Home » VMware » VCP510-DT » Which two tasks must the View administrator coordinate with the Active Directory administrator and the local Certificate Authority administrator?
A View administrator is preparing to configure an installation for smart card authentication.
Which two tasks must the View administrator coordinate with the Active Directory administrator and the local Certificate Authority administrator?
(Choose two.)
A. adding users to the Remote Users group policy in Active Directory
B. adding a root certificate from the Certificate Authority to the Trusted Root Certification Authorities group policy in Active Directory
C. issuing a root certificate from the Certificate Authority to install on all the client machines that will host the View Client
D. adding user principal names to the Active Directory accounts of smart card users
Correct Answer: BD
Explanation/Reference:
Add UPNs for Smart Card Users:
Because smart card logins rely on user principal names (UPNs), the Active Directory accounts of users that use smart cards to authenticate in View must have a valid UPN.
If the domain a smart card user resides in is different from the domain that your root certificate was issued from, you must set the user’s UPN to the Subject Alternative Name (SAN) contained in the root certificate of the trusted CA. If your root certificate was issued from a server in the smart card user’s current domain, you do not need to modify the user’s UPN.
http://pubs.vmware.com/view-51/index.jsp?topic=%2Fcom.vmware.view.installation.doc%2FGUID-26AA4F12-CE68-4346-9B2F-E502004CCDB7.html
http://henrysluiman.blogspot.com/2011/12/configuring-smartcard-authentication-in.html