VMware Horizon 7 version 7.5

 

 

 

What’s New in This Release

 

VMware Horizon 7 version 7.5 provides the following new features and enhancements. This information is grouped by installable component.

For information about the issues that are resolved in this release, see Resolved Issues.

Horizon Connection Server

  • Horizon Console
    • Horizon Console is the latest version of the Web interface through which you can create and manage virtual desktops and published desktops and applications. Horizon Console also integrates VMware Horizon Just-in-Time Management Platform (JMP) Integrated Workflow features for managing workspaces. For more information, see the VMware Horizon Console Administration document.
  • Deployment on VMware Cloud for AWS
    • You can deploy desktop pools that contain full virtual machines on VMware Cloud on AWS to scale Horizon 7 desktops and applications on an elastic cloud platform.
  • Virtual Desktops
    • You can create a virtual machine in vSphere to use Virtualization-based security (VBS). Using a virtual machine enabled with VBS provides better protection from vulnerabilities within and malicious exploits to the operating system. 
    • For an automated desktop pool that uses full virtual machines, if you use a virtual machine enabled with VBS, you can add a vTPM device for enhanced security.
    • Horizon 7 supports vSphere 6.7.
  • Instant Clones
    • Multiple vGPU profiles are supported for instant clones.
    • You can select either PCoIP or VMware Blast (non h264 hardware encode) as a display protocol with NVIDIA GRID vGPU for an instant-clone desktop pool.
    • You can change the 3D vSGA or 3D software settings for instant-clone pools.
    • Horizon 7 version 7.5 supports instant-clone API in vSphere 6.7.
  • Cloud Pod Architecture
    • The total session limit is increased to 200,000 and the total site limit is increased to 10.   
    • You can configure desktop shortcuts for global entitlements.
  • Horizon Help Desk Tool
    • Horizon Help Desk Tool is integrated into Horizon Console
    • You can troubleshoot Linux desktop sessions in Horizon Help Desk Tool in Horizon Console.
    • Horizon Help Desk Tool displays the following metrics: 
      • Skype for Business pairing status
      • State of the application or desktop session
      • Disk IOPS data

 

Horizon Agent for Linux

  • Control of USB Redirection, Clipboard Redirection, and Client Drive Redirection
    Using VMware User Environment Manager, you can define policies that allow you to control the USB redirection, clipboard copy-and-paste redirection, and client drive redirection (CDR) features.
  • Help Desk Tool Support
    You can now access the Horizon Help Desk Tool to troubleshoot Linux desktop sessions. This feature is available from Horizon Console.
  • Network Intelligence Transport Support for VMware Blast
    Network Intelligence is supported for VMware Blast. Based on current network conditions, Blast  dynamically chooses to use either UDP or TCP to provide the best user experience  when transmitting data.

Horizon Agent

  • HTML5 Multimedia Redirection support for the Edge browser
    You can now use the Edge browser with the HTML5 Multimedia Redirection feature. Previously, only the Chrome browser was supported.
  • Support for subdirectories with URL Content Redirection
    URL Content Redirection now supports subdirectories. For example, if you specify .*.acme.com/software in a rule, all URLs that include the text acme.com and the subdirectory /software are redirected. For example, http://www.acme.com/software is redirected.
  • Simple Device Orientation (SDO) Sensor Redirection
    The SDO sensor redirection can sense changes in the screen orientation of a client device and accordingly display a different view on the device.
  • VMware Logon Monitor
    VMware Logon Monitor monitors Windows user logons and reports performance metrics intended to help administrators, support staff, and developers to troubleshoot slow logon performance.
  • VMware Horizon Performance Tracker 
    VMware Horizon Performance Tracker runs in a remote desktop and monitors the performance of the display protocol and system resource usage. You can also create an application pool and run Horizon Performance Tracker as a published application.

Horizon GPO Bundle

  • The Horizon Performance Tracker ADMX template file (perf_tracker.admx) contains policy settings related to Horizon Performance Tracker.

Horizon Client

For information about new features in Horizon Client 4.8, including HTML Access, see the Horizon Clients Documentation page.

Horizon JMP Server

  • Horizon JMP Server installer and JMP Integrated Workflow features
    The new JMP (Just-in-Time Management Platform) Integrated Workflow features in Horizon Console allow you to easily define and manage desktop workspaces that consist of a desktop operating system, applications, and settings. These features integrate the JMP technologies (Instant Clones for rapid image creation, VMware App Volumes™ for real-time application delivery, and VMware User Environment Manager™ for policies and personalization) into a single workflow. For more information, see Getting Started with JMP Integrated Workflow in the VMware Horizon Console Administration document and the VMware Horizon JMP Server Installation and Setup Guide document.

Horizon 7 Security

  • Horizon 7 Security Features
    • Horizon 7 supports TLS 1.2.

