View Manager Administration Guide phần 3 ppt

VMware, Inc. 37 Chapter 2 Installation To perform an initial configuration 1OpenabrowsersupportedbyViewAdministrator,andenterthefollowingURL where<server>isthehostnameorIPaddressofastandardorreplicaView ConnectionServerinstance: https://<server>/admin 2Loginusingtheappropriatecredentials.Initially,alldomainuserswhoare membersofthelocaladministratorsgroupontheViewConnectionSe rverare allowedtologintotheViewAdministrator—youcanusetheinterfacetochange thelistofViewManageradministratorslater. Thefirsttimeyoulogin,theConfigurationviewisshown.Afteryouhavelicensed theproduct,theDesktopviewisdisplayedafterlogin. 3WithintheConfigurationview,dothefoll owing:  UnderProductLicensing,clickEditLicenseandentertheViewManager licensekeyinthefieldprovided.ClickOK.  UnderVirtualCenterServers,clickAddandcompletethedetailsforoneor moreVirtualCenterserverstousewithViewManager.  EntertheFQDNorIPaddressoftheVMwareVirtualCenterserveryou wantViewManagertocommunicatewithintheServeraddresstextbox. N OTEViewAdministratorisaccessedthroughasecure(SSL)connection.Thefirst timeyouconnect,yourbrowsermaypresentyouwithanintermediarypagethat warnsyouthatthesecuritycertificateassociatedwiththeaddressisnotissuedby atrustedcertificateauthority.Thisisexpectedbehaviorbecausethedefaultroot certificates uppliedwithViewConnectionServerisself‐signed. N OTEIftheConfigurationviewisnotshown,clicktheConfiguration() button. CAUTIONIfyouenteraserverusingaDNSnameorURL,noDNSlookupis performedtoverifywhetherornottheserverhaspreviouslybeenentered usingitsIPaddress.AconflictwillariseifaVirtualCenterserverisaddedwith bothitsDNSnameanditsIPaddress. View Manager Administration Guide 38 VMware, Inc.  EntertheusernameofaVirtualCenteruseroradministratorinthe User nametextbox.IfyouwanttoselectaVirtualCenteruserwhoisnot anadministratorbuthastherequisitelev elofauthority,ensurethattheir rolemeetsthecriteriadescribedin“VirtualCenterPermissionsforView ManagerUsers”onpage 36.  Enterthepasswordthatcorrespondstotheusernameenteredabovein thePasswordtextbox.  (Optional)EnteradescriptionforthisVirtualCenterserverinthe Descriptiontextbox.  IfyouwillbeconnectingtotheVirtualCenterthroughasecurechannel (SSL)thenmakesuretheConnectusingSSLcheckboxischecked.Thisis thedefaultsetting.  EntertheTCPportnumberinthePorttextbox.Thedefaultis443. (Optional)IfyouclicktheAdvancedbuttonyoumayalsoconfigurethe followingsettings:  Maximumnumberofconcurrentprovisioningoperations—Thisisthe maximumnumberofvirtualmachinesthatwillbesimultaneously createdbyViewManagerinVirtualCenteratanygiventime.  Maximumnumberofconcurrentpoweroperations—Thisisthe maximumnumberofconcurrentpoweroperations(startup,shutdown, suspendandsoforth)thatwilltakeplaceonViewManagermanaged virtualmachinesinVirtualCenteratanygiventime. ClickOKtostoretheVirtualCentersettings.  UnderAdministrators,clickAddandusetheformprovidetogrant administrativerightstotheActiveDirectoryuserswhoyouwanttobeableto accesstoViewAdministrator.Onceyouhaveaddedalltherequired administrators,clickOK. View Connection Server Backup Inordertopreserveormigrateyourconfigurationinformation,ViewManagerallows youtoexportandimportthecontentsoftheViewLDAPrepositoryfromanystandard orreplicaViewConnectionServer. ViewLDAPdataisexportedandimportedinLDAPdatainterchangeformat(LDIF),a draftInternetstandardforafileformatthatcanbeus edtoperformbatchoperations againstdirectoriesthatconformtotheLDAPstandard. VMware, Inc. 39 Chapter 2 Installation Onceyouhavecompletedtheinitialconfigurationofyourserverorreplicated group, it