topic Re: free signed certificate for testing HTML Access in Horizon Desktops and Apps

free signed certificate for testing HTML Access

Topstep1 — Thu, 18 Nov 2021 17:08:41 GMT

Can anyone [please] recommend a source for a free signed cert for testing Horizon Web Access? I'm been using the self signed cert and the external IP address and that works on PC but I would like to test a MAC (Mac's don't allow connecting to unsigned sites (without he machines admin password accepting)

I guess I need it all FREE public dns, host name and signed cert. I don't know if I can get this from one site or must i use multiple sites.

In the past I spun of a Cert Server and created a certificate to test the Biometrics on the Ipad (thump print for logging in the Horizon View). It worked perfectly. But it was 'my' iPad and I had to import the key into the iPad to create the Trust first.

This time I want to test on a Mac at BestBuy

Thanks.

Re: free signed certificate for testing HTML Access

fabio1975 — Thu, 18 Nov 2021 21:07:30 GMT

Ciao

one question, do you use the unified access gateway (UAG) to publish the Horizon infrastructure to the internet? If no i suggest to use it
The question regarding public DNS is not clear to me.

You can try to use for SSL https://letsencrypt.org/

This a guide for configuration with UAG

Install VMware Horizon 7 Lets Encrypt SSL Certificate - Virtualization Howto

Re: free signed certificate for testing HTML Access

Topstep1 — Thu, 18 Nov 2021 21:40:35 GMT

Yes, I use UAG. I put my external IP address in UAG. I'm test from home lab and don't have a pubic IP address. So, I've been using the external IP assigned to by Cable company (business class router)

I don't think you can use an iP address for the certificates... can you?

I use to use the free dyndns.org (but there not FREE anymore <smile>

you could get somenameachoose.dyndns.org and assign it to your external IP address.

Also, I just checked and It appears that anything greater than macOS < 10.12.1 will not trust letsencrypt.org's Certs (Per their FAQ.. I'll be using Monterey (OS X 12)

Re: free signed certificate for testing HTML Access

fabio1975 — Thu, 18 Nov 2021 22:35:50 GMT

Ciao

Ok, now with more info the scenario (UAG) and the DNS part are many clearers to me (yes, you can't have a certificate linked to an IP
In this link, it seems to me that lestencrypt is supported

https://letsencrypt.org/docs/certificate-compatibility/