VMware View Manager 4.5 Admin Manual page 128

VMware View Administrator's Guide
Logging in with OCSP Certificate Revocation Checking
n
When you configure OCSP certificate revocation checking, View sends a request to an OCSP Responder
to determine the revocation status of a specific user certificate. View uses an OCSP signing certificate to
verify that the responses it receives from the OCSP Responder are genuine.
Configure CRL Checking
n
When you configure CRL checking, View reads a CRL to determine the revocation status of a smart card
user certificate.
Configure OSCP Certificate Revocation Checking
n
When you configure OCSP certificate revocation checking, View sends a verification request to an OCSP
Responder to determine the revocation status of a smart card user certificate.
Smart Card Certificate Revocation Checking Properties
n
You set values in the
checking.
Logging in with CRL Checking
When you configure CRL checking, View constructs and reads a CRL to determine the revocation status of a
user certificate.
If a certificate is revoked and smart card authentication is optional, the Enter your user name and password
dialog box appears and the user must provide a password to authenticate. If smart card authentication is
required, the user receives an error message and is not allowed to authenticate. The same events occur if View
cannot read the CRL.
Logging in with OCSP Certificate Revocation Checking
When you configure OCSP certificate revocation checking, View sends a request to an OCSP Responder to
determine the revocation status of a specific user certificate. View uses an OCSP signing certificate to verify
that the responses it receives from the OCSP Responder are genuine.
If the user certificate is revoked and smart card authentication is optional, the Enter your user name and
password dialog box appears and the user must provide a password to authenticate. If smart card
authentication is required, the user receives an error message and is not allowed to authenticate.
View falls back to CRL checking if it does not receive a response from the OSCP Responder or if the response
is invalid.
Configure CRL Checking
When you configure CRL checking, View reads a CRL to determine the revocation status of a smart card user
certificate.
Prerequisites
Familiarize yourself with the
Revocation Checking Properties,"
128
on page 128
file to enable and configure smart card certificate revocation
locked.properties
file properties for CRL checking. See
locked.properties
on page 130.
on page 128
on page 129
on page 130
"Smart Card Certificate
VMware, Inc.