Before You Begin

  • Important note about installing VMware View Composer
    If you plan to install or upgrade to View Composer 7.2 or later, you must upgrade the Microsoft .NET framework to version 4.6.1. Otherwise, the installation will fail.
  • Important note about installing VMware Tools
    If you plan to install a version of VMware Tools downloaded from VMware Product Downloads, rather than the default version provided with vSphere, make sure that the VMware Tools version is supported. To determine which VMware Tools versions are supported, go to the VMware Product Interoperability Matrix, select the solution VMware Horizon View and the version, then select VMware Tools (downloadable only).
  • If you want to install View Composer silently, see the VMware Knowledge Base (KB) article 2148204, Microsoft Windows Installer Command-Line Options for Horizon Composer.
  • This Horizon 7 release includes new configuration requirements that differ from some earlier releases. See the Horizon 7 Upgrades document for upgrade instructions.
  • You can deploy an Extended Service Branch that contains periodic service pack (SP) updates, which include cumulative, critical bug fixes, and security fixes. See the Horizon 7 Upgradesdocument for more information.
  • If you intend to upgrade a pre-6.2 installation of Horizon 7, and the Connection Server, security server, or View Composer server uses the self-signed certificate that was installed by default, you must remove the existing self-signed certificate before you perform the upgrade. Connections might not work if the existing self-signed certificates remain in place. During an upgrade, the installer does not replace any existing certificate. Removing the old self-signed certificate ensures that a new certificate is installed. The self-signed certificate in this release has a longer RSA key (2048 bits instead of 1024) and a stronger signature (SHA-256 with RSA instead of SHA-1 with RSA) than in pre-6.2 releases. Note that self-signed certificates are insecure and should be replaced by CA-signed certificates as soon as possible, and that SHA-1 certificates are no longer considered secure and should be replaced by SHA-2 certificates.
    Do not remove CA-signed certificates that were installed for production use, as recommended by VMware. CA-signed certificates will continue to work after you upgrade to this release.
  • To take advantage of Horizon 7 features such as Virtual SAN 6.1, GRID vGPU, and Virtual Volumes, install vSphere 6.0 and subsequent patch releases.
  • When you upgrade to this release, upgrade all Connection Server instances in a pod before you begin upgrading Horizon Agent, as described in the Horizon 7 Upgrades document.
  • After you have performed a fresh install or upgraded all Connection Server instances to Horizon 7 version 7.2 or later, you cannot downgrade the Connection Server instances to a version earlier than Horizon 7 version 7.2 because the keys used to protect LDAP data have changed. To keep the possibility of downgrading Connection Server instances while planning an upgrade to Horizon 7 version 7.2 or later, you must perform an LDAP backup before starting the upgrade. If you need to downgrade the Connection Server instances, you must downgrade all Connection Server instances and then apply the LDAP backup to the last Connection Server that is downgraded.  
  • The product build number for Horizon Agent in this release does not appear under the “Version” column in the “Add/Remove Programs” panel. To get the product build number, click “VMware Horizon Agent” and view the comments section in the panel below.
  • The download page in this release includes a Horizon HTML Access Direct-Connection file that provides web server static content for supporting HTML Access with View Agent Direct-Connection (VADC). For information about setting up HTML Access for VADC, see Setting Up HTML Access in the View Agent Direct-Connection Plug-in Administration document.
  • Selecting the Scanner Redirection setup option with Horizon Agent installation can significantly affect the host consolidation ratio. To ensure the optimal host consolidation, make sure that the Scanner Redirection setup option is only selected for those users who need it. (By default, the Scanner Redirection option is not selected when you install Horizon Agent.) For users who need the Scanner Redirection feature, configure a separate desktop pool and select the setup option only in that pool.
  • Horizon 7 uses only TLSv1.1 and TLSv1.2. In FIPS mode, it uses only TLSv1.2. You might not be able to connect to vSphere unless you apply vSphere patches. For information about re-enabling TLSv1.0, see Enable TLSv1 on vCenter Connections from Connection Server and Enable TLSv1 on vCenter and ESXi Connections from View Composer in the Horizon 7 Upgradesdocument.
  • FIPS mode is not supported on releases earlier than 6.2. If you enable FIPS mode in Windows and upgrade Horizon Composer or Horizon Agent from a release earlier than Horizon View 6.2 to Horizon 7 version 7.2 or later, the FIPS mode option is not shown. You must do a fresh install instead to install Horizon 7 version 7.2 or later in FIPS mode.
  • Linux desktops use port 22443 for the VMware Blast display protocol.
  • Starting with Horizon 7 version 7.2, it is possible that the ordering of cipher suites can be enforced by Connection Server. For more information, see the Horizon 7 Security document.
  • Starting with Horizon 7 version 7.2, Connection Server must be able to communicate on port 32111 with other Connection Servers in the same pod. If this traffic is blocked during installation or upgrade, installation will not succeed.
  • Starting with Horizon 7 version 7.3.2, TLS handshakes on port 443 must complete within 10 seconds, or within 100 seconds if smart card authentication is enabled. In previous releases of Horizon 7, TLS handshakes on port 443 were allowed 100 seconds to complete in all situations. You can adjust the time for TLS handshakes on port 443 by setting the configuration property handshakeLifetime. Optionally, the client that is responsible for an over-running TLS handshake can be automatically added to a blacklist. New connections from blacklisted clients are delayed for a configurable period before being processed so that connections from other clients take priority. You can enable this feature by setting the configuration property secureHandshakeDelay. For more information about setting configuration properties, see the Horizon 7 Security document.