1. StoreFrontServer certificate Request
We will request a Web server certificate for storefront, apply this certificate to the storefront IIS site, and bind IIS port 443 to this certificate so that we can safely access the storefront site from the intranet. It is also ready for follow-up integration with NetScaler.
1.1 At the beginning of this chapter we need to apply for an SSL certificate, then you can choose either by on-premises CA server or to a public network certification authority to apply, the main differences are as follows:
On-Premises CA: The 365*24 service is not guaranteed, the client does not trust the internal CA by default, and non-domain clients must manually import the root certificate.
Public network Purchase Certificate: To ensure that the 365*24 service, the client default trust this certification authority, whether it is a workgroup or domain-added computers do not have to manually import certificates.
Note: This environment uses an internal active Dicrectory certificate, and the deployment and configuration of internal Certificate Services is relatively simple, so refer to the previous blog post: http://stephen1991.blog.51cto.com/8959108/1668863
1.2 Log in to storefront desktop using Ctxadmin (storefront installed on server CTXDDC01 in this environment), click "Tools" to open "IIS Manager"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRcaKRTupFAAOoaWyrG68833.jpg "title=" 1.png " alt= "Wkiom1wrcakrtupfaaooawyrg68833.jpg"/>
1.3 Find and select "CTXDDC01" on the left, and in the middle pane, locate and double-click server Certificate
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRca_Cm20sAATolNLbzUE750.jpg "title=" 2.png " alt= "Wkiom1wrca_cm20saatolnlbzue750.jpg"/>
1.4 Click Create domain Certificate in the right pane (Use this wizard to request a certificate make sure it is a domain member and that the login account must have domain administrator privileges, otherwise please use the Create Certificate Request Wizard to apply manually)
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc3zTPOzJAANCtbs8caE906.jpg "title=" 3.png " alt= "Wkiol1wrc3ztpozjaanctbs8cae906.jpg"/>
1.5 Enter the following information in the dialog box that pops up: the common name (CTXDDC01.huangjh.com) must be filled in correctly and the next
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRccSDT9TNAAGuxGl_Tuc934.jpg "title=" 4.png " alt= "Wkiom1wrccsdt9tnaaguxgl_tuc934.jpg"/>
1.6 Click "Select" to specify the appropriate authority, enter a friendly name, click "Done"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc4-wRRllAAG1ZIY9PDo918.jpg "title=" 5.png " alt= "Wkiol1wrc4-wrrllaag1ziy9pdo918.jpg"/>
1.7 After the certificate request is successful, the following:
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRcdfxfXFYAAMkvtbqsj0854.jpg "title=" 6.png " alt= "Wkiom1wrcdfxfxfyaamkvtbqsj0854.jpg"/>
2. bindingSslCertificate
2.1 Click "Default Web Site"-"bindings"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRc6XAytUCAATgW4wRDdY757.jpg "title=" 7.png " alt= "Wkiol1wrc6xaytucaatgw4wrddy757.jpg"/>
2.2 Click "Add"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc67Qex42AAD3lT8szqo355.jpg "title=" 8.png " alt= "Wkiol1wrc67qex42aad3lt8szqo355.jpg"/>
2.3 Select the type "https" and the SSL Certificate "CTXDDC01.huangjh.com" and click "OK"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRcfTjnEe7AAENu5NGz7c868.jpg "title=" 9.png " alt= "Wkiom1wrcftjnee7aaenu5ngz7c868.jpg"/>
2.4 Click "Close"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc7_SGlfKAAEPxzQnYPs571.jpg "title=" 10.png "alt=" Wkiol1wrc7_sglfkaaepxzqnyps571.jpg "/>
2.5 Open Citrix StoreFront Studio, click on the server group, then right click on "Change Base URL"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRcgjTQ6JHAAIhTl4POVU431.jpg "title=" 11.png "alt=" Wkiom1wrcgjtq6jhaaihtl4povu431.jpg "/>
2.6 Enter in the base URL https://CTXDDC01.huangjh.com
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc9PT7_ScAADnCTh-G_0326.jpg "title=" 12.png "alt=" Wkiol1wrc9pt7_scaadncth-g_0326.jpg "/>
2.7 After modification, the following
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRchrjLV6uAAIWxjveNfU972.jpg "title=" 13.png "alt=" Wkiom1wrchrjlv6uaaiwxjvenfu972.jpg "/>
3. Simplified Login name(Configure trusted domains)
3.1 Default is required to enter the "domain \ User" or "[email protected]" format to login
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc-2y438yAAIFyWUFHQQ787.jpg "title=" 14.png "alt=" Wkiol1wrc-2y438yaaifywufhqq787.jpg "/>
3.2 Open Citrix StoreFront, click "Authentication"-"Configure trusted Domains"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRcjmCR8CFAAM6XSE2I-E592.jpg "title=" 15.png "alt=" Wkiom1wrcjmcr8cfaam6xse2i-e592.jpg "/>
3.3 Select "Trusted Domains only" and click "Add"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRdAejql2SAAEC_6tdr7Q909.jpg "title=" 16.png "alt=" Wkiol1wrdaejql2saaec_6tdr7q909.jpg "/>
3.4 Enter the domain name "huangjh.com" and click "OK"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRck6zifi1AAEz4VH5Pm0056.jpg "title=" 17.png "alt=" Wkiom1wrck6zifi1aaez4vh5pm0056.jpg "/>
3.5 Click "OK"
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRdB2Q1OHkAAEyFRocm08288.jpg "title=" 18.png "alt=" Wkiol1wrdb2q1ohkaaeyfrocm08288.jpg "/>
4. Functional Verification
4.1 Open IE browser in the Address bar, enter Https://CTXDDC01.huangjh.com/Citrix/Storeweb , make sure no certificate prompt error, enter user name password, click "Sign In" (the workgroup computer needs to manually import the root certificate, otherwise the certificate error will be prompted)
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRcm_AChZSAAKqbLdfn1s430.jpg "title=" 19.png "alt=" Wkiom1wrcm_achzsaakqbldfn1s430.jpg "/>
4.2 After landing the virtual desktop can be used normally
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRconz0BDJAAKifWI3ynY189.jpg "title=" 20.png "alt=" Wkiom1wrconz0bdjaakifwi3yny189.jpg "/>
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRdGeSUKWgAAPEpQ_cpRs439.jpg "title=" 21.png "alt=" Wkiol1wrdgesukwgaapepq_cprs439.jpg "/>
The above is storefront the entire configuration process, thank you for your support and attention.
This article is from the "Bright Future" blog, make sure to keep this source http://stephen1991.blog.51cto.com/8959108/1669205
xenapp_xendesktop_7.6 of the actual combat chapter: Storefront Configuration