Application Virtualization server in “Secure Mode”. Essentially, “Secure Mode” is enabling the Transport Layer Security (TLS) feature so clients connecting to the AppVirt Servers do so in a “secure” manner. We’ve made some changes in the 4.5 release as we’ve ripped out our old TLS implementation and are now using Microsoft’s SChannel. This means you can use standard X.509 V3 certificates!!!!
Certificate provisioning is a good lead in on discussing the prerequisites which need to occur before setting up an Application Virtualization server in “Secure Mode”. Those of you familiar with Public Key Infrastructure (PKI) understand the need for process around certificate provisioning. I’m not going to get into the nuances of PKI deployments, but rather discuss the Application Virtualization Server PKI requirements.
In the 4.5 release, we support Server authentication only (not mutual auth). This means when the client connects to the AppVirt Server, the server must authenticate itself to the client or the connection will fail. The following certificate attributes are evaluated by the client during the server authentication phase. You should also use the attributes below when working with your PKI team to let them know[…]
SoftGrid, MAV, Virtualization, Virtual Server, Tips and Tricks, Guide