Single Sign-on: 4.8 Configuration, Administration and Troubleshooting. Self-paced exercise guide. Services. v1.3

Transcription

1 Single Sign-on: 4.8 Configuration, Administration and Troubleshooting Self-paced exercise guide v1.3 Please note: This lab guide is built upon v.4.8 of the product but all of the exercises apply equally to Single Sign-on v 5.0.

2 Table of Contents Table of Contents... 2 Overview... 3 Exercise 1: Creating an NTFS Network Share Central Store... 7 Exercise 2: Installing and Configuring the Single Sign-On Service... 9 Exercise 3: Installing and Configuring the Single Sign-On Console Exercise 4: Creating a Windows Application Definition Exercise 5: Creating a Web Application Definition Exercise 6: Creating A User Configuration Exercise 7: Installing the Plug-in Software Challenge Labs Appendix A: Solutions to Challenge Exercises Page 2

3 Overview Citrix Single Sign-on is an easy, affordable, all-in-one solution to manage credentials for a wide variety of different types of applications. This solution drastically cuts the cost and effort associated with managing credentials for Windows, Java, Web and Host(Mainframe) applications in any company. It also presents an easy to use front-end which immediately enables users to submit their credentials automatically to the applications they use on a daily basis. In this lab, you will learn how to configure the product and test automated logins. There are also a number of challenge exercises with step by step solutions provided in order to gain troubleshooting practise. Hands-on Training Module This training module has the following details: Objective Provide hands-on experience with setting up and & administering a Citrix Single Sign-on environment for different types of application. Audience Primary: Citrix Support Engineers Lab Environment Details This section is used to describe the lab environment and the virtual machines that are used. VM Name IP Address Details AD.training.lab Windows Server 2008 R2 SP1. Domain controller for training.lab with DNS. Server.training.lab Windows Server 2008 R2 SP1. Used for the console and Single Signon service Client.training.lab Windows 7 32 bit. Used as a client system to host the plug-in. Page 3

4 Required Lab Credentials Below are the login credentials required to connect to the workshop system and complete the lab exercises. Domain/Machine Username Password Description XenServer Host (Assigned root Assigned through portal through portal) AD.training.lab Training\administrator Citrix123 Domain Administrator Server.training.lab Training\administrator Citrix123 Domain Administrator Client.training.lab Training\administrator Citrix123 Domain Administrator Page 4

5 How to log into the lab environment The self-paced lab environment is hosted on a cloud-based Citrix XenServer. Connecting to your server from the portal page is as easy as Ref: Step by Step login instructions Step Action 1. Once logged in at the self-paced portal, click Launch XenCenter to open the lab environment: 2. When XenCenter launches, right-click the XenCenter node and select Add: Page 5

6 Step Action 3. On the Add New Server screen enter the details provided through the self-paced training portal and click Add: TIP: With your copy of XenCenter, click on the Switch to Remote Desktop button before logging on to any of the images used in this lab. Doing so will enhance your experience when working with these exercises. Page 6

7 Exercise 1: Creating an NTFS Network Share Central Store Scenario Use the following information to create an NTFS network share central store: - Log in to SERVER using the following information Username: Administrator Password: Citrix123 Domain: Training. - On the desktop, double click on the folder entitled 'Single Sign-on 4.8 (Long Island)' - Double click on the folder entitled 'RTM Image' - Start the installation using the AUTORUN.EXE - Perform an NTFS network share central store installation Page 7

8 Step-by-Step Perform the following steps: Step Action 1 Log in to the image entitled SERVER with the username training\administrator and the password Citrix Double click on the desktop folder entitled Single Sign-on 4.8 (Long Island) and open the RTM Image folder. 3 Double click on Autorun.exe. 4 Click Step 2: Create your central store. 5 Click Create your central store in an NTFS network share. 6 Click Yes to create the default NTFS network share and read the output to verify where the central store is created and its UNC path. 7 Press the enter key to continue. 8 Click Exit. Finish Page 8

