Updating certs in Horizon and UAGs

Every VDI admin will eventually need to replace the ceritficates in the environment. Fortunately, it’s a pretty easy process and only takes a few minutes. These steps will walk you through using the new certificate in VDI. Note that a third-party certificate is required before these steps.

Update the connection server certificate:
1. Log into the Horizon Connection Server
2. Open Certificates as the local computer account in MMC
3. Import the certificate, complete with the private key, into the Personal certificates folder
4. Make sure to check the box to make the certificate exportable
5. Set the friendly name to vdm and remove the friendly name from the old certificate
6. Restart the VMware Horizon Connection Server service
7. Confirm that the connection server site shows the newest certificate

Update the UAG certificate:
8. Log into the UAG UI
9. Click on Manual Setup
10. Click to show the edge service settings
11. Click the cog next to Horizon settings
12. Update the connection server URL thumbprint to match the new cert
13. Click Ok
14. Click on the cog next to TLS Server Certificate Settings
15. Check the box to update both admin and user
16. Change the certificate type to PFX
17. Enter the necessary certificate info
18. Click Save

Leave a Reply

Discover more from vNinja

Subscribe now to keep reading and get access to the full archive.

Continue reading