isstronglyrecommendedthatyouregularlytakebackupsofyour View Managerdatausingtheutilitiesdescribedinthissection.Donotrelyonreplica serverstoactasyourbackupmechanismasanydatalostfromoneinstancewillbelos t fromallmembersofthereplicatedgroupwhenthedataisharmonized. To export View Manager configuration data LDIFdataisexportedfromViewManagerusingthevdmexport.exetoolthat accompanieseachstandardandreplicaViewConnectionSever;thepathtothe executablefileis: C:\Program Files\VMware\View Manager\Server\bin\vdmexport.exe FromthecommandpromptonastandardorreplicaViewCo nnectionServer,execute thefollowingcommandtocreateafilecalledVDMConfig.LDFthatcontainsthe exportedViewLDAPconfigurationinformation: vdmexport> vdmconfig.ldf To import View Manager configuration data LDIFdataisimportedintoViewManagerusingLDIFDE,autilityprogramincludedin WindowsServer2003thatsupportsbatchoperationsbasedontheLDIFfileformat standard. Fromthec ommandpromptonastandardorreplicaViewConnectionServer,execute thefollowingcommandtoimportafilecalledVDMConfig.LDFthatcontainspreviously exportedViewLDAPconfigurationdata: LDIFDE -i -f vdmconfig.ldf -s 127.0.0.1 N OTEIfyouhavemultipleinstancesofViewConnectionServeroperatingina replicatedgroupyouonlyneedtoexportthedatafromoneserverasallreplicaservers containthesameconfigurationdata. View Manager Administration Guide 40 VMware, Inc. VMware, Inc. 41 3 ViewAdministratoriswhereyouperformalloftheconfiguration,deployment, analytical,andadministrativetasksrelatedtoViewManageranddesktop management. Thepurposeofthischapteristogiveyouabriefoverviewofthedifferenttypesofview availablewithinViewAdministratoranddescribethefeaturestheycontain.This chapteralsodi scussesthevariousdesktopsourcesandthedifferentdesktopdelivery modelsthatcanbedelivered. Thischapterdiscussesthesetopics:  “OverviewofViewAdministrator”onpage 41  “DesktopsandPoolsView”onpage 42  “ConfigurationView”onpage 45  “EventsView”onpage 47 Overview of View Administrator TheDesktopsandPools(),UsersandGroups(),Configuration(),and Events ()buttonsaredisplayedatthetopoftheadministrativeinterface,andthese buttonsallowyoutonavigatetothedifferentfeatureareasinordertoperformvarious tasks.Thissectiondescribestheviewsassociatedwitheachbuttonandthefeatures theycontain. View Administrator 3 NOTEWhenyouclickoneofthesebuttonsintheadministrativeinterfaceandselecta tabontheviewthatisdisplayed,thetabbackgroundbecomeswhite.Tabsthatarenot selectedhaveapurplebackground. View Manager Administration Guide 42 VMware, Inc. Desktops and Pools View TheDesktopsviewisdisplayedwhenyoulogintotheadministrativeinterfaceorwhen youclicktheDesktopsandPoolsbuttonandiswhereyoucreate,deploy,administer, andmonitoryourvirtualdesktops. Fromhereyoucanexamineinformationaboutdesktopsordesktoppoolsandtheir associatedusers;individualdesktopsourc es;anysessionsthatareactive;anytasksthat arescheduled;anddesktopusagepoliciesattheglobal,pooloruserlevel. TheDesktopsviewisdividedintotwoparts:aleft‐handpanethatcontainsan InventoryandaSearchtabandarighthandpanethatprovideseitherglobalor pool‐le velinformationaboutthedesktopscurrentlyavailable. WhentheInventorytabisselected,theleft‐handpaneprovidesalistofallthedesktops orpoolsinanalphabeticlistunderthetop‐levelDesktopsandPoolsentry(). TheDesktopsandPoolsentryisglobalinscope.Whenselecteditchangestheconte xt oftheright‐handpanetocoverallthedesktopsavailable—forexample,whenthisentry isselectedtheActiveSessionstabintheright‐handpanelistsalltheactivesessionsfor allViewManagerdesktops. Ifanydesktopsordesktoppoolsarepresent,theyarelistedbeneaththeGlobal des