XenApp & XenDesktop 7.6 Partner Workshop Hands-on Lab Exercise Guide Worldwide Technical Enablement & Readiness January 2015
Contents Contents... 1 Overview... 2 Scenario... 5 Lab Setup... 6 Connecting XenCenter to your XenServer... 6 Exercise 1... 8 Installing the XenDesktop Controller... 8 Exercise 2...17 Initial Site Setup...17 Exercise 3...26 Installing StoreFront...26 Exercise 4...33 Configuring StoreFront and Installing Certificates...33 Exercise 5...42 Installing the VDA on the Base Desktop VM...42 Exercise 6...52 Installing the VDA on the Base Server VM...52 Exercise 7...63 Creating a Desktop OS Machine Catalog...63 Exercise 8...69 Creating a Delivery Group for Desktops...69 Exercise 9...73 Creating a Server OS Machine Catalog...73 Exercise 10...78 Creating Server-based Delivery Groups and Publishing Applications...78 Exercise 11...85 Setting Up Remote Access...85 Exercise 12...97 Testing Internal Access...97 Exercise 13... 101 Using the Self-Service Plug-in... 101 Exercise 14... 106 Testing External Access... 106 Exercise 15... 108 Monitoring with Director... 108 1
Overview Hands-on Training Module Objective This training will provide hands-on experience with the configuration and operation of XenApp and XenDesktop 7.6 and related components. Prerequisites Required: Working knowledge of Windows server and desktop operating systems, SQL Server and basic networking. Audience Citrix Partners 2
Lab Guide Conventions This symbol indicates particular attention must be paid to this step Special note to offer advice or background information reboot Start Text the student enters or an item they select is printed like this Bold text indicates reference to a button or object Focuses attention on a particular part of the screen (R:255 G:20 B:147) Shows where to click or select an item on a screenshot (R:255 G:102 B:0) List of Virtual Machines VM Name IP Address Description AD.training.lab 192.168.10.11 Windows Server 2012 R2. Domain Controller, DNS, DHCP, Certificate Services, SQL Server 2012 (witness) AppDNA1 192.168.10.22 Windows Server 2012 R2. AppDNA 7.5. DC1 192.168.10.14 Windows Server 2012 R2. XenDesktop Controller with Director. DC2 192.168.10.15 Windows Server 2012 R2. XenDesktop Controller. FS 192.168.10.16 Windows Server 2012 R2. File server and App-V server. NS1 192.168.10.2 NetScaler 10.1 VPX PVS1 192.168.10.17 Windows Server 2012 R2. Provisioning Services. PVS2 192.168.10.18 Windows Server 2012 R2. Provisioning Services. SF1 192.168.10.19 Windows Server 2012 R2. StoreFront Server. SF2 192.168.10.20 Windows Server 2012 R2. StoreFront Server. SQL1 192.168.10.12 Windows Server 2012 R2. SQL Server 2012. SQL2 192.168.10.13 Windows Server 2012 R2. SQL Server 2012. VMM 192.168.10.21 Windows Server 2012 R2. System Center Virtual Machine Manager 2012 R2. Win2012R2Base DHCP Windows Server 2012 R2. Base operating system image. Win7Client 192.168.10.25 Windows 7 SP1. Endpoint client. Win81Base DHCP Windows 8.1. Base operating system image. 3
Required Lab Credentials The credentials required to connect to the environment and complete the lab exercises. Domain Username Password Description Training Administrator Citrix123 Domain Administrator Training User1 Citrix123 Domain User Training User3 Citrix123 Domain User nsroot Citrix123 Netscaler Administrator 4
Scenario Acme Corporation has been running both XenApp 5 and XenDesktop 4 in their environment for several years to deliver applications and desktops to users. Acme is impressed with the streamlined architecture and capabilities of the platform and is ready to move forward with a POC. You have been hired as a consultant to deploy XenDesktop 7.6. Your task is to use the guidelines outlined below to implement a proof of concept. Various desktops and applications will be delivered from a single XenDesktop site NetScaler will be used for external connectivity 5
Lab Setup Connecting XenCenter to your XenServer Overview XenCenter is the graphical utility that is used for managing XenServer hosts. With XenCenter you can create and modify virtual machines and virtual machine templates. The XenCenter console also allows you to quickly and easily power control VMs as well as inserting ISO images. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. On the Student Desktop, click the XenCenter Icon. 2. Click Add New Server at the top of the XenCenter window. 6
3. View your Lab Portal Web Page to retrieve the following details: SAMPLE Address: http://192.168.10.5 Username: admin Password: ******* Click Add. 4. XenCenter will connect and display the VMs running on your XenServer host. 7
Exercise 1 Installing the XenDesktop Controller Overview In this exercise we will install the XenDesktop Controller on DC1 from the XenApp_and_XenDesktop7_6.iso. As part of the installation process we will also install Citrix Studio and Director onto DC1. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. In order to begin installation, we must first mount the XenDesktop 7.6 ISO file to the DC1 using the XenCenter console. In XenCenter click the DC1 virtual machine. 2. Click the Console tab on the right. 8
3. Click <empty> next to DVD Drive 1: and then select XenApp_and_XenDesktop_7_6.iso. 4. Now that we have the ISO file mounted, we will connect to the DC1 VM using RDP to begin the installation process. On the Student Desktop, click the Remote Desktop Connection icon. 5. Double-Click DC1 to connect. 6. On the DC1 Desktop, click the File Explorer icon. 9
7. Double-click CD Drive (D:) XA and XD 7.6. 8. Double-click AutoSelect.exe. 10
9. Click Start next to XenDesktop 10. Click the Delivery Controller selection box. 11
11. Read and respond to the license agreement and then click Next. 12. De-select License Server and StoreFront and then click Next. This lab will use a central cloud-based Citrix License Server. StoreFront will be installed on dedicated virtual machines. 12
13. De-select Install Microsoft SQL Server 2012 Express and click Next. This lab will use the SQL setup previously configured. SQL Server Express is only recommended for small PoC and pilot environments since it has limited resources and features. 13
14. Click Next on the Firewall screen. 15. Click Install to begin the installation. 14
16. Wait a few minutes for the installation to complete. Then click Finish. 17. Now that installation is complete, we will eject the XenDesktop 7.6 ISO file from the DC1 VM. It is important to eject ISO files when not in use to prevent issues. On the Student Desktop, click the XenCenter Icon. 15
18. Click Eject next to XenApp_and_XenDesktop7_6.iso on the DC1 Console tab. 19. Minimize XenCenter. Exercise Summary Installing XenDesktop and related components is an easy and straight forward process. The Installation wizard installs the required prerequisites and components. Additionally, if you are quickly deploying a POC, you can install the licensing server, StoreFront and SQL Express on the same machine. 16
Exercise 2 Initial Site Setup Overview In this exercise we will perform the steps necessary to setup a new XenDesktop site. You will name the site, connect to the database server, connect to the centralized licensing server and configure the hypervisor connection. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. After installing the Delivery Controller, Citrix Studio will display several options, these options are only displayed on un-configured controllers. In Citrix Studio on DC1, click Deliver applications and desktops to your users. 17
2. Leave the first option selected for a fully configured, production-ready Site and type in CitrixSite1 for the name. Then click Next. 3. Enter SQL1 for the database server location and CitrixSite1 for the database name. Then click Test connection. 18
4. Click OK on the informational dialog. The database and schema do not exist, XenDesktop will configure this automatically for you. 5. Click Close on the informational dialog. 6. Click Next. 19
7. Enter licenses.citrixvirtualclassroom.com and click Connect. This is a central license server for the cloud-based training environment. It has been previously setup with the correct Citrix License Server version and the product licenses required. 8. Click Connect me, and then click Confirm on the dialog. The license server uses a self-signed certificate which is untrusted by this virtual machine. This will be adequate for the purposes of this lab; however, production environments should have fully trusted certificates. 20
9. Select Citrix XenDesktop Platinum and click Next. 10. On the Student Desktop, switch to XenCenter. 11. In order to continue setting up the XenDesktop site, we will need the IP address of the hypervisor that is assigned to your lab environment. We can retrieve this information from the networking tab in XenCenter. In XenCenter, click the name of your XenServer Host. 21
12. Click the Networking Tab and then make note of your IP Address for Private bond0. SAMPLE 22
