Server Authentication Certificate

Access the server through SSH with an account with administrative privileges;

Run the Horizon Configuration Utility with the following command:

In the main menu, select 'NGINX':

In the NGINX menu, select 'CSR':

Specify the DNS Name of the Horizon server (by default, the config script takes the Horizon hostname if defined or the local machine hostname otherwise):

The certificate request is generated and available under /etc/nginx/ssl/horizon.csr.new:

Sign the certificate request using your PKI.

Upload the generated server certificate on the Horizon server under /tmp/horizon.pem through SCP;

In the NGINX configuration menu, select 'CRT':

Specify the path /tmp/horizon.pem and validate:

The server certificate is successfully installed:

Upload the server certificate trust chain (the concatenation of the Certificate Authority certificates in PEM format) on the Horizon server under /tmp/server.bundle through SCP;

In the NGINX configuration menu, select 'TC':

Specify the path /tmp/server.bundle and validate:

The server bundle is successfully installed:

Verify the NGINX configuration with the following command:

Restart the NGINX service with the following command: