VMware Horizon Community
IMCB
Contributor
Contributor

2 factor authentication with Quest Defender

I am new to this vmware so I hope this is the right spot to post this question. We are juist implementing VDI using vmware view 5.1 and would like ot use our Quest Defender application with it. We currently use VPN and Quest just fine. I do have the VDI working externally but can't seem to get the 2 factor working. I have made the changes to the connect server in the administrator and set for 2 factor auth but when I test it. I get the challenge response it just comes back and asks for a response again. If I put in the wrong response it does say access denied but if I put in the correct response it just prompts for a response again. I can not get past that window.

Also,  I am getting a security cert warning. I am trying to use a wildcard cert we have but the client continues to try and use the initial server cert and no tthe external one. I can't seem to change what cert it tries to use. I have made the adjustments to the  system variables and even changed the friendly name to vdm.  Any help on either of these issues would be appreciated.

Tags (3)
0 Kudos
4 Replies
IMCB
Contributor
Contributor

Spoke with tech support.

0 Kudos
markbenson
VMware Employee
VMware Employee

Are you still having a problem with this setup? What did tech support say?

For info on RADIUS 2-factor authentication, please see this article - http://communities.vmware.com/docs/DOC-19448 it includes a video that describes setup and troubleshooting tips.

Mark

0 Kudos
IMCB
Contributor
Contributor

Basically we went over the settings again, changed the authentication to PAP and things started working. I had tried all auth's before writing post or talking to tech support. Not sure why it started working with them. Spoke with them a while back but forgot to update the post. Your link is what was done back then.

0 Kudos
markbenson
VMware Employee
VMware Employee

Thanks for posting back. The authentication (PAP/CHAP etc.) has to match what is set up for the RADIUS server. Sounds like your RADIUS server is PAP and therefore it wouldn't have worked if View was set to something other than PAP.

Glad you have it working now.

Mark 

0 Kudos