VMware View Manager 4.5 Admin Manual page 129

Procedure
1 Create or edit the
Server or security server host.
For example:
2 Add the
enableRevocationChecking
a Set
enableRevocationChecking
b Set
crlLocation
3 Restart the View Connection Server service or security server service to make your changes take effect.
Example 7-2. locked.properties File
The file shown enables smart card authentication and smart card certificate revocation checking, configures
CRL checking, and specifies a URL for the CRL location.
trustKeyfile=lonqa.key
trustStoretype=JKS
useCertAuth=true
enableRevocationChecking=true
crlLocation=http://root.ocsp.net/certEnroll/ocsp-ROOT_CA.crl
Configure OSCP Certificate Revocation Checking
When you configure OCSP certificate revocation checking, View sends a verification request to an OCSP
Responder to determine the revocation status of a smart card user certificate.
Prerequisites
Familiarize yourself with the
"Smart Card Certificate Revocation Checking Properties,"
Procedure
1 Create or edit the
Server or security server host.
For example:
2 Add the
enableRevocationChecking
locked.properties
a Set
enableRevocationChecking
b Set
enableOCSP
c Set
ocspURL
d Set
ocspSigningCert
3 Restart the View Connection Server service or security server service to make your changes take effect.
VMware, Inc.
file in the SSL gateway configuration folder on the View Connection
locked.properties
install_directory \VMware\VMware View\Server\sslgateway\conf\locked.properties
and
to
true
to the location of the CRL. The value can be a URL or a file path.
locked.properties
file in the SSL gateway configuration folder on the View Connection
locked.properties
install_directory \VMware\VMware View\Server\sslgateway\conf\locked.properties
,
enableOCSP
file.
to
true
to to enable OCSP certificate revocation checking.
true
to the URL of the OCSP Responder.
to the location of the file that contains the OCSP Responder's signing certificate.
properties to the
crlLocation
to enable smart card certificate revocation checking.
file properties for OCSP certificate revocation checking. See
on page 130.
, , and
ocspURL ocspSigningCert
to enable smart card certificate revocation checking.
Chapter 7 Setting Up User Authentication
file.
locked.properties
properties to the
129