9 Exercise 2: Installing and Configuring the Single Sign-On Service Scenario Use the following information to complete the exercise: - Obtain a web server certificate from the domain controller s root certificate authority - Install Citrix Single Sign-On Service option - Select the Key Management and Self-Service modules Configure the Single Sign-On Service as follows: - Confirm that SERVER.domain.com is selected in the SSL certificate drop-down list. - Select NT Authority\Network Service from the System account dropdown list - Select the default expiration for the signing certificate - Select the NTFS network share and type \\SERVER\CitrixSync$ - Provide administrator credentials where prompted Page 9

10 Step-by-Step Perform the following steps: Step Action Obtaining a Certificate 1 Within the SERVER image, click on start and type in mmc followed by enter to open a new microsoft management console. 2 Click on File > Add/Remove Snap-in. 3 Select Certificates and click on Add. 4 Select the Computer account and click on Next. 5 Select Local computer and click on Finish. Click OK to exit the dialog. 6 Right click on the Personal folder under Certificates. Select All Tasks > Request New Certificate. Select Next and Next once again to accept the Active Directory Enrollment policy. 7 Select Computer and click on Enroll. Click Finish to close the wizard and check under certificates that there is a server certificate entitled SERVER.training.lab. Close the mmc. Installing and Configuring the Service 1 Double click on the desktop folder entitled Single Sign-on 4.8 (Long Island) and open the RTM Image folder. Double click on Autorun.exe. 2 Click Step 3: Install administrative Components 3 Click Step 2: Install Single Sign-On Service (if applicable) 4 Click Next in the Welcome screen Page 10

11 5 Read and respond to the license agreement 6 Confirm that the only the following modules are selected: Key Management Self-Service 7 Click Next 8 Click Install 9 Click Finish 10 The Configuration Wizard will start automatically. Click Next in the Welcome screen 11 Select SERVER.training.lab in the Select local SSL certificate dropdown list. 12 Click NT Authority\Network Service from the System account drop-down list 13 Click Next 14 Click Next in the Create signing certificate screen to accept the default expiration of 12 months [A signing certificate request may already exist. If that is the case, click Next] 15 Click NTFS network share, type \\SERVER\CitrixSync$ and click next 16 Click on training.lab and click Properties. Type Administrator in the User name field, Citrix123 in the Password field and training.lab in the Domain field, for both the Data proxy account and the Self- Service feature account 17 Click Next Page 11

12 18 Click Finish 19 Click Finish in the Applying Settings screen. Accept the dialog informing you about the service configuration wizard saving your settings. Note that starting the Single Sign-On Service might take a little while but this is normal. Click on exit and close all open windows. Finish Page 12

13 Exercise 3: Installing and Configuring the Single Sign-On Console Scenario Use the following information to complete this exercise: - Install the Single Sign-On Console from the Installation Menu screen - Select the NTFS network share central store and type \\SERVER\CitrixSync$ as the UNC path to the central store - Do not configure data integrity - Configure and run discovery Page 13

14 Step-by-Step Perform the following steps: Step Action 1 Access the SERVER image if necessary (by logging on using Administrator as the username, Citrix123 as the password and training.lab as the domain) Double click on the desktop folder entitled Single Sign-on 4.8 (Long Island) and open the RTM Image folder. Double click on Autorun.exe. Click Step 3: Install administrative components Click Step 3: Install Single Sign-On Console 2 Click Next in the Welcome screen. 3 Read and accept the license agreement. 4 Ensure that the Console and Application Definition Tool items are checked. Click Next in the Install Type screen 5 Click Next to start the installation 6 Click Finish 7 Click Exit Page 14