13. View your Lab Portal Web Page to retrieve your XenServer password: SAMPLE Address: **Address from XenCenter Private bond0** Username: admin Password: **Password from Lab Portal page** Connection name: Host1 Enter the retrieved information into the Site Setup window and then click Next. 23
14. Enter Host1Settings in the text field, select Internal and click Next. 15. Select Local from the drop down menu, and then click Next. 24
16. Click Next on the App-V Publishing screen. 17. Click Finish to complete the wizard. Exercise Summary XenDesktop includes an easy-to-use wizard for initial configuration of the XenDesktop site. You can specify the host, network and storage details during the initial site setup (three-step wizard as we did) or specify only the minimum required details of the database and licensing and configure other details later (empty site deployment option). 25
Exercise 3 Installing StoreFront Overview In this exercise, we will install the StoreFront software on the SF1 VM. StoreFront enables users to access XenApp and XenDesktop resources. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. In order to install StoreFront, we must mount the XenDesktop 7.6 iso to the SF1 VM. On the Student Desktop, click the XenCenter Icon. 2. Click the SF1 Virtual Machine. 3. Click the Console tab on the right. 26
4. Click <empty> next to DVD Drive 1: and then select XenApp_and_XenDesktop_7_6.iso. 5. On the Student Desktop, click the Remote Desktop Connection Manager icon. 6. Double-click SF1 on the left to connect. 7. On the SF1 desktop, click the File Explorer icon. 27
8. Double-click CD Drive (D:) XA and XD 7.6. 9. Double-click AutoSelect.exe. 10. Click Start next to XenDesktop 28
11. Click Citrix StoreFront 12. Read and respond to the license agreement and then click Next. 29
13. Click Next on the Core Components screen. 14. Click Next on the Firewall screen. 30
15. Click Install. 16. Click Finish. 17. On the Student Desktop, click the XenCenter Icon. 31
18. Click Eject next to XenApp_and_XenDesktop7_6.iso. 19. Minimize XenCenter. Exercise Summary Installing StoreFront is a quick and straightforward process, the StoreFront installer handles all required components and firewall exceptions. 32
Exercise 4 Configuring StoreFront and Installing Certificates Overview In this exercise we will configure the StoreFront virtual machine which serve as the connection point to resources. In this lab, we are only configuring a single StoreFront server, adding a second StoreFront server is an easy process, but outside the scope of this lab guide. Certificates are used to secure the connection to the StoreFront server. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. From the SF1 desktop, select Create a new deployment. 33
2. Enter https://sf1.training.lab (ensure you specify HTTPS) and click Next. This process may take a moment. 3. Enter Corporate Store for the store name and then click Next. 34
4. Click the Add button. Type in CitrixSite1 for the Display name and then click the Add button. 5. Type dc1.training.lab and click OK. 35
6. Change the Transport type dropdown to HTTP and the click OK. 7. Click Next. 36
8. Accept the default None for Remote Access and then click Create. We will configure remote access in a later exercise. 9. Click Finish when the process completes. 37
10. From SF1, go to Start and launch IIS Manager. 11. Click the SF1. 12. Double-click Server Certificates. 13. In the s menu, click Create Domain Certificate. 38
14. Enter the following details: Common name: *.training.lab Organization: Citrix Organization unit: Readiness City/locality: Fort Lauderdale State/province: Florida Country/region: US Click Next. Make sure you enter *.training.lab correctly for the common name. If this is misspelled and you proceed through the exercises, you will need to repeat several steps with a newly requested certificate. 15. Click the Select button and select the certificate authority of ad.training.lab. Click OK. 39
16. Enter WildcardCert for the Friendly name. Click Finish. 17. Ensure the WildcardCert is selected and click Export. 18. Export the certificate to C:\WildcardCert.pfx with password Citrix123. 19. Expand nodes, right-click the Default Web Site node and select Edit Bindings. 40
