To import a self-signed certificate on a Windows host, you export the certificate from your Horizon FLEX server and import it to the Windows computer.
Prerequisites
-
Become familiar with how to install and use the MMC Certificates snap-in on a Windows system. For more information, go to the Windows TechNet Web site at http://technet.microsoft.com.
-
Install Windows IIS.
Procedure
- Export the self-signed certificate from your Horizon FLEX server.
- On the Horizon FLEX server, start MMC (mmc.exe), add the Certificates snap-in for a computer account, and manage certificates for the local computer.
- Select File > Add/Remove Snap-in.
- Click the Certificates snap-in and click Add.
- On the Certificates snap-in display, select Computer account and click Next.
This setting is required by the Horizon FLEX server.
- Select Local Computer and click Finish and then OK.
- In the left navigation pane, expand Certificates (Local Computer).
- Right-click on Trusted Root Certification Authorities and select All Tasks > Import.
The Certificate Import Wizard opens.
- Click Next.
- Browse for the root certificate file and click Next.
- Select Place all certificates in the following store: Trusted Root Certification Authorities and click Next, then click Finish.
- Navigate to Trusted Root Certification Authorities > Certificates.
- Select and export the self-signed certificate.
Export the certificate in DER-encoded binary X.509 (.CER) format.
- Copy the self-signed certificate to the client Windows computer.
- Import the self-signed certificate to the client Windows computer.
- On the Windows computer, start MMC (mmc.exe).
- Add the Certificates snap-in for the computer account and manage certificates for the local computer.
- Import the self-signed certificate into Trusted Root Certification Authorities > Certificates.
Results
The self-signed certificate is now trusted for all users.