VMware Horizon Client 3.2 - packaging help

[jhalvorson]

Any hints on how to package VMware Horizon Client version 3.2 so that 1) the server address is set for all users and 2) the USB redirect tool is installed so user's won't see the prompt to "Finish installing VMware Horizon Client".

I believe the first item can be done by editing the /Users/usersname/Library/Preferences/com.vmware.horizon.plist

The second can be done by using Composer and a snapshot after opening the application. I am still testing which of the files are necessary and which can be eliminated.

[bpavlov]

Here are my notes on it. Very happy when I see a thread like this for software I've created documentation on. Makes it quite easy to share :)

Instructions:
These are instructions for VMware Horizon Client
Reference Material: https://www.vmware.com/pdf/horizon-view/horizon-client-mac-document.pdf
https://www.vmware.com/support/viewclients/doc/viewclients_pubs.html
https://my.vmware.com/web/vmware/details?productId=421&downloadGroup=VIEWCLIENTS_MAC_32#product_down...

Requirements:
VMware Horizon Client for Mac installer
https://my.vmware.com/web/vmware/details?productId=421&downloadGroup=VIEWCLIENTS_MAC_32#product_down...

Process:
vmware-view

Packaging/Installation:
Uses Packages to build package and along with the main app also deploy the following files:

Files to copy
/private/etc/cups/thnuclnt.convs
root:_lp 644

/private/etc/cups/thnuclnt.types
root:_lp 644

/usr/libexec/cups/filter/thnucups
root:wheel 755

License:
None

Preferences:
Located in /Library/Preferences/com.vmware.horizon.plist

Set USB Print Services as having been launched which will get rid of prompt:
"Start remote desktop USB and Printing services
To start remote desktop USB and Printing services an Admin password will be required. Please input your password when prompted."

<key>promptedUSBPrintingServicesInstall</key> <true/>

Located in ~/Library/Preferences/com.vmware.horizon.plist

Set the default broker <key>defaultBroker</key> <string>https://server.com:443/broker/xml</string>

Set the default domain to authenticate with <key>https://server.com:443/broker/xmldomain</key> <string>COMPANY</string>

Set USB Print Services as having been launched <key>promptedUSBPrintingServicesInstall</key> <true/>

Set the trusted servers <key>trustedServers</key> <array> <string>https://vmview.company.com:443/broker/xml</string> </array>

Notes:
For details about the types of verification checks performed, see
“Certificate Checking Modes for Horizon
Client,”
on page 28.
You can set the verification mode so that end users cannot change it. Set the "Security Mode" key in
the /Library/Preferences/com.vmware.view.plist (Horizon Client 3.0)
or /Library/Preferences/com.vmware.horizon.plist (Horizon Client 3.1 and later) file on Mac clients to one of the following values:
1
Never connect to untrusted servers

2
Warn before connecting to untrusted servers

3
Do not verify server identity certificates

Here's what my final plist looks like which I converted into a config profile using MCXtoProfile:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>broker-history</key>
    <array>
        <string>https://server.com:443/broker/xml</string>
    </array>
    <key>defaultBroker</key>
    <string>https://server.com:443/broker/xml</string>
    <key>https://server.com:443/broker/xmldomain</key>
    <string>DOMAINNAME</string>
    <key>promptedUSBPrintingServicesInstall</key>
    <true/>
    <key>trustedServers</key>
    <array>
        <string>https://server.com:443/broker/xml</string>
    </array>
</dict>
</plist>

Hope that helps.

[rtrouton]

I have AutoPkg recipes for VMware Horizon Client available from here:

https://github.com/autopkg/rtrouton-recipes/tree/master/VMwareHorizonClient

https://github.com/autopkg/rtrouton-recipes/blob/master/JSS/VMwareHorizonClient.jss.recipe

If you run autopkg search VMware on a Mac with AutoPkg installed, you should see them listed.

[donparfet]

Thanks! very helpful!
I was getting a certificate prompt and discovered adding "certificateVerificationMode" corrected the prompt in our environment. Add into this section of the plist file (curly {} brackets my edits):

<key>broker-history</key> <array> <string>https://server.com:443/broker/xml</string> </array> {<key>certificateVerificationMode</key> <integer>3</integer>} <key>defaultBroker</key> <string>https://server.com:443/broker/xml</string>

[donparfet]

@bpavlov One question:
1. I am setting this up for use in a lab, and we have more than one desktop pool available, and some users have access to more than one. Those users who have access to more than one get a screen with the different pools to choose from. Any suggestions how to set a lab pool to open by default in this scenario? I know I can manually set the default pool after initial install, just trying to figure out how I might include that info in the profile I create or the setting lives somewhere else...