15 8 Click Start > All Programs > Citrix > Management Consoles >Delivery Services Console. Choose the option to Disable Authenticode signature checking. 9 Click Next in the Welcome screen 10 Click Next in the Select Products or Components screen 11 Click NTFS network share 12 Type \\SERVER\CitrixSync$ 13 Click Next. Accept the AES encryption standard and click Next. 14 Click Next in the Configure Data Integrity Options screen. 15 Click Next in the Preview Discovery screen 16 Click Finish when the discovery is complete. Keep the Delivery Services console open on screen in preparation for the next exercise. Finish Page 15

16 Exercise 4: Creating a Windows Application Definition Scenario Use the following information to complete the exercise: - Browse to the Labs\Day1\lab4_basic folder on the desktop - Open the APP52.exe application - Create a Windows application definition - Name the application definition Basic Lab 4 - Define the form actions - Name the Custom Field 1 Domain - Do not configure advanced detection or password expiration - Review the settings and close the APP52.exe application Page 16

17 Step-by-Step Perform the following steps: Step Action Create a Windows Application Definition 1 Still on the server image, browse to the Labs\Day1\lab4_basic folder on the desktop. Move or minimize the delivery services console so you can access the required folders. 2 Double-click the APP52.exe application and click run. Position the LoginTester screen so it can be viewed beside the delivery services console. 3 Click the Application Definitions node in the console. 4 Click Create application definition with the actions pane (on the right hand side). 5 Confirm that Windows is selected in the Application type field and click Start Wizard. 6 Type Basic Lab 4 in the Application name field. 7 Type Basic application login in the application description field and click Next. Identify the Windows Application Form 1 Click Add Form. 2 Type Logon Form in the Enter form name field. Page 17

18 3 Confirm that Logon form is selected in the Select form type field 4 Click Next 5 Click Select to detect the APP52.exe application 6 Click LoginTester in the Window Title column in the Window Selector screen NOTE: The LoginTester application is highlighted with a flashing border to indicate that it is selected. 7 Click OK NOTE: The LoginTester application now appears in the Windows titles field and APP52.exe appears in the Executable Name field. 8 Click Next Define the Form Actions 1 Click Set/Change in the Username/ID row. 2 Click the field where the Control ID is set to 1000 and click OK. 3 Click Set/Change in the Password row. 4 Click the field where the Control ID is set to 1001 and click OK 5 Click Set/Change in the Custom Field 1 row Page 18

19 6 Click the field where the Control ID is set to 1002 and click OK 7 Click Set/Change in the OK row 8 Click the field where the Control ID is set to 1 and click OK. 9 Click Next in the Define form actions screen 10 Click Next in the Configure other settings screen 11 Review the settings and click Finish 12 Click Next in the Manage forms screen 13 Type Domain as the label for Custom Field 1 that you identified earlier and click Next 14 Click Next to use the default icon for the application 15 Click Next in the Configure advanced detection screen 16 Click Next in the Configure password expiration screen 17 Review the settings and click Finish 18 Close the LoginTester application Finish Page 19

20 Exercise 5: Creating a Web Application Definition Challenge exercise Use the following information to complete the exercise: - Create a web application definition based on the login form for the website. - Note: Use the option to sign in (rather than sign up for a new account). This option should be available at the top right of the web site. - Name the application definition Basic Lab 5 - Configure the appropriate field name settings - Do not configure advanced detection or password expiration [There is no step by step guidance for this lab as it is a challenge exercise] Page 20

21 Exercise 6: Creating a User Configuration Scenario Use the following information to complete the exercise: - Create a new user configuration named Administrator - Type Password configuration for the Administrator in the description field - Assign Administrator to the user configuration - Name the application group Admin Applications and assign the Domain policy - Add the following application definitions: Basic Lab 4 Basic Lab 5 - Enable initial credential setup for the Basic Lab 4 application definition - Allow users to reveal all password in Logon Manager - Do not force re-authentication before revealing user passwords - Type SERVER in the License server name field - Continue without validating licensing information - Do not enable any other features - Review the settings and close all open windows Page 21

