Arch Linux

Cheeto

Member

Registered: 2022-09-11

Posts: 64

What does this part mean in the arch wiki?

https://wiki.archlinux.org/title/Common … zon_Client

To integrate CAC authentication with the VMware Horizon Client, create the directory /usr/lib/vmware/view/pkcs11 and link the pkcs11 library:

# ln -s /usr/lib64/pkcs11/opensc-pkcs11.so /usr/lib/vmware/view/pkcs11/libopenscpkcs11.so

Not literally "what does it mean", but rather "what steps is it it asking me to perform"? Kinda new, thanks for understanding.

teckk

Member

Registered: 2013-02-21

Posts: 586

Re: What does this part mean in the arch wiki?

It tells you to make a directory.

mkdir /usr/lib/vmware/view/pkcs11

man mkdir

And then put a symlink in it.

ln -s /usr/lib64/pkcs11/opensc-pkcs11.so /usr/lib/vmware/view/pkcs11/libopenscpkcs11.so

man ln

After you install the AUR software, then enable it.

What part are you having problems with?

Cheeto

Member

Registered: 2022-09-11

Posts: 64

Re: What does this part mean in the arch wiki?

What part are you having problems with?

Thanks. I thought it as referencing a comment (the hashtag), and it was blowing my mind why it was written so unclearly. Now I understand the hashtag is meant to be replaced by `sudo`, and it makes a lot more sense.

There's more though.

The guide is pretty damn outstanding considering nothing else on the internet exists to get CAC software AND VMware Horizon working on non-ubuntu distros. HOWEVER:

1. The certs section https://wiki.archlinux.org/title/Common … rtificates is incorrect. It lists too many certs. The files (I don't even know if they're all certs) that are actually in that zip are:
- Certificates_PKCS7_v5.9_DoD.der.p7b
- Certificates_PKCS7_v5.9_DoD.pem.p7b
- Certificates_PKCS7_v5.9_DoD.sha256
- Certificates_PKCS7_v5.9_DoD_DoD_Root_CA_3.der.p7b
- Certificates_PKCS7_v5.9_DoD_DoD_Root_CA_4.der.p7b
- Certificates_PKCS7_v5.9_DoD_DoD_Root_CA_5.der.p7b
- DoD_PKE_PEM.pem

2. Regarding the step this thread is about, the steps that I actually had to perform are:
- copy the file /usr/lib/pkcs11/opensc-pkcs11.so to /usr/lib/vmware/view/pkcs11/ and rename it there to libopenscpkcs11.so
- in vmware horizon, go to file > preferences > enable "Do not verify server identity certificates."
- THEN run the command

ln -s /usr/lib64/pkcs11/opensc-pkcs11.so /usr/lib/vmware/view/pkcs11/libopenscpkcs11.so

Last edited by Cheeto (2022-12-29 22:37:58)