20. Click Add. 21. Change the type to https, leave the host name blank, and select the WildcardCert under SSL certificate. Click OK. 22. Click Close. Exercise Summary StoreFront configuration data is stored locally on the StoreFront Servers. Certificates have to be present on StoreFront servers and properly bound to ensure secure communication can take place. 41
Exercise 5 Installing the VDA on the Base Desktop VM Overview In this exercise we will install the Virtual Delivery Agent (VDA) to prepare the Windows 8.1 master image. To deliver desktops and applications for machines in Server OS or Desktop OS machine catalogs, you must prepare the master image that creates the user desktops and applications. The master image is a template that you use to provision multiple systems from in your environment. In addition to desktops and applications, creating a master image includes installing and configuring the operating system and any software you want to include on your image. Step by step guidance Estimated time to complete this lab: 15 minutes. Step 1. The VDA is installed for both server and desktop operating systems from the XenDesktop 7.6 ISO. On the Student Desktop, click the XenCenter Icon. 2. In XenCenter, right-click the Win81Base virtual machine and click Start. 3. Click the Console tab. 42
4. Click <empty> next to DVD Drive 1: and select XenApp_and_XenDesktop7_6.iso 5. Minimize XenCenter. 6. In the Remote Desktop Connection Manager window, double-click Win81Base to connect. 7. On the Win81Base desktop, open File Explorer. 8. Double-click CD Drive (D:) XA and XD 7.6. 9. Double-click AutoSelect.exe. 43
10. Click Start next to XenDesktop. 11. Select Virtual Delivery Agent for Windows Desktop OS. 44
12. Leave Create a Master Image selected and click Next. 13. Leave No, install the standard VDA selected and click Next. 45
14. Uncheck Citrix Receiver and click Next. 15. The Delivery Controller addresses can be configured using Group Policy or manually on each VDA. If configured manually, you can modify the addresses in the registry or by rerunning the VDA wizard. Leave Do it manually selected for the location of your Delivery Controllers, then add in: dc1.training.lab Click Next. 46
16. Leave the default features selected and click Next. 17. Click Next leaving the firewall rules to be configured automatically. 47
18. Review the Summary page and click Install. 19. When the installation completes, click Finish and the machine will restart. 20. On the Student Desktop, click the XenCenter Icon. 48
21. Click Eject next to the XenApp_andXenDesktop7_6.iso. 22. Once Win81Base finishes rebooting, right-click Win81Base and click Shut Down. 23. Click Yes to shut down the Win81Base VM. 24. Click the Snapshots tab at the top right. 49
25. Click Take Snapshot... 26. Enter After VDA Installation in the Name field and click Take Snapshot. 27. The snapshot will now be listed. 50
Exercise Summary To deliver Server OS or Desktop OS machines, join the master image to the domain for which you want users' desktops and applications to be members, and make sure that the master image is available on the host where you want to create the machines. 51
Exercise 6 Installing the VDA on the Base Server VM Overview In this exercise we will install the VDA to prepare the Windows 2012 R2 master image. To deliver desktops and applications for machines in Server OS or Desktop OS machine catalogs, you must prepare the master image that creates the user desktops and applications. The master image is a template that you use to multiple systems from in your environment. In addition to desktops and applications, creating a master image includes installing and configuring the operating system and any software you want to include on your image. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. Right-click the Win2012R2Base virtual machine and click Start. 2. Click the Console tab. 3. Click <empty> next to DVD Drive 1: and select XenApp_and_XenDesktop7_6.iso 52
4. Minimize XenCenter. 5. In the Remote Desktop Connection Manager window, double-click Win2012R2Base to connect. 6. On the Win2012R2Base desktop, open File Explorer. 7. Double-click CD Drive (D:) XA and XD 7.6. 8. Double-click AutoSelect.exe. 53
9. Click Start next to XenDesktop. 10. Select Virtual Delivery Agent for Windows Server OS. 54
11. Leave Create a Master Image selected and click Next. 12. Uncheck Citrix Receiver and click Next. 55
13. Leave Do it manually selected for the location of your Delivery Controllers, then add in: dc1.training.lab Click Next. 14. Leave the default features selected and click Next. 56
15. Click Next leaving the firewall rules to be configured automatically. 16. Review the Summary page and click Install. 17. A dialog will appear indicating that the Win2012R2 VM must be restarted in order to continue installing the VDA. Click Close to restart the Win2012R2 VM. 57
18. Wait approximately 5 minutes for the Win2012R2Base VM to restart. Double-click Win2012R2Base to connect. 19. Once you reconnect, the VDA setup will automatically reinitialize. 58
20. Setup will complete, click Finish and the VM will restart. 21. On the Student Desktop, click the XenCenter Icon. 22. Click Eject next to the XenApp_andXenDesktop7_6.iso. 59
23. Once Win2012R2Base finishes rebooting, right-click Win2012R2Base and click Shut Down. 24. Click Yes to shut down the Win2012R2Base VM. 25. Click the Snapshots tab at the top right. 60
26. Click Take Snapshot... 27. Enter After VDA Installation in the Name field and click Take Snapshot. 28. The snapshot will now be listed. 61
29. Minimize XenCenter. Exercise Summary To deliver Server OS or Desktop OS machines, join the master image to the domain for which you want users' desktops and applications to be members, and make sure that the master image is available on the host where you want to create the machines. For production environments, Citrix recommends that you create a snapshot of your master image and name the snapshot so that you can identify the master image in the future. If you specify a master image rather than a snapshot when creating a Server OS or Desktop OS machine catalog, Studio creates a snapshot for you but you cannot name it. 62
Exercise 7 Creating a Desktop OS Machine Catalog Overview In this exercise we will perform the steps necessary to create a catalog to be used with Machine Creation Services. Machine Creation Services utilizes a master virtual machine within your XenDesktop environment to manage virtual machines, enabling you to easily administer and update target devices through one base template. Step by step guidance Estimated time to complete this lab: 15 minutes. Step 1. In the Remote Desktop Connection Manager window, switch to DC1. 2. The Machine Catalog contains groups of machines for delivering Apps and Desktops, when using MCS creating a Machine Catalog will create the required virtual machines based on the base template. Select the Machine Catalogs node and click Create Machine Catalog. 63
3. Click Next on the Introduction screen. 4. Select Windows Desktop OS and click Next. 64
5. For Machine Management, leave the defaults of Machines that are power managed and Citrix Machine Creation Services (MCS) selected and click Next. 6. On the Desktop Experience screen select I want users to connect to a new (random) desktop each time they log on and then click Next. 65
7. On the Master Image screen select Win81Base and then click Next. A snapshot will be created automatically as part of the provisioning process. 8. Change the Number of virtual machines needed to 2 and Memory (MB): to 1024. Leave the other defaults for the virtual machines. Then click Next. 66
9. On the Computer Accounts screen select: Create new Active Directory accounts Expand Training and select VDAs Selected location will read: OU=VDAs,OU=Training,DC=training,DC=lab Type Win81MCS## for the Account naming scheme Click Next. 67
10. Type Win81 MCS Desktops and click Finish. It will take a few minutes for the virtual machines to be provisioned and the machine catalog created. 11. After the process completes, you should see the new catalog under the Machine Catalogs node. Exercise Summary Machine Creation Services communicates directly with the hosting infrastructure to provision virtual machines from a base template. This makes updating or scaling-out a simple task that requires little administrative effort. 68
Exercise 8 Creating a Delivery Group for Desktops Overview In this exercise we will perform the steps necessary to create a delivery group to be used with the Machine Creation Services catalog of desktop machines created earlier. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. The delivery group provides user assignment From Citrix Studio, select the Delivery Groups node and click Create Delivery Group. 2. Click Next on the Introduction screen. 69
3. Ensure Win81 MCS Desktops is selected and type 2 to Choose number of machines to add. Click Next. 4. For Delivery Type, leave the default of Desktops and click Next. 70