22 Step-by-Step Perform the following steps (once again on the SERVER image): Step Action Creating a User Configuration 1 Open the delivery services console from the start menu if necessary and click the User Configurations node. 2 Click Add new user configuration. 3 Type Administrator in the Name field. 4 Type Password configuration for the Administrator in the Name field. 5 Click Browse. 6 Expand the training.lab node. 7 Select the users node and click OK. 8 Click Next 9 Select Single Sign-on Enterprise from the Product Edition dropdown list and click Next. 10 Click the Add button. Page 22

23 11 Type Admin Applications in the Enter the application group name field. 12 Type Application for admin use in the Enter description field. 13 Select Default Policy from the Select Password Policy drop-down list and make uncheck Make this application group a password sharing group. 14 Press and hold the CTRL key while clicking the following: - Basic Lab 4 - Basic Lab 5 15 Click the right arrow button. 16 Select Basic Lab 4 to enable initial credential setup for this application and click OK. 17 Click Next. Configure Plug-in Interaction 1 Select Allow users to reveal all passwords in Logon Manager. 2 Deselect Force re-authentication before revealing user passwords. 3 Click Advanced Settings, select the Application Support tab and select the radio button Only applications that are included with Single Sign-On Plug-in, then click OK. Page 23

24 4 Click Next 5 Type SERVER in the License server name field and click Next. Select Yes to continue without the specified license server and port. We will not need to license this product at this time. 6 Click Next in the Select data protection methods screen 8 Click Next in the Select secondary data protection screen 9 Click Next in the Enable self-service features screen 10 Click Next in the Key Management Module screen 11 Click Next in the Provisioning module screen 12 Review the settings and click Finish 13 Close all open windows Finish Page 24

25 Exercise 7: Installing the Plug-in Software Scenario Use the following information to install the Single Sign-On Plug-in and test the functionality of the application definitions configured in earlier exercises: - Switch to the client image - Double click on the Single Sign-on 4.8 (Long Island) folder on the desktop and open the RTM image folder. Double click on Autorun.exe to start the installation - Complete the Plug-in software setup - Restart the system and login to your system using the following information Username: Administrator Password: Citrix123 Domain: Training - Store the credentials for the application using your chosen credentials: - Browse to the APP52.exe application within the Labs\Day1 folder on the desktop and confirm that the Plug-in software is submitting credentials - Open Internet Explorer, browse to and save the credential information using the credentials above - Confirm that the Plug-in software is submitting credentials - Close all open windows Page 25

26 Step-by-Step Perform the following steps: Step Action Installing the Plug-in 1 Log on to the CLIENT image using training\administrator as the username and Citrix123 as the password. 2 Double click on the Single Sign-on 4.8 (Long Island) folder on the desktop and open the RTM image folder. Double click on Autorun.exe. 3 Click Step 4: Install Single Sign-On Plug-in. 4 Click Install the Single Sign-on Plug-in. 5 Click Next on the Welcome screen. 6 Click on I accept the license agreement and click Next. 7 Click Next in the Feature Selection screen. 8 Click NTFS Network Share. 9 Type \\SERVER\CitrixSync$. 10 Click Next. 11 Click Install. Page 26

27 12 Click Finished. 13 Click Yes to restart the system Testing the Plug-in 1 Login with the username Administrator and the password Citrix123 in the training domain 2 You should now see a registration dialog prompting you to automatically store passwords for programs added to the group you are a member of. Click Store to see which applications have been added and supply any credentials you wish to the enabled fields. Click Finish. 3 Launch the plugin from the start menu if not running and reauthenticate if prompted. Right click on the plugin icon in the system tray and select Logon Manager. Delete the logons for your initial applications as we will follow the alternative method below. 4 Select File, New Logon and click on Add One Logon 5 Select Windows as the program type and Basic Lab 4 as the and Observe the program name and description that appears. Click Next 6 Add in any credentials you wish and click Finish. Launch the APP52.exe application from the \labs\day 1\Lab4_basic folder on the desktop 7 Your credentials should be displayed. Click OK and confirm that the message Login Successful appears in the Status screen. Click OK Page 27

