Remote Access: SOUTHCOM Virtual Desktop Infrastructure (VDI)

The Virtual Desktop Infrastructure is a new capability for remote access for all SOUTHCOM users. VDI provides remote users with a NIPR desktop experience from anywhere with an internet connection, VMware Horizon Client software and Common Access Card (CAC) from a user’s personal computer. VDI users will have access to existing SOUTHCOM NIPR standard baseline software.

WHAT IS VDI FOR TELEWORK
VDI delivers a desktop experience over the network to user devices, using VMware Horizon Client software, enabling users to access their NIPR desktops from anywhere.
WHAT ARE THE BENEFITS OF VDI?

- No end user equipment maintenance and no monthly login requirements. VPN laptops and other devices are encouraged to be turned-in to the Enterprise Service Desk.

- Secure NIPR access from your personal computer (Windows & Mac) and/or tablet (Microsoft Surface)

- Faster login/access to NIPR desktop than traditional workstation

- Accessible from any location with standard internet connection and token reader

- Suspend and resume desktop user session environment from any location

- Native NIPR desktop user experience (same as HQ)
HOW DOES VDI WORK?
- The SOUTHCOM USANEC/J6 is providing SOUTHCOM personnel with the necessary user guides and instructions to access SOUTHCOM VDI for Telework (see How-to Guides section on the right side of this page)

- Windows and Mac users can access SOUTHCOM VDI from their personal computers.

- Accessing SOUTHCOM VDI requires the following:

- DoD Common Access Card (CAC)

- CAC Reader - Users can pick up a CAC reader at the Enterprise Service Desk

- VMware Horizon Client software
HOW IS VDI DIFFERENT FROM Ohome (Office 365 access from home)
- SOUTHCOM personnel can still use the O365 Home Portal (Ohome) to access web based applications (e.g., Outlook, Teams, PowerPoint, Word, Excel, etc.)

- VDI provides users with access to a SOUTHCOM NIPR desktop and all standard baseline applications - to include O365.

- VDI will revolutionize the user experience through added benefits such as download capability (Outlook & Teams) and the ability to curate, modify, disseminate CUI data/documents without concern of spillage or violation of SOUTHCOM policy while teleworking.
ACCESSING VDI FROM A PERSONAL COMPUTER
Remote Access

SOUTHCOM users can access their NIPR Virtual Desktop (VDI) (same as HQ NIPR) using any computer (Windows or Mac) from any location with a commercial internet connection via the Horizon Client and a Department of Defense Common Access Card (CAC) and a CAC Reader.

Pick up a CAC Reader at the SOUTHCOM Enterprise Service Desk located in the HQ Building first floor, room 1519.

Security Limitations

Downloading and uploading files, including email attachments, from your Virtual Desktop Environment to your personal computer is not authorized.

O365 Web Apps

As an alternative to VDI, you can use OHOME to gain remote access to the O365 family of applications.
1. - Using Google Chrome or Microsoft Edge, navigate to: https://portal.apps.mil/
2. - At the Microsoft Sign in page, enter your @mail.mil email address.
3. - Sign in using your CAC.
4. - Available apps will be listed on the left-hand side of the screen.
5. - For additional applications, select the square All apps icon at the bottom of the list. Access to additional apps via OHOME is dependent on your individual above baseline licenses.
Initial Setup
1. - Connect your CAC Reader to your computer.
2. - Insert your CAC in the CAC Reader.
3. - If needed, install DoD Root Certificates:
  1. Windows
    1. - Navigate to DoD Cyber Exchange PKI/PKE Document Library: https://public.cyber.mil/pki-pke-document-library/
    2. - Above the list of installers, search for: InstallRoot
    3. - From the results returned, click InstallRoot x.x NIPR Non-Administrator 32-bit Windows.
    4. - Once downloaded run the installer. the installer will guide you through the process of adding DoD Root certificated to your computer.
    5. - Restart your computer.
    6. - Launch VMWare Horizon Client.
    7. - Authenticate to vdi.ent.southcom.mil. You should not receive an error regarding certificates.
  2. Mac
    1. - Download the PKCS#7 Certificate Bundle directly or:
      
      - Navigate to: PKI/PKE Document Library - DoD Cyber Exchange
      
      - Search for: PKCS
      
      - Download the latest PKI Bundle.
    2. - Once the download is complete, extract the zip file.
    3. - Open Launchpad.
    4. - Search for: Keychain Access
    5. - Open Keychain Access and authenticate with your Apple credentials.
    6. - Select the Login keychain.
    7. - Open the Certificates tab.
    8. - Go back to your downloads and open each of the Certificate Bundles (.p7b) and the Printable Encoded Archive (.pem).
    9. - Once all of the certificates have been added to your keychain, you will have certificates (DoD Rot CA 3/4/5/6) that are labeled Not Trusted.
      
      - NOTE: If you are missing any of the above certificates, download the needed certificate individually from DoD PKI Management.
    10. - Open each of the untrusted certificates.
    11. - Expand the Trust drop-down in each of the certificates.
    12. - In the When using this certificate drown-down, select: Always Trust
    13. - Exit out of the certificate to save your trust settings.
      
      - NOTE: You may need to authenticate with your apple credentials.
4. - On the U.S. GOVERNMENT NOTICE AND CONSENT popup, select OK.
5. - Follow the steps located in the dropdown related to your personal computer's operating system.
6. - Enter the following URL into your web browser: https://servicenow.ent.southcom.mil/sp
7. - If prompted due to security alert, select Advanced and Proceed anyway.
8. - Select your Authentication Certificate.
9. - Once signed into the Service Portal, scroll down and select Knowledge Articles.
10. - In the Search field, input: Personal Computer
11. - Select VDI: Accessing VDI from Personal Computer
12. - Follow the Knowledge article or continue to the following steps.
Do you need a Horizon Client?
- If no, continue to step 1
  - - If yes:
    - - Open Google Chrome or Microsoft Edge.
    - - Navigate to: Download Omnissa Horizon Clients.
    - - Under the Product Downloads tab, locate your personal computer's operating system and click GO TO DOWNLOADS to the right.
    - - In the Download Product screen, click DOWNLOAD NOW.
    - - Continue to Step 1
Step 1
- - Open the Horizon Client.
  - - NOTE: If you have an older version, the icon may be green and say VMWare Horizon Client.
Step 2
- - Have you already added a connection to SOUTHCOM VDI?
- - If yes:
  - - Click vdi.ent.southcom.mil
  - - Continue to step 3
- - If no:
  - - Click + Add Server
  - - In the Name of the Connection Server field, input: vdi.ent.southcom.mil
  - - Click Connect.
  - - Continue to Step 3
Step 3
- - Select your Authentication certificate.
  - - NOTE: If no certificates appear, ensure you have inserted your CAC into the card reader.
Step 4
- - Enter your CAC PIN.
Step 5
- - Select Login.
- - NOTE: If you receive the following error: (ERROR: The certificate authority is invalid or incorrect), follow the steps below
  1. - In Horizon Client, select the Settings button.
  2. - Open the Security tab.
  3. - In the Certificate checking mode dropdown menu, select Do not verify server identity certificates.
Step 6
- - Select Accept in the popup banner.
Step 7
- Click the Desktop to launch
Step 8
- Once the desktop loads, click Sign-in options to sign in with your CAC.
  - - NOTE: It may take a moment to display.
Step 9
- - Select your CAC certificate.
- - Enter your CAC PIN.
- - Press Enter or click the right arrow.
Questions?

Contact the SOUTHCOM Enterprise Service Desk

Comm (305) 437-1234

DSN (305) 567-1234

*Hours: M-F 0600-1800 ET
ACCESSING OHOME
1. - Using Google Chrome or Microsoft Edge, navigate to https://portal.apps.mil/
2. - At the Microsoft Sign in page, enter you @mail.mil email address.
3. - Sign in using your CAC.
4. - Available apps will be listed on the left-hand side of the screen:
  1. - Word
  2. - Excel
  3. - PowerPoint
  4. - Outlook
  5. - OneDrive
  6. - OneNote
  7. - SharePoint
  8. - Teams
    1. - NOTE: For additional apps, click the square All apps icon at the bottom of the list of available apps. Access to additional apps via oHome is dependent on your individual above baseline licenses.