5. Click Add users Add Domain Users click OK and then click Next. 6. Leave the default Manually, using a StoreFront server address that I will provide later for StoreFront and then click Next. Specifying the StoreFront address here will automatically configure Receiver installed on virtual desktops in this delivery group. This provides a simplified method of delivering applications via XenApp to desktop users. We have not installed receiver on the VDAs in the this lab. 71
7. Type Win81 MCS for both the Delivery Group name and Display name and click Finish. 8. Verify that the Delivery Group was created successfully. Exercise Summary Delivery Groups contain systems from Machine Catalogs and set properties such as who will have access to the resource and how the resource will be presented. 72
Exercise 9 Creating a Server OS Machine Catalog Overview In this exercise we will perform the steps necessary to create a catalog with a Server OS. The Server OS Machine Catalog provides hosted shared desktops for a large-scale deployment of standardized machines as well as hosted application delivery. Machine Creation Services uses a master virtual machine within your XenDesktop environment to manage virtual machines, enabling you to easily manage and update target devices through one base template. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. From Citrix Studio on DC1, select the Machine Catalogs node and click Create Machine Catalog. 2. Click Next on the Introduction screen. 73
3. Select Windows Server OS and click Next. 4. For Machine Management, leave the defaults of Machines that are power managed and Citrix Machine Creation Services (MCS) selected and click Next. 74
5. On the Master Image screen, select Win2012R2Base and then click Next. 6. Change the Number of virtual machines needed to 2. Leave the other defaults and then click Next. 75
7. On the Computer Accounts screen select: Create new Active Directory accounts Expand Training and select VDAs Selected location should read: OU=VDAs,OU=Training,DC=training,DC=lab Type Win2012R2MCS## for the Account naming scheme Click Next. 76
8. Type Win2012R2 MCS Servers for the Machine Catalog name and click Finish. It will take a few minutes for the virtual machines to be provisioned and the machine catalog created. Exercise Summary Machine Creation Services provides an easy-to-use wizard to provision virtual desktops and servers from base templates. 77
Exercise 10 Creating Server-based Delivery Groups and Publishing Applications Overview In this exercise we will create a delivery group for our server machines and publish applications. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. On the Student Desktop, click the XenCenter Icon. 2. Verify that Win2012R2MCS01 is powered on and at the logon screen. If the VM is powered off, start it. At least one machine from each of the server catalogs must be powered on for XenDesktop to automatically discover available applications. Alternatively, publishing custom applications by paths is also an option. 3. Minimize XenServer. 4. From Citrix Studio on DC1, click the Delivery Groups node and then Create Delivery Group. 78
5. Click Next on the Introduction screen. 6. Select the Win2012R2 MCS Servers catalog, add in 2 machines and click Next. 79
7. Select Desktop and Applications and then click Next. 8. Click Add users and add in Domain Users. Then click OK and Next. Adding Domain Users grants all domain users access to all applications published from this delivery group. Later in this exercise, we will limit visibility to prevent access to some applications. 80
9. A list of applications will be gathered from the VDA in that catalog which is powered on. Select Excel 2013, PowerPoint 2013 and Word 2013 and then click Next. 10. Click Next on the StoreFront screen. 81
11. Enter Win2012R2 MCS for both the Delivery Group name and Display name and click Finish. 12. Click the Applications tab and notice the applications that were just published. 13. All applications are currently available to Domain Users since that is how the Delivery Group is assigned. Let s now restrict one of the applications to a subset of Domain Users. Right-click Excel 2013 and go to Properties. 82
14. Click Limit Visibility and select Limit visibility for this application to the users listed below. Click Add Users. 15. Add in User1 and User2 and then click OK. 83
