VMware Horizon Community
Reiver
Contributor
Contributor

How do I create a "locked.properties" file for View SSL?

- I'm using View Manager 4.0 and I've created a new SSL cert for my thin clients. Its ready to import in the C:\Program Files\VMware\VMware View\Server\sslgateway\conf folder. We have no security server.

- To enable the cert Vmware says to configure a txt file called locked.properties which is in the very same folder.  But this file is missing for some reason.

According to this KB if you don't have this file you should "create it". But there is no info on how to go about actually creating the file. I've seen partial samples an the internet....is there template of some sort I can use?

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100714...

(sorry to have crossposted this in another forum, my first time here)

Reply
0 Kudos
5 Replies
mittim12
Immortal
Immortal

That KB is for VDM 2.X which hopefuly your not currently running.    What version of View are you currently on? 

Reply
0 Kudos
Reiver
Contributor
Contributor

We're on View 4.0 soon to be 5.1.

I have the cert properly compiled and imported into the keystore...my final step is to 'point' the View server to use it.

Reply
0 Kudos
mittim12
Immortal
Immortal

Check out this KB, http://kb.vmware.com/kb/1008705.   Your file will look sometthing like the below depending on if it's jks or pkcs.   The bold portion doesn't get into the file it's just showing you

  • pkcs key: keyfile=keys.p12
                        keypass=secret

  • jks key: storetype=jks
    keyfile=keys.jks

    keypass=secret

Reply
0 Kudos
Reiver
Contributor
Contributor

I found documentation elswhere that implies there should be a lot more text in the file. But I suspect using the first three lines might be the only ones needed...I'll give it a try tonight. Seems s bit insecure that the cert password is in plain text though.

keyfile=keys.p12
keypass=MY_PASS
storetype=pkcs12

clientHost=viewservername.com
clientPort=443
clientProtocol=https

trustKeyfile = truststore

truststore type = JKS

useCertAuth = true

Reply
0 Kudos
markbenson
VMware Employee
VMware Employee

Note that with the current shipping View 5.1, certificates are no longer referenced from this locked.properties file.

With View 5.1, the SSL Server certificates are fully managed through the standard Windows certificate store.

This file based method is only for older versions of View.

Mark

Reply
0 Kudos