VMware Horizon 7 Specialist — Question 14

An administrator has enabled Kerberos Constrained Delegation (KCD) on the SEG v2. If the administrator publishes a profile without a certificate payload and the user enters the password, everything works fine. When the user publishes the same profile with a certificate payload, the system is unable to connect and synchronize emails.
Which two troubleshooting steps need to be taken? (Choose two.)

Answer options

• A. KCD is not supported on SEG v2.
• B. Verify if the service account is a member of the IIS user group on each CAS Exchange server.
• C. Verify that the Workspace UEM Console certificate is uploaded as a client certificate chain.
• D. Verify that port 88 is not blocked between the SEG and the Active Directory domain controller(s).
• E. Verify that the service account is set to the service type OWA.

Correct answer: C, D

Explanation

The correct answer includes C and D because the Workspace UEM Console certificate must be properly uploaded as a client certificate chain to ensure secure communications, and port 88 must be open for Kerberos authentication to function correctly. The other options do not directly address the issue of certificate payload connectivity or are incorrect based on the scenario provided.