ktopandpoolviewentry.Selectinganindividualdesktop()ordesktoppool entry()changesthecontextoftheright‐handpanetoprovidespecificallyaboutthat desktoporpool.Forexample,whenanentryinthislistisselectedtheActiveSessions sub‐tabintheri ght‐handpanelistsalltheactivesessionsforthedesktopsinthatpool. Thetabsintheright‐handpanearedescribedinTable 3‐1.Ifthetabispresentforboth specificdesktopsourcesandalsodesktoppools,thisisindicatedintheContext column. VMware, Inc. 43 Chapter 3 View Administrator Table 3-1. Desktops Pane – Tab Summary Tab Context Description Summary DesktoporPool Thistabprovidesanoverviewofallinformation associatedwithadesktopordesktoppool,including: Generalinformationaboutthepool,suchasthename, type,persistence,andcurrentactivity. VirtualCenterenvironmentalcriteria,suchasserver name,capacity,anddomainadministrator. Desktopsettings,suchasminimum,maximum,and availablenumberofdeskt ops;powerpolicyandso forth. Fromthistabyoucanclick:  Edittomodifythedesktopordesktoppool deploymentsettings  Entitletoaddorremoveuserentitlementstoor fromthedesktopordesktoppool  Enable/Disabletoenableordisabledesktopor desktoppoolavailabilityandprovisioning Desktops Global Thistablistsallthedesktopsordesktopspools currentlyavailablewithinViewManager.Fromthis tabyoucanclickAddtodeployanewdesktopor pool. Inaddition,youcanselectexistingdesktopordesktop poolentriesfr omthetableprovidedandclick:  Edittomodifythedesktopordesktoppool deploymentsettings  Entitletoaddorremoveuserentitlementstoor fromthedesktopordesktoppool  Deletetoremovethedesktopordesktoppool  Enable/Disabletoenableordisabledesktopor desktoppoolavailabilityandprovisioning UsersandGroups DesktoporPool Thistablistsallusersandgroupsentitledtousethis desktoporpool.FromundertheEntitlements sub‐tab,youcanselectandRemove Entitlementfrom anyuserlistedinthetableprovided. Ifthesel ectedpooluseslinkedclonetechnologyforits deployment,anadditionalsub‐tab—Known Users—isalsodisplayed. View Manager Administration Guide 44 VMware, Inc. DesktopSources DesktoporPool Thistablistsalltheindividualvirtualsystems availableintheselectedpool.Fromthistabyoucan selectexistingdesktopordesktoppoolentriesfrom thetableprovidedandclick:  Removetoremoveindividualormultiplevirtual machines(eitherfromViewManager,orfrom VirtualCenterandViewManager)  Resettoresetselecteddesktop—thisaction disconnectsanycurrentlyconnectedusersand restartsthesystem  Rebalancetoredistributethevirtualmachineson thedatastoretoensurethatspaceisbeingused optimallybetweenlogicaldrives  CancelTasktoterminateanytasksthathavebeen scheduledorthatarecurrentlyrunningagainst theselectedvirtualmachines ActiveSessions Both Thistablistsallthedesktopsessionscurrentlyactive, eithergloballyorwithintheselectedpool.Theuser name,starttime,duration,andvirtualmachine addressforeachconnecteduserar eshown. Youcanselectuserentriesfromthetableprovided andclick:  Disconnectsessiontodisconnecttheuserfrom thedesktop—thisactiondoesnotlogtheuseroff, andtheirsessionwillpreservedoncetheylog backinprovidingtheAutomaticlogoffafter disconnectsettingspecifiedduringdesktop deploymenthasbeennotbeenexceeded  Logoffsessiontologtheuseroffanddisconnects themfromthecurrentsession  Resetvirtualmachine OfflineSessions Both(when OfflineDesktop desktopsare detected) ThistablistsalltheOfflineDesktopdesktops currentlycheckedout,eithergloballyorwithinthe selectedpool.RefertoChapter 7,“OfflineDesktop,” onpage 123formoreinformationaboutthisfeature. GlobalPolicies Global Thistabliststhepoliciesthatareappliedtoal l desktopsandpoolsatthegloballevel. Policies DesktoporPool Thistabliststhepoliciesthatareappliedtothe