VMware Horizon 7.12 JMP Replace SSL Certificate and Import Horizon Certificate

SSL Certificate with a private Key

OpenSSL, Convert PFX to .key and .crt

Before copy the certificate we need to convert the .PFX into a .Crt and .Key file.
I used the following openssl command;

  • openssl pkcs12 -in star_domain_nl.pfx -clcerts -nokeys -out star_domain_nl.crt
  • openssl pkcs12 -in star_domain_nl.pfx -out start_domain_nl.key -nodes

Edit the NGINX config file on the JMP server

  • Before editing the NGINX config file, copy/paste the .Crt and .Key file created on your linux machine previous step to the folder “C:\Program Files (x86)\VMware\JMP\com\XMS\nginx\conf”
  • Stop the “JMP” services in the following order
Lees verder

Windows Update not Working in Golden Image

  1. Expand HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows > WindowsUpdate > AU
  2. Right click and add a the following keys (without the quotes):
    "NoAutoUpdate"=dword:00000000
    "AUOptions"=dword:00000003
    "AllowMUUpdateService"=dword:00000001
    "IncludeRecommendedUpdates"=dword:00000001

wuauclt /detectnow /updatenow

The above mentioned command will work in all versions of Windows including Windows 7 and Windows Server 2008 R2. But if you are using Windows 10 or Windows Server 2016, you can use UsoClient command which has more options than wuauclt. You can run UsoClient with the following switches:

StartScan – Start checking for updates

StartDownload – Start downloading updates

StartInstall – Start installing downloaded updates

RestartDevice – Restart Windows after updates are installed

ScanInstallWait – Check for updates, download available updates and install them

script:
—————————————–
REM Download and Fully Install Windows Updates

usoclient ScanInstallWait
usoclient StartInstall

REM Wait 40 mins to allow all the installs to complete on Windows 10
timeout /T 2400

REM this command will need a local path to the file unless it is run from the same folder that contains it
ShutdownWithUpdates.exe /r /f

_______________________
Or Powershell
Install-Module PSWindowsUpdate
Get-WindowsUpdate
Install-WindowsUpdate

vmware-view:// error open client from browser on linux (Ubuntu 18.04) Workspace ONE

 

To add protocol handler vmware-view:// you need to add file vmware-view.desktop to ~/.local/share/applications.

 

It looks like this:

[Desktop Entry]
Name=VMware Horizon Client
Exec=/vmware-view %u
Type=Application
Terminal=false
MimeType=x-scheme-handler/vmware-view;

Exec and MimeType are very important.

Then you need to add line

x-scheme-handler/vmware-view=vmware-view.desktop

to file ~/.local/share/applications/mimeapps.list under [Default Applications]

At the end you will probably need to type command:

update-desktop-database ~/.local/share/applications

For me it was working on all browsers.

 

Mounting Bitlocker Volumes Under Linux

 

 

Driver Installation

The software, which makes this possible, is called Dislocker. It is an opensource driver project maintained on Github by Aorimn. To obtain the source code:

git clone https://github.com/Aorimn/dislocker.git

Or Ubuntu PPA’s
https://launchpad.net/ubuntu/+source/dislocker
https://launchpad.net/~hermlnx/+archive/ubuntu/dislocker

Before you can build the driver it is necessary to install some dependencies, including the fuse and polarssl headers:

sudo apt-get install gcc cmake make libfuse-dev libpolarssl-dev ruby-dev

Assuming that these are installed correctly you can then build the project and install the driver as follows:

cd dislocker cmake 

make sudo make install

According to Aorimn the current version of the Dislocker driver supports all versions of Bitlocker associated with Windows versions 7, 8, and Windows 10
Lees verder

Installing a root/CA Certificate and sloved Citrix SSL 61 Error

 

 

 

Given a CA certificate file certificate.crt, follow these steps to install it on Ubuntu:

  1. Create a directory for extra CA certificates in /usr/share/ca-certificates:
    sudo mkdir /usr/share/ca-certificates/extra
    
  2. Copy the CA .crt file to this directory:
    sudo cp certificate.crt /usr/share/ca-certificates/extra/certificate.crt
    
  3. Let Ubuntu add the .crt file’s path relative to /usr/share/ca-certificates to /etc/ca-certificates.conf:
    sudo dpkg-reconfigure ca-certificates
    

In case of a .pem file on Ubuntu, it must first be converted to a .crt file:

openssl x509 -in certificate.pem -inform PEM -out certificate.crt

For Citrix Reciever:
sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts