How to upgrade Horizon View 6.x to 7 and best practices

This guide still applies with Horizon 7.9!

Hi to all fellow VDI peeps.

This week VMware released a load of new EUC updates. Will put up the upgrade guides for the products below and starting with Horizon View.

  • Horizon View 7
  • AppVolumes 3.0
  • UEM 9

Here I will show you how to upgrade your current Horizon View 6.X to 7.

Best practices:
The upgrade order is as follows:
1. Composer Server.
2. Connection Servers.
3. Security Servers.

Best is also to stop current running pools and provisioning just in case.
Create a REAL Backup or if you don’t have Veeam or something else, a snapshot.
While you’re at it, update your machines with the Windows updates.
Know what you are doing. Obvious 🙂

Log in to your Composer Servers and start the installer.

Screen Shot 2016-03-26 at 08.55.21
Click next.
Screen Shot 2016-03-26 at 08.56.37
Accept the agreement and click next.
Screen Shot 2016-03-26 at 08.57.58

Select your installation directory and click next.
Screen Shot 2016-03-26 at 08.58.10
Enter your database information and click next.
Screen Shot 2016-03-26 at 10.18.37
On this stage, you choose to use an existing certificate. If you did not… read below how to fix this.

Screen Shot 2016-03-26 at 09.00.35

Review your setup and click install.
Screen Shot 2016-03-26 at 09.01.13
And you’re done! click finish and reboot.

Login to View Administrator and check if it’s up.
Screen Shot 2016-03-26 at 10.57.37

Now hop over to your Connection Servers.
Stop the VMware Horizon View Connection Server process in services before you start.

Screen Shot 2016-03-26 at 09.06.33
Click next.
Screen Shot 2016-03-26 at 09.07.44

Again accept the agreement or don’t 🙂 and click next or cancel. For now, choose next.

Screen Shot 2016-03-26 at 09.07.53
Click install.

Screen Shot 2016-03-26 at 09.09.17
The upgrade will now start, sit back and wait.
Screen Shot 2016-03-26 at 09.13.03
And you’re done, click finish.

Now hop over to your Security Servers.

This is also straight forward, in my lab I do not run a Security Server but the process of upgrading is the same!

Start installer, Agree, Next, Next and Finish!
Log in to your View Administrator page now and check if all is ok. In my case, it broke.

Issues that may happen after upgrade:

If your View Administrator page is not loading or getting failed to connect to the connection server error then this is probably due to this:
Screen Shot 2016-03-26 at 09.28.21

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2144768

To resolve this issue, perform one of these options:

Use either localhost or the URL from the Secure Tunnel URL field on the connection server configuration.
Turn off Origin checking with these steps:

    1. For each connection server create a text file named locked.properties in C:\Program Files\VMware\VMware View\Server\sslgateway\conf.
    2. Open the locked.properties file in a plain text editor.
    3. Add this line:checkOrigin=false
    4. Save and close the file.
    5. Restart the VMware Horizon View Connection Server service.

Get this error below?

BROKER_SVI_CERT_INVALID
Certificate is invalid for Composer at address https://yourcomposerserver:18443

This can be fixed by selecting the correct certificate, where during the upgrade you probably have chosen to create a new certificate instead of using existing:

  • Stop the Composer service.
  • Open CMD and change directory to the Composer installation directory.
  • sviconfig -operation=ReplaceCertificate -delete=false
  • Select the correct certificate by choosing the number and enter
  • Start the Composer service.

Get the error: 

“The vCenter server certificate is invalid, make sure you have a CA signed certificate or accept the self-signed in the dashboard”.

TLSv1 has to be enabled on the connection server and if you have one, the composer. Here we just have a connection server so let’s dive into ADSI Edit and change it. This Fix is provided by Rob Beekmans!

From the VMware installation guide of VMware Horizon View 7:

  1. In the console tree, select Connect to.
  2. In the Select or type a Distinguished Name or Naming Context text box, type the distinguished name DC=vdi, DC=vmware, DC=int.
  3. In the Computer pane, select or type localhost:389 or the fully qualified domain name (FQDN) of the View Connection Server host followed by port 389.For example: localhost:389 or mycomputer.example.com:389
  4. Expand the ADSI Edit tree, expand OU=Properties, select OU=Global, and double-click CN=Commonin the right pane.
  5. In the Properties dialog box, edit the pae-ClientSSLSecureProtocols attribute to add the following value
                \LIST:TLSv1.2,TLSv1.1,TLSv1
    

    Be sure to include the backslash at the beginning of the line.

  6. Click OK.
  7. Restart the VMware Connection server service

Now update all your templates with the new agent and update your pools.

Be aware that the Connection Server for View 7 has higher ram needs. If you run this puppy on 4GB ram performance will be degraded.
BROKER_SMALL_MEMORY
Broker vDrone-VCS.vdrone.local has been detected as being configured with a small amount of physical memory. Please refer to the View Installation Guide.

“Failed to connect to the Connection Server” when loading HTML access with External VIP, but only from Chrome.

