While Horizon View does come with self signed certificates but it is always best, in a production environment, to your own SSL certificates.

I connect to my lab remotely using, either my laptop, or other mobile device and like to know that my connection is secure.

If you don’t want to setup your own cert server Lets Encrypt is a public CA and does offer certificates (wild card certs too) for free. If you do choose to use them please consider donating. They are an opensource and free setup and could use your help.

Installing a root CA.

I used a windows 2016 server for this deployment.

1. In the Server Manager window click on Add roles and features.
   
2. Select Role-Based or feature-base installation and click Next.
   
3. Select the local server and click Next.
   
4. Select Active Directory Certificate Services, and click Next.
   
5. Check Include management tools (if applicable). Click Add Features.
   
6. Click Next.
   
7. Click Next.
   
8. Click Next.
   
9. Click Next.
   
10. Select Certificate Authority. Click Next.
    
11. Click Install.
    
12. Once the install is complete Click Close.
13. Once the Install is finished we need to complete the post install tasks. Navigate to Server Manager and click on the alert icon. Click on the post deployment task that needs to be completed.
    
14. If you need to change the credentials do so here. I just used the creds I was logged in with. Click Next.
    
15. Select Certification Authority and click Next.
    
16. Select Enterprise CA and click Next. You can select Standalone CA if that’s what you need. The options might be slightly different.
    
17. Select Root CA and click Next.
    
18. Select Create a new private key and click Next.
    
19. Select the following:
    1. Cryptographic provider – RSA#Microsoft Software Key Provider
    2. Key length – 2048
    3. Algorithm – SHA256
    4. Click – Next.
       
20. Leave the defaults and click Next.
    
21. Select the validity period of your certificate. (I chose to leave it at 5 years. In a prod environment you might want that to be less). Click Next.
    
22. Leave the defaults and click Next.
23. In the final window check your settings and click Install.

And that’s it, we now have a working root CA!