selecteddesktoporpool.IftheAnyuser‐levelpolicies thathavebeenappliedarealsolistedinthisview. Table 3-1. Desktops Pane – Tab Summary (Continued) Tab Context Description VMware, Inc. 45 Chapter 3 View Administrator Configuration View TheConfigurationviewisdisplayedwhenyouclicktheConfiguration()button. Thisviewcontainsmultiplesectionsthatallowyoutoanalyzedesktopusage,configure licensing,connections,authenticationcriteriaandsoforth.Eachsectionisdescribedin Table 3‐2: Table 3-2. Configuration View Overview Section Description ProductLicensing ThissectionindicatesthelicensestatusofViewManagerand alsoifadditionalcomponentssuchastheOfflineDesktop featureareprovidedwithinthelicensecoverage. ClickEditLicensetoaddormodifythelicenseserialnumber forViewConnectionServer. Usage Thissectionindicatestheusageinformationforcurrentlyactive desktops,in cludingofflinedesktopsiftheViewManager licensecoverageincludesOfflineDesktop. Youcanupdatetheinformationdisplayedintheusagetableby clickingRefresh,andresetthecounterthattalliesthehighest numberofconcurrentconnectionsbyclickingResetHighest. VirtualCenterServers ThissectionliststheVirtualCenterserversavailableforth e connectionservertouse.YoucanclickAdd,Edit,orRemoveto modifytheconnectioncriteria. RegisteredDesktopSources ThissectionprovidesthenumberofTerminalServices, standalonevirtualmachines,andphysicaldesktopsources currentlyregisteredwithViewConnectionServer. ViewServers Thissectionallowsyoutoenableordisablethecu rrentView ConnectionServer—indicatedbyacheckmark()—andany replicainstancesofViewConnectionServerknowntothethis server. Selectaserverentryfromthetableprovidedandclick:  Enabletoallowuserstoconnecttotheirclientsusingthis server.  Disabletorefusefutureclientconnectionstothisserver (existingclientconnectionsarenotaffectedbythisaction).  EdittomodifytheViewConnectionServerexternalURLor toenableordisableRSASecurID. Tospecifyifadirect(non‐tunnelled)connectionisusedby clientconnectionsbrokeredbythisViewConnectionServer server,selecttheDirectconnectiontodesktopbox. View Manager Administration Guide 46 VMware, Inc. GlobalSettings Thissectionprovidesinformationabouttheglobalproduct configurationparametersthatapplytoallareasoftheproduct. Tochangeasetting,clickEditandthenmodifyanyofthe followingentries:  Sessiontimeout—Determinehowlong(inminutes)users areallowedtokeepsessionsopenaftertheylogintothe ViewConnectionServer.Thisfieldmustcontainavalue, andthedefaultis600.  RequireSSLforclientconnections—DeterminesifSSLis usedtocreateasecurecommunicationchannelbetween ViewConnectionServerandtheclient.  Reauthenticateafternetworkinterruption—Determinesif tunnelclientusercredentialsmustbereauthenticatedafter anetworkinterruption.Thissettinghadnoeffectwhen directconnectionisbeingused.  Messagesecuritymode—DeterminesiftheJMSmessages passedbetweenViewManagercomponentsareencrypted. IfasecurityserverexistsinyourViewManager environmentandyouenablethissetting,youmusthavean appropriatelyconfiguredlocked.propertiesfileresidenton thesecurityserver.Referto“Generatinglocked.properties Automatically”onpage 74formoreinfor mationaboutthis.  DirectconnectionforOfflineDesktop operations—OfflineDesktop(ifavailable)supports tunneledornon‐tunneledcommunicationsforLAN‐based datatransfers. Whentunnelingisenabled,alltrafficisroutedthroughthe ViewConnectionServer.Whentunnelingisnotenabled, datatransferstakeplacedirectlybetweentheonline desktophostsystemandtheof flineclient.  RequireSSLforOfflineDesktopoperations—Inaddition tospecifyingtherouteforcommunications,youcan encryptthecommunicationsanddatatransfersthattake placebetweentheOfflineDesktopclientandtheView ConnectionServerbyselectingthischeckbox.  