Solution: Allow HTML Access Through a Load Balancer

Create or edit the locked.properties file in the SSL gateway configuration folder on the View Connection Server or security server host.
For example: install_directory\VMware\VMware View\Server\sslgateway\conf\locked.properties
Add the portalHost property and set it to the address of the gateway.
For example, if https://view-gateway.example.com is the address that browsers use to access View through the gateway, add portalHost=view-gateway.example.com to the locked.properties file. If the View Connection Server instance or security server is behind multiple gateways, you can specify each gateway by adding a number to the portalHost property, for example:
portalHost.1=view-gateway-1.example.com
portalHost.2=view-gateway-2.example.com
You must also specify multiple portalHost properties if a single gateway machine is known by more than one name.
Save the locked.properties file.
Restart the View Connection Server service or security server service to make your changes take effect.

Items to watch out for when you install or upgrade to Horizon 7 version 7.1 from View 5.3 or later.

If you are upgrading from Horizon 6 version 6.2.x to Horizon 7 version 7.1, you already should have taken these configuration steps. Use these notes to review your setup.

1) You must open port 4002 in your back-end firewall to allow security servers to communicate with View Connection Server in the new enhanced message security mode.

If you perform a fresh installation of Horizon 6 version 6.1 or later, enhanced message security mode is enabled by default. If you upgrade to Horizon 6 version 6.1 or later, the pre-existing message security mode is retained. To enable the enhanced mode after an upgrade, you must change the Global Setting in View Administrator.
2) You cannot deploy desktop versions earlier than View Agent 6.1 after enhanced message security mode is enabled.

3) View supports IPv6 as an alternative to IPv4. When you install your View components, select IPv4 unless you have a working IPv6 environment.

A mixed IPv6 and IPv4 environment is not supported. If you inadvertently configure a mixed environment, clients will not be able to connect to View Connection Server, remote desktops, or applications. Only fresh installations are supported in an IPv6 environment.

Not all features that are supported in an IPv4 environment are supported in an IPv6 environment. Read the IPv6 topics in the View Installation guide if you plan to run View in an IPv6 environment.

16 thoughts on “How to upgrade Horizon View 6.x to 7 and best practices

  1. Scared VDI

    After upgrading, I can’t re-enable provisioning or access to any of my pools. I’ve got 2 connection servers, 2 security servers, and a standalone composer server. All have been upgraded to version 7, but I can’t get anything working. I’m getting complaints about self signed certificates that I’ve never seen before the upgrade. Any ideas on how I can get my pools back up?

    Reply
    1. LaurensvanDuijn Post author

      Hi,

      This can be fixed by selecting the correct certificate, during the upgrade you probably chosen to create a new certificate instead of use existing:

      1. Stop the Composer service.
      2. Open CMD and change directory to the Composer installation directory.
      2. sviconfig -operation=ReplaceCertificate -delete=false
      4. Select the correct certificate by choosing the number and enter
      5. Start the Composer service.

      Reply
      1. Scared VDI

        No. I did that. It looks to be related to vCenter certificate, which hasn’t changed from view 6.x.

        Reply
        1. LaurensvanDuijn Post author

          What do the certificate errors look like and where do you get them? any specific errors in the logging on those systems? System Health dashboard all green?

          Reply
          1. Scared VDI

            100% correct. I found that the other day and applied the changes with success. Thanks for updating me still the same! It was a huge pain to track down.

          2. LaurensvanDuijn Post author

            Yeah wasn’t sure what it was with the info given:) glad you got it fixed!

  2. Troy

    Any suggestion for ” The required user doesn’t have the correct Directory Services rights, ensure the user does” etc etc… When attempting to upgrade the connection server?

    The user I ran it with has full admin… So I’m at a loss???

    Reply
    1. LaurensvanDuijn Post author

      Did this user also install the connection server? Is this a local admin or a domain admin?

      Reply
  3. Charles

    Hi I have My home lab with a DC My Vcenter Server 6.0 horizon view 6.0 and my Vshpere is 5.5 can I add and another connection server with horizon view 7.0 instead to do the Upgrade it will work ?

    Please let me know also if you provide support remotely thanks.

    Reply
    1. LaurensvanDuijn Post author

      You can only add a replica server but you probably need to upgrade to 7 first before you can add one on version 7.

      Reply
  4. Jeff

    Updating from 6.0.1 and all the pre-reqs seem to be met. I follow your instructions and right after the AD.ldf steps Java SE crashes and then the install goes into a rolling back. I can get the install to finish by removing the old jre directory but then admin console will not open. I do have a self signed cert but what am I doing wrong here. Tried with different accounts.. local and domain both were in the local administrators group ??

    Reply
  5. atul

    I have a question regards to view upgrade from vmware view version 5.1 to 7.x?
    is it officially supported by vmware?

    Reply
  6. Pingback: Few interesting articles on VMware Horizon - Sept 2019 – VMware, Windows, Virtualization (Servers & Desktops)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.