xenapp_xendesktop_7.6 of the actual combat chapter: Storefront Configuration

Source: Internet
Author: User
Tags create domain ssl certificate

1.  StoreFrontServer certificate Request

We will request a Web server certificate for storefront, apply this certificate to the storefront IIS site, and bind IIS port 443 to this certificate so that we can safely access the storefront site from the intranet. It is also ready for follow-up integration with NetScaler.

1.1 At the beginning of this chapter we need to apply for an SSL certificate, then you can choose either by on-premises CA server or to a public network certification authority to apply, the main differences are as follows:

    • On-Premises CA: The 365*24 service is not guaranteed, the client does not trust the internal CA by default, and non-domain clients must manually import the root certificate.

    • Public network Purchase Certificate: To ensure that the 365*24 service, the client default trust this certification authority, whether it is a workgroup or domain-added computers do not have to manually import certificates.

Note: This environment uses an internal active Dicrectory certificate, and the deployment and configuration of internal Certificate Services is relatively simple, so refer to the previous blog post: http://stephen1991.blog.51cto.com/8959108/1668863

1.2 Log in to storefront desktop using Ctxadmin (storefront installed on server CTXDDC01 in this environment), click "Tools" to open "IIS Manager"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRcaKRTupFAAOoaWyrG68833.jpg "title=" 1.png " alt= "Wkiom1wrcakrtupfaaooawyrg68833.jpg"/>

1.3 Find and select "CTXDDC01" on the left, and in the middle pane, locate and double-click server Certificate

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRca_Cm20sAATolNLbzUE750.jpg "title=" 2.png " alt= "Wkiom1wrca_cm20saatolnlbzue750.jpg"/>

1.4 Click Create domain Certificate in the right pane (Use this wizard to request a certificate make sure it is a domain member and that the login account must have domain administrator privileges, otherwise please use the Create Certificate Request Wizard to apply manually)

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc3zTPOzJAANCtbs8caE906.jpg "title=" 3.png " alt= "Wkiol1wrc3ztpozjaanctbs8cae906.jpg"/>

1.5 Enter the following information in the dialog box that pops up: the common name (CTXDDC01.huangjh.com) must be filled in correctly and the next

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRccSDT9TNAAGuxGl_Tuc934.jpg "title=" 4.png " alt= "Wkiom1wrccsdt9tnaaguxgl_tuc934.jpg"/>

1.6 Click "Select" to specify the appropriate authority, enter a friendly name, click "Done"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc4-wRRllAAG1ZIY9PDo918.jpg "title=" 5.png " alt= "Wkiol1wrc4-wrrllaag1ziy9pdo918.jpg"/>

1.7 After the certificate request is successful, the following:

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRcdfxfXFYAAMkvtbqsj0854.jpg "title=" 6.png " alt= "Wkiom1wrcdfxfxfyaamkvtbqsj0854.jpg"/>

2.  bindingSslCertificate

2.1 Click "Default Web Site"-"bindings"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRc6XAytUCAATgW4wRDdY757.jpg "title=" 7.png " alt= "Wkiol1wrc6xaytucaatgw4wrddy757.jpg"/>

2.2 Click "Add"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc67Qex42AAD3lT8szqo355.jpg "title=" 8.png " alt= "Wkiol1wrc67qex42aad3lt8szqo355.jpg"/>

2.3 Select the type "https" and the SSL Certificate "CTXDDC01.huangjh.com" and click "OK"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRcfTjnEe7AAENu5NGz7c868.jpg "title=" 9.png " alt= "Wkiom1wrcftjnee7aaenu5ngz7c868.jpg"/>

2.4 Click "Close"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRc7_SGlfKAAEPxzQnYPs571.jpg "title=" 10.png "alt=" Wkiol1wrc7_sglfkaaepxzqnyps571.jpg "/>

2.5 Open Citrix StoreFront Studio, click on the server group, then right click on "Change Base URL"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRcgjTQ6JHAAIhTl4POVU431.jpg "title=" 11.png "alt=" Wkiom1wrcgjtq6jhaaihtl4povu431.jpg "/>

2.6 Enter in the base URL https://CTXDDC01.huangjh.com

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc9PT7_ScAADnCTh-G_0326.jpg "title=" 12.png "alt=" Wkiol1wrc9pt7_scaadncth-g_0326.jpg "/>

2.7 After modification, the following

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRchrjLV6uAAIWxjveNfU972.jpg "title=" 13.png "alt=" Wkiom1wrchrjlv6uaaiwxjvenfu972.jpg "/>

3.  Simplified Login name(Configure trusted domains)

3.1 Default is required to enter the "domain \ User" or "[email protected]" format to login

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/15/wKioL1WRc-2y438yAAIFyWUFHQQ787.jpg "title=" 14.png "alt=" Wkiol1wrc-2y438yaaifywufhqq787.jpg "/>

3.2 Open Citrix StoreFront, click "Authentication"-"Configure trusted Domains"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRcjmCR8CFAAM6XSE2I-E592.jpg "title=" 15.png "alt=" Wkiom1wrcjmcr8cfaam6xse2i-e592.jpg "/>

3.3 Select "Trusted Domains only" and click "Add"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRdAejql2SAAEC_6tdr7Q909.jpg "title=" 16.png "alt=" Wkiol1wrdaejql2saaec_6tdr7q909.jpg "/>

3.4 Enter the domain name "huangjh.com" and click "OK"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/18/wKiom1WRck6zifi1AAEz4VH5Pm0056.jpg "title=" 17.png "alt=" Wkiom1wrck6zifi1aaez4vh5pm0056.jpg "/>

3.5 Click "OK"

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/15/wKioL1WRdB2Q1OHkAAEyFRocm08288.jpg "title=" 18.png "alt=" Wkiol1wrdb2q1ohkaaeyfrocm08288.jpg "/>

4.  Functional Verification

4.1 Open IE browser in the Address bar, enter Https://CTXDDC01.huangjh.com/Citrix/Storeweb , make sure no certificate prompt error, enter user name password, click "Sign In" (the workgroup computer needs to manually import the root certificate, otherwise the certificate error will be prompted)

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/18/wKiom1WRcm_AChZSAAKqbLdfn1s430.jpg "title=" 19.png "alt=" Wkiom1wrcm_achzsaakqbldfn1s430.jpg "/>

4.2 After landing the virtual desktop can be used normally

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6F/18/wKiom1WRconz0BDJAAKifWI3ynY189.jpg "title=" 20.png "alt=" Wkiom1wrconz0bdjaakifwi3yny189.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/6F/15/wKioL1WRdGeSUKWgAAPEpQ_cpRs439.jpg "title=" 21.png "alt=" Wkiol1wrdgesukwgaapepq_cprs439.jpg "/>

The above is storefront the entire configuration process, thank you for your support and attention.




This article is from the "Bright Future" blog, make sure to keep this source http://stephen1991.blog.51cto.com/8959108/1669205

xenapp_xendesktop_7.6 of the actual combat chapter: Storefront Configuration

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.