16. Click OK. Exercise Summary Publishing applications can be done when creating a Delivery Group or afterwards by clicking Create Application. It is possible to restrict who can see applications contained within a Delivery Group from the properties of each application. 84
Exercise 11 Setting Up Remote Access Overview In this exercise, we will configure remote access with NetScaler Gateway and StoreFront. NetScaler Gateway enables secure access to StoreFront without exposing the server directly to the internet. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. On the Student Desktop, click the XenCenter Icon. 2. Right-click the NS1 virtual machine and click Start. 3. Click the Snapshots tab. 85
4. Click Take Snapshot 5. Enter Before Remote Access in the Name field and click Take Snapshot. Taking a snapshot enables you to easily revert in case you have to re-run the XenApp and XenDesktop integration wizard. 6. Verify that the Before Remote Access snapshot is now listed. Minimize XenCenter. 7. In the Remote Desktop Connection Manager window, double-click Win81Console to connect. 86
8. Launch Internet Explorer and browse to http://192.168.10.2. Logon as nsroot /Citrix123. 9. Click XenApp and XenDesktop at the bottom left. 87
10. Scroll down and click the Get Started button. 11. Select StoreFront from the drop-down menu and click Continue. 88
12. Enter following information: Virtual Server Name: AG-StoreFront NetScaler Gateway IP Address: 192.168.10.101 Port: 443 Retrieve the FQDN of Public IP 3 from your lab portal page. Gateway FQDN: https://xxx-xxx-xxx-xxx.mycitrixtraining.net Select Redirect requests from port 80 to secure port and click Continue. SAMPLE 13. Select the MCT-Wildcard server certificate and click Continue. 89
14. Enter the following Authentication Settings to allow the NetScaler to serve as a proxy: Primary authentication method: Active Directory/LDAP IP Address: 192.168.10.11 Port: 389 Time out (seconds): 3 Base DN: cn=users, dc=training, dc=lab Service Account: administrator@training.lab Server Logon Name Attribute: samaccountname Password: Citrix123 Confirm Password: Citrix123 Click Continue. 90
15. Enter the following Storefront settings to identify the Storefront server in the lab environment: StoreFront FQDN: sf1.training.lab Site Path: /Citrix/CorporateStoreWeb Single Sign-on Domain: training.lab Store Name: CorporateStoreWeb Secure Ticket Authority Server: http://dc1.training.lab StoreFront Server: 192.168.10.19 Protocol: SSL Port: 443 Click Continue. 16. Click Continue to skip the XenFarm settings. 91
17. Click Apply to apply basic optimization profiles and settings. Select OK in the warning dialog. 18. Click Done to complete the configuration of the Netscaler for Storefront. 92
19. Note the XenApp and XenDesktop virtual server with a state of Up on port 443. 20. Click the Configuration tab and then click the Save icon. 21. Switch to SF1. 22. In the StoreFront Console select Authentication and then click Add/Remove Methods. 93
23. Select Pass-through from NetScaler Gateway and click OK. 24. Under the NetScaler Gateway node, click Add NetScaler Gateway Appliance. 25. Enter the following details where XXX-XXX-XXX-XXX is your translated PortablePublicIP3 in dashed format: Display name: Primary Gateway Access Gateway URL: https://xxx-xxx-xxx-xxx.mycitrixtraining.net Version: 10.0 (Build 69.4) or later Subnet IP Address: 192.168.10.6 Logon type: Domain Click Next. 94
26. Click the Add button to add the following Secure Ticket Authority URLs: http://dc1.training.lab 27. Click Create and then click Finish. 95
28. Under the Stores node, click Enable Remote Access within the s pane. 29. Select No VPN tunnel, check Primary Gateway and then click OK. Exercise Summary NetScaler 10.5 has a simplified wizard for integrating with XenApp and XenDesktop. Several configuration settings are required within StoreFront to enable remote access with NetScaler. 96
Exercise 12 Testing Internal Access Overview In this exercise we will test internal connectivity directly to the StoreFront server. This is an simplified deployment method to allow access from the internal network. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. Switch to Win81Console. 2. Navigate to https://sf1.training.lab/citrix/corporatestoreweb. Click Allow to run the Citirx Add-on. 3. Logon as training\user1 with password Citrix123. 97
4. Launch each of the desktops shown one at a time to confirm connectivity. Log off after the desktop fully loads. If any one of the desktops does not load, retrace your steps through the previous exercises and/or contact a facilitator for assistance. 5. Click the Apps button at the bottom of the Receiver Web site. 6. Click the plus button to the left. 98
