Release date: May 12th 2019
Welcome to my VMware Unified Access Gateway series. This topic will cover the configuration of the VMware UAG. As this UAG will be used for VMware Horizon, the settings made will be Horizon-settings mostly. The tasks I will perform in this session are:
- Verify DNS registration
- Disable PCOIP and Blast Gateway settings in Horizon administrator
- Configure locked.properties on connection servers
- First time login and password change
- Set UAG Name
- Verify network settings in UAG
- Verify Horizon settings in UAG
- Register UAG in Horizon Administrator
- Test logging in externally as testuser
Verify DNS registration
I log into my DNS-server and verify that I have a DNS-pointer to my UAG
Disable PCOIP and Blast Gateway settings in Horizon administrator
I log into Horizon Administrator and verify Connection Server settings on both connection servers
Configure locked.properties on connection servers
As I will be using multiple UAG’s with my connection-servers, I will disable the checkOrigin-parameter, as described by VMware here: Origin Checking
First time login and password change
The first time I log in I will be asked to change the password I used during deployment: “PASSWORD”
Once the password is changed, I select Configure Manually
Set UAG Name
The first thing I want to configure is the UAG Name, this is done withing System Configuration
Verify network settings in UAG
Next I verify the network settings I configured in my ini-file
Verify Horizon settings in UAG
If I click show on the Edge Service Settings, I can verify my Horizon Settings
I will add /downloads to the proxy-pattern in order to be able to download the Horizon client directly from my connection-servers.
Proxy Pattern: (/|/view-client(.*)|/portal(.*)|/appblast(.*)|/downloads(.*))
Register UAG in Horizon Administrator
I will register this UAG as a gateway in Horizon. In the Servers-section under View Configuration, I add this UAG under Gateways. This will give me the opportunity to monitor connections done through the UAG.
Once the UAG is connected and communcation established, it will turn green and I can verify the gateway details
Test logging in externally as testuser
Finally, I will test my UAG by logging on from outside my lab. As I don’t have any certificates configured yet, there will be an error on the Horizon web-page
Now that my primary UAG is configured, I can set up High Availability, covered here: VMware Unified Access Gateway – High Availability
VMware Unified Access Gateway Documentation
Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.
bjosoren's IT-Tech blog 