28 8 Open Internet Explorer 9 Type in the Address field and press enter. Once the podio home page appears, click on the sign in link at the top right of the page. 10 If an automated login does not happen, find out why and correct the error. [Hint: The above steps should help you resolve this issue] 11 Close all open windows Finish Page 28

29 Single Sign-on Challenge Labs Please note that the exercises on the following pages have a minimum of direction to perform the specific task and as such are useful as challenges. Appendix A in this guide contains a step by step solution for each of the exercises on the following pages. Challenge Exercise 1 1. On the Server image, open the application entitled APP81.exe within the \Labs\Day2\Lab1 folder on the desktop. 2. Create an application definition in a very similar way to the exercises above. 3. Test the application definition by trying to perform an automated login. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Challenge Exercise 2 1. On the Server image, open the application entitled APP82.exe within the \Labs\Day2\Lab2 folder on the desktop. 2. Create an application definition in a very similar way to the exercises above. 3. Test the application definition by trying to perform an automated login. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Page 29

30 Challenge Exercise 3 1. On the Server image, open the application entitled APP83.exe within the \Labs\Day2\Lab3 folder on the desktop. 2. Create an application definition in a very similar way to the exercises above. 3. Test the application definition by trying to perform an automated login. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Challenge Exercise 4 1. On the Server image, open the application entitled APP85.exe within the \Labs\Day2\Lab4 folder on the desktop. 2. Create an application definition in a very similar way to the exercises above in order to process the logon and change logon forms 3. Test the application definition by trying to perform an automated login. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. [Note: This is a longer exercise so you may want to move on and come back to it later if you are stuggling to resolve an issue] Page 30

31 Challenge Exercise 5 1. On the Server image, open the application entitled APP86.exe within the \Labs\Day2\Lab5 folder on the desktop. 2. Write the application definition and test as documented above. You will probably find that you are unable to automatically process a logon. 3. Enable the agent log in the registry by creating a key called Log within HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager\Log 4. Create a DWORD value within this key called Enabled and set it to 1 so that logging is enabled. (Setting it to 0 disabled logging) 5. Test the application definition again and consult the agent log file under c:\documents and Settings\administrator\Application Data\Citrix\MetaFrame Password Manager\ 6. Use the log you have found to troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Page 31

32 Challenge Exercise 6 1. On the Server image, open the run.bat file within the \Labs\Day2\Lab6\Classes folder on the desktop. The batch file contains a command to run a Java based application 2. Find out the correct sequence of keys to logon on to this app without using any mouse input 3. Create an application definition using sendkeys in order to identify and properly process a single sign-on to the application. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Challenge Exercise 7 1. On the Server image, double click on the icon entitled APP89.jar within the \Labs\Day2\Lab7 folder on the desktop. 2. Find out the correct sequence of keys to logon on to this app without using any mouse input 3. Create an application definition using sendkeys in order to identify and properly process a single sign-on to the application. 4. If the above, does not work, troubleshoot the issue. A solution is provided in Appendix A of this lab guide. Page 32

33 Appendix A: Solutions to Lab Exercises. Challenge Exercise 1: Solution The following Citrix TV video is useful to assist with the solution to this exercise: It also gives some useful information on handling.net applications. Step-by-Step Perform the following steps: Step Action 1 Log in to the SERVER image with the username Administrator and the password Citrix123 to the training.lab domain. 2 On the SERVER image, open the application entitled APP81.exe within the \Labs\Day2\Lab1 folder on the desktop. Open the delivery services console and select the option to create a new application definition under the application definitions tab. 3 Select Windows as the application type and call it Adv Lab 1. 4 On the manage forms tab, use Form 1 for the form name and select Next. Click the select button and select the MFC Sample APP program window. 5 You should see the string MFC Sample App followed by a timestamp for the windows title. Click Edit and place an asterisk (*) character so that the window title now reads MFC SAMPLE APP*. Click OK. 6 Define the form actions for Username/ID, Password, Custom Field 1 and the OK button. Name custom field 1 Domain. Page 33

