1. Select XenApp and XenDesktop, and click on Get Started
  2. Select Storefront at the top of the Setup Wizard Page:

  3. Type in the FQDN and IP address of your Citrix Gateway: (Also add this to your DNS records)

  4. Select the Server certificate you created (in previous chapter) or one you have installed.

  5. Next you will be ask for the details of your Storefront Server:
    You only need to specify FQDN for the server at this point...

     


6. You can check the FQDN of your Storefront server under Stores > Receiver for websites on you Citrix StoreFront GUI.


 

7. Click on Retrieve Stores.

7a) If you are presented by this error message..


Then you will need to enter the web path manually. Again you can get this information from here:


And enter under Receiver for Web Path


8. The Secure Ticket Authority (STA) is an XML web service that exchanges XenApp server information for randomly generated tickets. It is used to control access for a Citrix Secure Gateway server.
Click on Test STA Connectivity.


The STA (Secure Ticket Authority) status should show as should show as up.


Note: If STA status is down, then see trouble shooting section on sub page




9. Next you will be asked for the Authentication server details. This will usually be your domain controller details.



10. Remember to test the connection to your LDAP server



11. Also set the Server Logon Name Attribute as sAMAccountName:



12. Click Continue


And your Citrix Gateway Virtual server should be up and running.



Bind the CA certificate to the Citrix Gateway Virtual Sever

  1. Click on Citrix Gateway and then Citrix Gateway Virtual Sever:



2. Click on the Virtual Server to edit:



This will take you to the virtual server edit screen.


3. From here Locate Certificate



The server certificate is showing but not the CA
Click No CA Certificate.
Click on Add Binding:


4. Click to select CA Certificate:



5. And choose the CA certificate that we installed earlier:  (refer to previus wki guide)



6. And then Click on Bind:



7. With the CA cert now bound to the virtual server, click on Done at the bottom of the edit page.


Pre DualShield Test

Before adding DualShield authentication, methods, lets makesure you are able to access your Xenapps via Citrix Gateway access alone.
Simply launch a browser and type in the FQDN address of the Citrix Gateway server.



Logon using your usual windows username and password.



And there we have it. You can see the Citrix Gateway URL in the address bar, followed by the receiver for web path.

  • No labels