{"id":335,"date":"2023-01-19T10:08:22","date_gmt":"2023-01-19T08:08:22","guid":{"rendered":"https:\/\/my-virt.alfadir.net\/?p=335"},"modified":"2023-01-25T23:44:53","modified_gmt":"2023-01-25T21:44:53","slug":"app-volumes-apps-on-demand-certificate-issue","status":"publish","type":"post","link":"https:\/\/my-virt.alfadir.net\/index.php\/2023\/01\/19\/app-volumes-apps-on-demand-certificate-issue\/","title":{"rendered":"App Volumes Apps On Demand &#8211; Certificate Issue"},"content":{"rendered":"\n<p>Horizon Suite 2212 is GA since last week and of course I already upgraded all my lab with this new release.<\/p>\n\n\n\n<p>I was particularly interested by the Application on Demand so directly manage App Volumes application on RDS with all entitlement done within the Horizon Console.<\/p>\n\n\n\n<p>The principle consist of adding App Volumes server in Horizon and then assign it to an &#8220;Automated&#8221; farm.<\/p>\n\n\n\n<p>Now when you add you App Volumes Server into Horizon, <strong>you&#8217;ll certainly need to import App Volumes certificates into the &#8220;Trusted Root Certification Authorities<\/strong>&#8221; folder and then restart Horizon Services on all you Connection Servers.<\/p>\n\n\n\n<p>Now even if doing that, you can encounter the following issue, with Enterprise signed certificate :<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"742\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-1024x742.png\" alt=\"\" class=\"wp-image-336\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-1024x742.png 1024w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-300x217.png 300w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-768x556.png 768w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image.png 1049w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>I had this issue on my lab, so to get it solved, I had to generate a new certificate for my App Volumes server using a new Template.<\/p>\n\n\n\n<p>This is how to do it &#8230;.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>Open the Certification Authority mmc console, select <em>Certificate Templates<\/em> then <strong>Manage<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"753\" height=\"527\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-2.png\" alt=\"\" class=\"wp-image-338\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-2.png 753w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-2-300x210.png 300w\" sizes=\"(max-width: 753px) 100vw, 753px\" \/><\/figure>\n\n\n\n<p>Select &#8220;<em>Web Server<\/em>&#8221; then <strong>Duplicate Template<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"943\" height=\"445\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-3.png\" alt=\"\" class=\"wp-image-339\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-3.png 943w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-3-300x142.png 300w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-3-768x362.png 768w\" sizes=\"(max-width: 943px) 100vw, 943px\" \/><\/figure>\n\n\n\n<p>Use following settings :<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"405\" height=\"564\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-4.png\" alt=\"\" class=\"wp-image-340\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-4.png 405w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-4-215x300.png 215w\" sizes=\"(max-width: 405px) 100vw, 405px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"405\" height=\"565\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-5.png\" alt=\"\" class=\"wp-image-341\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-5.png 405w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-5-215x300.png 215w\" sizes=\"(max-width: 405px) 100vw, 405px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"404\" height=\"563\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-6.png\" alt=\"\" class=\"wp-image-342\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-6.png 404w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-6-215x300.png 215w\" sizes=\"(max-width: 404px) 100vw, 404px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"401\" height=\"560\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-10.png\" alt=\"\" class=\"wp-image-346\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-10.png 401w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-10-215x300.png 215w\" sizes=\"(max-width: 401px) 100vw, 401px\" \/><\/figure>\n\n\n\n<p>This setting is very important because it&#8217;s the cause of the problem. <strong>You need both Client Authentication and Server Authentication<\/strong> (see : <a rel=\"noreferrer noopener\" href=\"https:\/\/kb.vmware.com\/s\/article\/2095969\" target=\"_blank\">https:\/\/kb.vmware.com\/s\/article\/2095969<\/a>) <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"304\" height=\"423\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-9.png\" alt=\"\" class=\"wp-image-345\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-9.png 304w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-9-216x300.png 216w\" sizes=\"(max-width: 304px) 100vw, 304px\" \/><\/figure>\n\n\n\n<p>All others are defaults<\/p>\n\n\n\n<p>Once the new template is created, we need to make it &#8220;usable&#8221; : click &#8220;New&#8221; then &#8220;Certificate Template to Issue&#8221;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"756\" height=\"529\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-12.png\" alt=\"\" class=\"wp-image-348\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-12.png 756w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-12-300x210.png 300w\" sizes=\"(max-width: 756px) 100vw, 756px\" \/><\/figure>\n\n\n\n<p>And select the new Template :<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"594\" height=\"379\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-13.png\" alt=\"\" class=\"wp-image-349\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-13.png 594w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-13-300x191.png 300w\" sizes=\"(max-width: 594px) 100vw, 594px\" \/><\/figure>\n\n\n\n<p>You can new generate a new certificate :<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"508\" height=\"515\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-14.png\" alt=\"\" class=\"wp-image-350\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-14.png 508w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-14-296x300.png 296w\" sizes=\"(max-width: 508px) 100vw, 508px\" \/><\/figure>\n\n\n\n<p>Once you new certificate generated, you can export it as pfx and then convert it to PEM + Key using the OpenSSL<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#openssl.exe pkcs12 -in av-cert.pfx -nocerts -out av-cert.key.pem -nodes -password pass:&lt;password>\n#openssl.exe pkcs12 -in av-cert.pfx -nokeys -out av-cert.pem -password pass:&lt;password>\n#openssl.exe rsa -in av-cert.key.pem -out av-cert.key\n# del av-cert.key.pem<\/code><\/pre>\n\n\n\n<p>Next step, edit nginx.conf file (in c:\\Program Files (x86)\\Cloud Volumes\\Manager\\nginx\\conf), and change the certificate and key name as required.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"593\" height=\"275\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-15.png\" alt=\"\" class=\"wp-image-351\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-15.png 593w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-15-300x139.png 300w\" sizes=\"(max-width: 593px) 100vw, 593px\" \/><\/figure>\n\n\n\n<p>Copy the certificate (but not the private key) to your Connections Servers and install it into the &#8220;<strong>Trusted Root Certification Authorities<\/strong>&#8221; store:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"535\" height=\"523\" src=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-17.png\" alt=\"\" class=\"wp-image-353\" srcset=\"https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-17.png 535w, https:\/\/my-virt.alfadir.net\/wp-content\/uploads\/2023\/01\/image-17-300x293.png 300w\" sizes=\"(max-width: 535px) 100vw, 535px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Horizon Suite 2212 is GA since last week and of course I already upgraded all my lab with this new release. I was particularly interested by&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,2],"tags":[],"class_list":["post-335","post","type-post","status-publish","format-standard","hentry","category-app-volumes","category-horizon"],"_links":{"self":[{"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/posts\/335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/comments?post=335"}],"version-history":[{"count":2,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/posts\/335\/revisions"}],"predecessor-version":[{"id":357,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/posts\/335\/revisions\/357"}],"wp:attachment":[{"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/media?parent=335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/categories?post=335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/my-virt.alfadir.net\/index.php\/wp-json\/wp\/v2\/tags?post=335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}