates how one adds a VDI connection server to the VMware Horizon Client application.

4. Click Connect. You will see the following Disclaimer window upon connecting:

Figure 21: This is our government system disclaimer, which must be accepted before continuing on with connecting.

5. Click Accept and the image, as shown in Figure 7 below, will prompt for your network username and RSA Passcode (8 Digit Pin + RSA Token (Key Fob)). After this is entered, click Login.

Page 13: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 13 of 17 Revision: 2 10/10/2019

Figure 22: This is the account credentialed login process using RSA.

6. After clicking Login, you will be presented with a prompt for your network username (may be supplied already) and password, as shown in Figure 8 below. After entering these credentials, click Login.

Figure 23: This is the account credentialed login processing using your network credentials.

7. Upon connection, you may be presented with one or more icons. These are known as your VDI workstations. Click one to be launched immediately into that VDI workstation of your choice.

Page 14: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 14 of 17 Revision: 2 10/10/2019

Figure 24: This shows all available VDI workstation assignments available to the user.

b. Note: The “Provisional Workstation” is a temporary VDI workstation pool and is randomly assigned to you for the duration of your session. Upon closing your VDI session, you will not be returned to the same temporary VDI workstation so save your work accordingly.

VMware Horizon HTML Access This section explains how to use the VMware Horizon HTML Access to quickly remote into our network. This allows one to utilize a web browser from anywhere and not require the installation of the VMware Horizon Client to login. This does not provide the most optimal experience, but is good for a quick connection to enter time or check e-mail in a pinch.

1. Launch any web browser. We recommend Google Chrome for the most optimal experience. 2. Type in the address bar: https://vdi.nnss.gov 3. Click Enter. 4. Select the VMware Horizon HTML Access button, as shown in the figure below.

Page 15: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 15 of 17 Revision: 2 10/10/2019

5. Follow the similar steps (3-7), as outlined in the Smart Badge Configuration subsection, referenced earlier in this document.

6. You may now use the client as you would if it was installed, just with limited functionality and performance.

Log Off or Disconnect Once in a session, one can log off or disconnect from their session via the following methods:

Disconnect from a remote desktop without logging off Option Action

Disconnect and quit Horizon Client

1. Click the Close button in the corner of the window or select File > Close from the menu bar.

2. Select VMware Horizon Client > Quit VMware Horizon Client from the menu bar.

Disconnect and remain in Horizon Client Click the Disconnect button in the toolbar or select Connection > Disconnect from the menu bar.

Log off and disconnect from a remote desktop Option Action

From within the desktop OS Use the Windows Start menu to log off.

From the menu bar

Select Connection > Log Off from the menu bar. If you use this procedure, files that are open on the remote desktop will be closed without being saved first.

Page 16: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 16 of 17 Revision: 2 10/10/2019

Frequently Asked Questions and Answers • Question: How do I know I need to upgrade my VMware Horizon Client?

o Answer: The installation of VMware Horizon Client 5.2 comes with an automatic upgrade notification feature. When an update is available, it will present a prompt to you every time you launch the application. When you see this prompt, we request you to perform the client upgrade to ensure you are receiving the most optimal VDI experience.

• Question: Can I use a non‐government device like my home computer, tablet, or smartphone? o Answer: Yes, the local device is only establishing a connection for you to remote control your

VDI workstation and does not transfer any of your work data to your non-government device. • Question: Do I need to clean anything off my device when I am finished?

o Answer: No, once the user disconnects from the session there is no ability to access any company information.

• Question: Do I need administrator privileges on my personal device to install the client? o Answer: Yes, otherwise you will have to use the web browser via HTML Access (coming soon).

• Question: Can I connect a USB flash drive to my VDI workstation from home? o Answer: No, you cannot connect USB drives or other USB peripherals to your VDI workstation

from home. This functionality is disabled. • Question: Can I print from my VDI workstation to my home printer?

o Answer: No, USB traffic is disabled between the VDI workstation and your personal computer (PC).

• Question: Is my home PC connected to the company network when connecting? o Answer: No, only the screen, keyboard, and mouse functions are passed between your home

computer and company VDI workstation. • Question: Will the company have access to my home system when connected?

o Answer: No, there is no way for the company to access your home computer or see any of the content from your home computer. All activity is contained in an encrypted session between your computer and the government VDI.

• Question: Do I need a high speed internet connection or can I use dial‐up/WiFi? o Answer: The remote access solution has been tested with connectivity as low as 3G cellular

without issues. However, network speed is suspect and could result in a poor user experience. For security reasons, if the connection becomes too unstable the client is disconnected and the user will be required to re‐authenticate to the network.

• Question: Can I use this while connected to the company network? o Answer: Yes, this service is designed to connect you to your VDI workstation either directly or

remotely. Please remember this only applies to Government owned devices as connecting a personal computer to the company network is never allowed.

• Question: How do I receive a Smart Badge reader for my home computer? o Answer: Submit a hardware request via our internal self-service portal for the ASC Smart

Badge reader or visit the Service Desk. • Question: Does the new VDI.NNSS.GOV connection server support all Smart Badges?

o Answer: No, the VDI.NNSS.GOV connection server only supports the Local Site Specific Office (LSSO) Smart Badges, and the Homeland Security Presidential Directive – 12 (HSPD-12) Smart Badges, otherwise known as Q badges. Smart Badges from other remote National Nuclear Security Administration (NNSA) locations or government entities are not supported at this time.

• Question: What will happen with my existing Remote Secure Access (RSA) token? o Answer: They will be phased out of usage to make way for a better and improved streamlined

login experience across all enterprise applications.

Page 17: IT Document - VDI Connectivity Guide Document - VDI Connectivity Guide.pdf · IT Document - VDI Connectivity Guide Page 12 of 17 Revision: 2 10/10/2019 Figure 20: This demonstrates

IT Document - VDI Connectivity Guide Page 17 of 17 Revision: 2 10/10/2019

• Question: How does this affect my ability to utilize the mobile phone VMware Horizon Client application on my iPhone, iPad, or other mobile device?

o Answer: The Smart Badge solution will NOT work with the above applications. This functionality is operating in a deprecated state and will be retired from enterprise usage when RSA tokens are retired from enterprise usage. We are currently working to maintain this functionality on all company issued or provisioned mobile devices.

• Question: My Smart Badge is locked or I forgot my PIN, how do I reset my PIN or get my Smart Badge unlocked?

o Answer: If you have an HSPD-12 Smart Badge, you must visit a USAccess authorized center to have these reset. Please schedule an appointment to reset it by clicking here, selecting Make an appointment and then Select Card Update – Update your EXISTING Credential and PIN resets. If you have a company issued LSSO, then you can visit the Service Desk to have this reset or provide the Service Desk personnel the challenge code to remotely unlock you.

• Question: Is there further documentation on how to use the client in my respective operating system? o Answer: Yes, click your respective operating system buttons Windows macOS. Once on this

page, select the latest product documentation (the one with the largest version number, at this time of writing 5.2 is the one to select). After this is done, select the VMware Horizon Client for <operating system> User Guide to find out more information.

Revisions Version: Date

Modified: Pages

Modified: Description: Author/Editor:

0 6/5/19 All Initial Draft. Thien Hong & Jonathan Young

1 6/6/19 All Added in Windows and macOS installation specifics and editorial changes.

Jonathan Young Douglas Neumann Christopher Wilding

2 10/8/19 All

Updated the VMware Horizon Client version to match infrastructure and made adjustments to Smart Card usage, including new connection server to include deprecation announcement of RSA.

Jonathan Young Douglas Neumann