DisableSSOforOfflineDesktop operations—Determinesifsinglesign‐onisenabledfor OfflineDesktop.Whendisabled,usersmustmanuallylog intotheirdesktoptostarttheirWindowssessions. Table 3-2. Configuration View Overview (Continued) Section Description [...]... Click Install to begin the installation process. On the process is complete click  Finish Using the View Agent on Virtual Machines with Multiple NICs For guest systems with more than one virtual NIC, you must configure the subnet that  the View Agent will use. This determines which network address the View Agent  provides to the View Connection Server for client RDP connections VMware, Inc 53 View Manager Administration Guide To configure this subnet, create the following registry string in the virtual machine on ... You have administrative rights to the guest system Installing the View Agent on the Guest System The View Agent component assists with session management, single sign‐on, and  device redirection. You must install View Agent on the guest system in order to allow  the View Connection Server to communicate with the desktop 52 VMware, Inc Chapter 4 Virtual Desktop Deployment To install View Manager Agent 1 Run the View Agent executable on the system that will host the agent, where xxx ... “Overview of Virtual Desktop Deployment” on page 50 “Preparing the Guest System” on page 52 “Individual Desktops” on page 54 “Automated Desktop Pools” on page 56 “Manual Desktop Pools” on page 62 “Entitling a Desktop or Pool” on page 65 “Searching Desktops and Entitled Users and Groups” on page 65 “Disabling View Manager and Deleting Objects” on page 67 VMware, Inc 49 View Manager Administration Guide. .. and user experience. They also differ in the way they are configured and managed and  the provisioning choices they offer. The desktop sources supported by View Manager: View Manager Provisioned and VirtualCenter Managed— the desktop source is a  virtual machine that is provisioned by View Manager and is managed by a  VirtualCenter server. To add this desktop source the following settings must be  specified by the administrator:... VMware, Inc 51 View Manager Administration Guide Terminal Server Pool – is a pool of terminal server (TS) desktop sources served by one  or more terminal servers. A terminal server desktop source can deliver multiple  desktops. A TS pool has the following characteristics: Pool of TS desktops served by a farm comprising of one or more terminal servers Least session count based load balancing: View Manager load balances connection ... You can use the information on the Events page for diagnosing problems or viewing  activity on the server.  VMware, Inc 47 View Manager Administration Guide To search events 1 Click the arrow after Contains and select the columns to search (Messages, Time,  Type).  2 From the list, choose the number of days of messages to show in the Events table  and click Done.  3 Enter search text in the text box and click Go.  Search results appear in the Events table. Click (more) at the end of each message to ... Run the View Agent executable on the system that will host the agent, where xxx  is the build number of the file: VMware-viewagent-xxx.exe The installation wizard opens. Click Next 2 Accept the VMware license terms and click Next 3 Choose your custom setup options. You must install the View Manager Composer  Agent if you want to deploy linked clone desktops. Refer to Chapter 6,  View Composer,” on page 93 for further information about this feature. You may also ... full View Connection Server functionality. By using a security  server as an intermediary connection layer, View Manager ensures that only authenticated users can attempt a connection  to the internal network from the Internet.