34 7 Use the default icon for the application and do not configure advanced detection or password expiration. 8 Close the application. 9 Within the Delivery Services Console, Select User Configurations > Administrator > Admin Applications and from the right hand actions panel, create a new application group called Advanced Labs. Ensure that the Default Policy is chosen and add in Advanced Lab 1, for the existing user configuration and ensure it is not a password sharing group. 11 Switch to the client image and test the application definition. Make sure to refresh the plugin on the client image by right clicking on the plugin icon on the taskbar and selecting the refresh option. Finish Page 34

35 Challenge Exercise 2: Solution Step-by-Step Perform the following steps: Step Action 1 Within the SERVER image, Login with the username Administrator and the password Citrix123 to the training.lab domain. 2 Open the application entitled APP82.exe within the \Labs\Day2\Lab2 folder on the desktop. 3 Create a Windows Application Definition and name it Adv Lab 2. 4 When you get to identify the form, add in both LoginTester and MFC Sample APP* for the window titles. This is because, when you launch this application, the window title changes rapidly so we need to detect both titles. 5 Use the default icon for the application and do not configure advanced detection or password expiration. 6 Use the default icon for the application and do not configure advanced detection or password expiration. 7 Ensure the definition created for this exercise is added to the Advanced Labs group you created earlier. 8 Switch to the client image and test the application definition. Make sure to refresh the plugin on the client image. Finish Page 35

36 Challenge Exercise 3: Solution Step-by-Step Perform the following steps: Step Action 1 Login to the SERVER image using the credentials as specified earlier. 2 Open the application entitled APP83.exe within the \Labs\Day2\Lab3 folder on the desktop. 3 Create a Windows Application Definition and name it Adv Lab 3 4 Name the custom field 1 Domain. 5 Again, when you identify the main form, replace #32770 in the Window Title field with the value NULL. 6 Use the default icon for the application and do not configure advanced detection or password expiration. 7 Just as in previous exercises, add the application definition to the Advanced Labs group. 8 Switch to the client image and test the application definition. Make sure to refresh the plugin on the client image as before. Finish Page 36

37 Challenge Exercise 4: Solution Creating the first form Step Action Old Password 1 Open APP85.exe within the \Labs\Day2\Lab4 folder on the desktop. 2 Create a new Windows application definition and name it Adv Lab 4. 3 Add a logon form called Old Password Form and select the APP85.exe application. Make sure to click the Select button and choose pwchange2 for the window title. 4 Click Advanced Matching and then Control Matching. 5 Click Add Match and type Old Password in the Match Name field, then click Select. 6 Select the App85.exe and click Next. 7 Right-Click the field where the Text Label is set to Enter Old Password and click Text, then Finish. 8 Click Ok and Next until you get to the Define Form Actions section. 9 Click Set/Change in the Password row, then click the field where the Control ID is set to 1000 and click OK. 10 Click Set/Change in the OK row, then click the field where the Control ID is set to 1 and click OK. 11 Click Next and Finish until you re back in Manage Forms. Page 37

38 Creating the second form Step Action New Password 1 Click OK in the pwchange2 application to reveal the next dialog box 2 Click Add Form and name it New Password Form. 3 Select Password Change Form from the drop-down list, then click next. 4 Select the APP85.exe. 5 Click Advanced Matching and then Control Matching. 6 Click Add Match and type New Password in the Match Name field, then select Change Password from the Agent action required dropdown list and click Select. 7 Select the APP85.exe and click Next. 8 Right-Click the field where the Text Label is set to Enter New Password and click Text, then Finish. 9 Click Ok and Next until you get to the Define Form Actions section. 10 Click Set/Change in the New Password row, then click the field where the Control ID is set to 1000 and click OK 11 Click Set/Change in the OK row, then click the field where the Control ID is set to 1 and click OK. 12 Click Next and Finish until you re back in Manage Forms. Page 38

