Home > Blogs > Horizon Tech Blog


Enabling SSH in Horizon Workspace Virtual Appliances

Are you a fan of SSH vs. virtual console access? I am. I much prefer to access a Linux/Unix vApp via SSH than via the remote console as this allows me to use Terminal on my Mac vs. opening a remote session to a virtual Windows system to then run the vSphere Infrastructure Client (VIC). It’s a personal preference, I admit. But enabling SSH does allow for direct SCP access as well.

Here’s how to enable SSH for the Horizon vApps.

Background:

I should note, SSH is actually already enabled but root login via SSH is not. So technically we are not enabling SSH but rather just enabling root login via SSH.

How to enable SSH root login on the Horizon Workspace Virtual Appliances:

  1. There’s no way around it – you need to login to a Windows system to launch either the vSphere Infrastructure Client (VIC) or the vSphere Web Client in order to open the virtual console of each of the virtual appliances within the Horizon Workspace vApp.
  2. Select LOGIN from the console Window and authenticate with the user “root” and the password you setup when installing the Horizon Workspace vApp.
  3. Once logged in, we need to edit the SSHD_CONFIG file. Type in the below command to edit the file with VI.
  4. vi /etc/ssh/sshd_config

  5. The above command will open the SSHD_CONFIG file within VI and allow you to edit. To enable “Insert Mode” editing within VI, press “I“.
  6. Scroll down to Line 41 (down arrow). This should be the PermitRootLogin no line.
  7. Change PermitRootLogin no to PermitRootLogin yes
  8. Enable SSH in SSHD CONFIG

  9. Press the “ESC” key to exit the “Insert Mode” editing.
  10. Press “:” (colon) then “x” to save then exit.
  11. You now need to restart SSH in order for changes to take affect. Type the below command to restart SSH.
  12. /etc/rc.d/sshd restart

Conclusion and Recommendations:

You now have SSH and SCP enabled for the virtual appliance! Don’t forget to do this to the other virtual appliances within the Horizon Workspace vApp. It may also be wise to reverse these settings when done using SSH and SCP on the virtual appliances as well as ensuring strong passwords and security settings. To undo the above procedure, just change PermitRootLogin yes back to PermitRootLogin no and restart SSH.

This entry was posted in General and Misc, Horizon Workspace, Troubleshooting and tagged , on by .
Dean Flaming

About Dean Flaming

Dean is currently an EUC Architect and member of the VMware End User Computing Enablement and Lighthouse Support teams, working to develop communications and IP around VMware End User Computing products and solutions as well as support many various Lighthouse accounts with their own EUC practices. Prior to this, from 2008 through 2012 Dean was one of VMware's End User Computing Specialists. Throughout his time at VMware, Dean has also written and published various articles, videos, and podcasts regarding VMware's EUC Solutions.