“Security Server  Installation” on page 29 for more information about this Events View Use the Events view to examine events generated by the actions taking place within the  View Connection Server. You can enter text in the Contains field and search by type of ...Chapter 3 View Administrator Table 3- 2 Configuration View Overview (Continued) Section Global Settings (Continued) Description Display a pre‐login message—if selected, Client and Web  Access users see a disclaimer or login message with ... To configure this subnet, create the following registry string in the virtual machine on  which the View Agent is installed, where n.n.n.n is the TCP/IP subnet and m is the  number of bits in the subnet mask: HKEY_LOCAL_MACHINE\Software\VMware, Inc.\VMware VDM\Node Manager\ subnet = n.n.n.n/m (REG_SZ)  Individual Desktops Individual desktops are single virtual machines that contain View Agent and can be  accessed remotely by View Manager clients. Users entitled to use this type of desktop  . 3 View Administratoriswhereyouperformalloftheconfiguration,deployment, analytical,andadministrativetasksrelatedto View Manager anddesktop management. Thepurposeofthischapteristogiveyouabriefoverviewofthedifferenttypesof view availablewithin View Administratoranddescribethefeaturestheycontain.This chapteralsodi scussesthevariousdesktopsourcesandthedifferentdesktopdelivery modelsthatcanbedelivered. Thischapterdiscussesthesetopics:  “Overviewof View Administrator”onpage 41  “DesktopsandPools View onpage 42  “Configuration View onpage 45  “Events View onpage 47 Overview of View Administrator TheDesktopsandPools(),UsersandGroups(),Configuration(),and Events. DisableSSOforOfflineDesktop operations—Determinesifsinglesign‐onisenabledfor OfflineDesktop.Whendisabled,usersmustmanuallylog intotheirdesktoptostarttheirWindowssessions. Table 3- 2. Configuration View Overview (Continued) Section Description VMware, Inc. 47 Chapter 3 View Administrator Events View UsetheEvents view toexamineev entsgeneratedbytheactionstakingplacewithinthe View ConnectionServer.YoucanentertextintheContainsfieldandsearchbytypeof message,thetimeofthemessageorthemessagetextitself.Youcanalsodeterminethe numberofdaysofmess agestodisplay. YoucanusetheinformationontheEventspagefordiagnosingproblemsorviewing activityontheserver. GlobalSettings(Continued). Thissectionallowsyoutoaddoneormoresecurityserver in stancestoyour View Manager environment.Securityservers offergreaternetworksecuritytoenvironmentsthatallow clientstoaccessthemfromtheInternet. SecurityserversoperatewithinaDMZandrunasubsetofthe full View ConnectionServerfunctionality.Byusingasecurity serverasanintermediaryconnectionlayer,V iew Manager ensuresthatonlyauthenticateduserscanattemptaconnection totheinternalnetworkfromtheInternet.“SecurityServer Installation”onpage 29formoreinformationaboutthis. Table 3- 2. Configuration View Overview (Continued) Section Description View Manager Administration Guide 48 VMware, Inc. To search events 1ClickthearrowafterContainsandselectthecolumnstosearch(Messages,Time, Type). 2Fromthelist,choosethenumberofdaysofmessagestoshowintheEventstable andclickDone. 3EntersearchtextinthetextboxandclickGo. SearchresultsappearintheEventsta ble.Click(more)attheendofeachmessageto displaymoredetailsabouttheevent. VMware,