Deploy SSL certificate

When your end users authenticate, their browsers will be redirected to the Authentication Service HTTPS URL. To ensure this happens seamlessly, it is recommended that you install an Authentication Service SSL certificate on all client machines.

If you do not install a certificate, users will see a page similar to the following every time they try to browse via Authentication Service, unless they manually add an exception:

Authentication Service provides a default SSL certificate in the administration console that you can deploy to client machines. Alternatively, you can provide your own certificate.

To use the default Authentication Service certificate:

1.	In Horizon Connector, go to Advanced > Web Server.

2.	Copy the contents of the SSL cert info field and save as a .CRT file in the location of your choice.

3.	Deploy the certificate to the client machines that will authenticate using Authentication Service using your preferred distribution method, for example Microsoft Group Policy Object.

To use your own SSL certificate:

1.	If you wish to purchase a new certificate for use with Authentication Service, create a Certificate Signing Request and private key on the Authentication Service VM. Use these to create your SSL certificate.

2.	Once you have purchased your certificate, go to Advanced > Web Server in the administration console.

3.	In the SSL cert field, browse to the location of your SSL certificate and select the certificate file to upload.

4.	In the SSL private key field, browse to the location of your private key and select the key file to upload.

5.	In the SSL CA chain field, browse to the location of the certificate chain that goes back to the root Certificate Authority (also known as the certification path), and select the relevant file.

6.	Click Save and Restart.

Once the administration console has restarted, the SSL cert info field contains details of your new certificate.

7.	Deploy the certificate to the client machines that will authenticate using Authentication Service using your preferred distribution method, for example Microsoft Group Policy Object.