39 Creating the third form Step Action Confirm Password 1 Click OK in the pwchange2 application to reveal the next dialog box 2 Click Add Form (login form) and name it Re-Enter New Password Form, then click Next. 4 Select the APP85.exe. 5 Click Advanced Matching and then Control Matching. 6 Click Add Match and type Re-Enter New Password in the Match Name field, then select Confirm Password from the Agent action required drop-down list and click Select. 7 Select the APP85.exe and click Next. 8 Right-Click the field where the Text Label is set to Re-Enter New Password and click Text, then Finish. 9 Click Ok and Next until you get to the Define Form Actions section. 10 Click Set/Change in the Password row, then click the field where the Control ID is set to 1000 and click OK. 11 Click Set/Change in the OK row, then click the field where the Control ID is set to 1 and click OK. 12 Click Next and Finish until you re back in Manage Forms. 13 Finish the Application Definition Wizard as usual, then switch to the Agent image, refresh Password Manager and test the application. Page 39

40 Challenge Exercise 5: Solution You may also find the following Citrix TV presentation useful as an alternative to following the steps below: Step-by-Step Perform the following steps: Step Action 1 Within the SERVER image, login with the username Administrator and the password Citrix123 to the training.lab domain. 2 On the server image, open the application entitled APP86.exe within the \Labs\Day2\Lab5 folder on the desktop. Create a regular application definition to match on the username, password and domain fields as before. 3 Switch to the CLIENT image. Click on start and type regedit followed by enter.. 4 Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager and create a new key called Log 5 Create a new DWORD value called Enabled and set its value to 1. 6 Refresh the plugin on the client image as before. 7 Test the application definition. You will probably find that that the form is not processed. 8 From windows explorer, navigate to the log file at c:\documents and settings\administrator\application data\citrix\metaframe password manager. Page 40

41 9 Open the log entitled sso_administrator_client and search for the name of the executable name of the application. Note: you many find it easier to navigate to the bottom of the log file and search upwards. 10 You should see an entry like the following; Window Class (xxx) is not in the Window Class allowed list. Window not processed. 11 Go back to the Delivery Services Console, edit the application definition and click Advanced Matching under Form identity. 12 Within the class information section, change the Allow Window Class entry to ClassID* (replacing the dynamic portion with a wildcard). 13 Step through the rest of the application definition wizard without making further changes. Deploy to the client as before and test. Finish Challenge Exercises 6 and 7: Solution Review the following video on Citrix TV which will assist in providing a solution to these exercises. Page 41

42 Revision History Revision Change Description Updated By Date 1.0 Original Version Mark Butterly April 5 th, Updated Mark Butterly July 30 th, Updated Mark Butterly September 31 st, 2013 About Citrix Citrix Systems, Inc. (NASDAQ:CTXS) is the leading provider of virtualization, networking and software as a service technologies for more than 230,000 organizations worldwide. It s Citrix Delivery Center, Citrix Cloud Center (C3) and Citrix Online Services product families radically simplify computing for millions of users, delivering applications as an on-demand service to any user, in any location on any device. Citrix customers include the world s largest Internet companies, 99 percent of Fortune Global 500 enterprises, and hundreds of thousands of small businesses and prosumers worldwide. Citrix partners with over 10,000 companies worldwide in more than 100 countries. Founded in 1989, annual revenue in 2008 was $1.6 billion Citrix Systems, Inc. All rights reserved. Citrix, Citrix Delivery Center, Citrix Cloud Center, XenApp, XenServer, NetScaler, XenDesktop, Citrix Repeater, Citrix Receiver, Citrix Workflow Studio, GoToMyPC, GoToAssist, GoToMeeting, GoToWebinar, GoView and HiDef Corporate are trademarks of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in other countries. All other trademarks and registered trademarks are property of their respective owners. Page 42