PCoIP requires a certificate to establish a session. By default, Anyware agents generate a self-signed certificate that secures the PCoIP session. Each component in the PCoIP system can generate these self-signed certificates, which will automatically work together without requiring any configuration.
The agent certificate and signing certificate must be installed on each desktop running a Anyware agent.
To install the agent certificate and signing certificate:
Open the Microsoft Management Console on the agent machine:
Your root CA certificate must be installed in any Anyware client that will be used to connect to the Anyware agent.
This section describes how to replace HP's default certificates with your own custom certificates.
Note: These procedures use OpenSSL
The Anyware Agent chooses a certificate based on the parameters set in the Configure PCoIP Security Certificate Settings GPO variable.
Since Anyware agents automatically generate and use self-signed certificates by default, you only need to configure the Configure PCoIP Security Certificate Settings GPO variable if you are deploying your own custom certificates.
Sometimes, you might encounter the following issues during smart card logon:
When Single Sign-On (SSO) is enabled, smart cards are not displayed in the Device Manager list on the remote agent
GPO template files are automatically imported by the Standard Agent for Windows installer, except on domain controllers. You must manually import the files into the domain controller's Group Policy Editor.
To import the template on a domain controller:
Copy the admx file from
C:\Program Files\Teradici\PCoIP Agent\configuration\policyDefinitions\PCoIP.admx
to
If the Subject Alternative Name in the Smart Card certificate is in the @ format, you must use the Leostream connection Broker version 2023.2.3.4 and Connection Manager version 23.12 or later.
This documentation is intended for administrators who are deploying the Standard Agent for Windows as part of an HP Anyware deployment. It assumes thorough knowledge of conventions and networking concepts, including firewall configuration.
To update the Graphics Agent to a new version, obtain the new installer and run it in place to replace the older version. Your configuration settings will be preserved.
Before you begin, make sure that you have read the Installation Overview topic.
Download and copy the new installer file onto the host machine.
Do one of the following: