VMware Unified Access Gateway – Configuration

Release date: May 12th 2019

Welcome to my VMware Unified Access Gateway series. This topic will cover the configuration of the VMware UAG. As this UAG will be used for VMware Horizon, the settings made will be Horizon-settings mostly. The tasks I will perform in this session are:

  • Verify DNS registration
  • Disable PCOIP and Blast Gateway settings in Horizon administrator
  • Configure locked.properties on connection servers
  • First time login and password change
  • Set UAG Name
  • Verify network settings in UAG
  • Verify Horizon settings in UAG
  • Register UAG in Horizon Administrator
  • Test logging in externally as testuser

 

Verify DNS registration

I log into my DNS-server and verify that I have a DNS-pointer to my UAG

UAG_Configure-01

 

Disable PCOIP and Blast Gateway settings in Horizon administrator

I log into Horizon Administrator and verify Connection Server settings on both connection servers

UAG_Configure-02.PNG

 

Configure locked.properties on connection servers

As I will be using multiple UAG’s with my connection-servers, I will disable the checkOrigin-parameter, as described by VMware here: Origin Checking

UAG_Configure-03

 

First time login and password change

The first time I log in I will be asked to change the password I used during deployment: “PASSWORD”

UAG_Configure-04

UAG_Configure-05

UAG_Configure-06

Once the password is changed, I select Configure Manually

UAG_Configure-07

 

Set UAG Name

The first thing I want to configure is the UAG Name, this is done withing System Configuration

UAG_Configure-08

UAG_Configure-09

 

Verify network settings in UAG

Next I verify the network settings I configured in my ini-file

UAG_Configure-10

 

Verify Horizon settings in UAG

If I click show on the Edge Service Settings, I can verify my Horizon Settings

UAG_Configure-11

UAG_Configure-12

I will add /downloads to the proxy-pattern in order to be able to download the Horizon client directly from my connection-servers.

Proxy Pattern: (/|/view-client(.*)|/portal(.*)|/appblast(.*)|/downloads(.*))

UAG_Configure-13

 

Register UAG in Horizon Administrator

I will register this UAG as a gateway in Horizon. In the Servers-section under View Configuration, I add this UAG under Gateways. This will give me the opportunity to monitor connections done through the UAG.

UAG_Configure-16

UAG_Configure-17

 

Once the UAG is connected and communcation established, it will turn green and I can verify the gateway details

UAG_Configure-18

UAG_Configure-19

 

Test logging in externally as testuser

Finally, I will test my UAG by logging on from outside my lab. As I don’t have any certificates configured yet, there will be an error on the Horizon web-page

UAG_Configure-20.PNG

 

Now that my primary UAG is configured, I can set up High Availability, covered here: VMware Unified Access Gateway – High Availability

 

VMware Unified Access Gateway Documentation

VMware Unified Access Gateway

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.