7. Click All Apps and then click each one of the application names to add them in. 8. Launch Word 2013 and then close it. 9. Logoff from StoreFront and then click Log On. 10. Logon as training\user3 with password Citrix123. 11. Notice that the same desktops are presented that was shown to user1. 12. Click the Apps button at the bottom of the Receiver Web site. 99
13. Notice that this user doesn t have any applications because applications are considered subscriptions and are made for each user. 14. Click the plus sign and then All Apps. Notice that Excel 2013 is not shown for this user as we restricted it to user1 and user2 only. The other Microsoft Office applications from the same delivery group are available. 15. Logoff from StoreFront and close Internet Explorer. Exercise Summary In this exercise we tested internal connectivity to the StoreFront Web Site for desktops and applications. 100
Exercise 13 Using the Self-Service Plug-in Overview In this exercise we will use the Self-Service Plug-in within Receiver to further integrate within the client desktop. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. From the Win81Console desktop, open Server Manager. 2. From Server Manager click Tools and then click DNS. 3. Select The following computer, enter ad.training.lab, and click OK. 101
4. Expand ad.training.lab and Forward Lookup Zones, right-click training.lab and select Other New Records. 5. Configuring a Service Location DNS record will allow Receiver to auto configure when a user enters their email address. Select Service Location (SRV) and then click Create Record. 102
6. In the New Resource Record dialog box, enter the following values: Service: _citrixreceiver Protocol: _tcp Host offering this service: sf1.training.lab Then click OK. 7. Click Done in the Resource Record Type dialog. 8. Right-click the Receiver icon in the system tray and select Open. 103
9. Enter user1@training.lab for the email address and click Next. 10. Authenticate as training\user1 with password Citrix123 and click Log On. 11. Click Yes. 104
12. Click Finish. 13. Receiver should now launch (if not double-click it in the system tray). Notice that the applications this user previously subscribed to are available. You might need to authenticate again since domain pass-through is not currently configured. Exercise Summary In this exercise, we configured the Windows Self-Service Plug-in within Citrix Receiver for an integrated desktop experience. 105
Exercise 14 Testing External Access Overview In this exercise we will test external connectivity to the environment through NetScaler Gateway and StoreFront. Step by step guidance Estimated time to complete this lab: 10 minutes. Step 1. 2. From your local workstation, launch a browser. Navigate to https://xxx-xxx-xxx-xxx.mycitrixtraining.net where XXX-XXX-XXX- XXX represents your converted PortablePublicIP3. 3. Logon as User1 with password Citrix123. 106
4. The desktops should be displayed. Try launching a connection to one of them and then logoff. You will need to install Citrix Receiver to launch a connection. Contact a facilitator for assistance if needed. 5. Click the Apps button. Notice that the applications we previously subscribed to are shown. Try launching a connection to one of them and then logoff. Exercise Summary In this exercise we verified external connectivity from outside the environment coming in through NetScaler Gateway. 107
Exercise 15 Monitoring with Director Overview Citrix Director is a web-based management console designed for displaying metrics, assisting with common tasks and empowering help desk teams. Aside from providing real-time data on a XenDesktop site, it also collects and displays historical trending information. Director can also be used to shadow user sessions with Microsoft Remote Assistance. Step by step guidance Estimated time to complete this lab: 20 minutes. Step 1. 2. From the Win81Console desktop, launch Internet Explorer and navigate to https://sf1.training.lab. Logon to StoreFront as training\user1 with password Citrix123. 3. Click to launch a session to the Win2012R2 MCS desktop, wait for the session to launch completely. 4. Open a new tab and connect to http://dc1.training.lab/director. 108
5. Logon with the following details: Username: Administrator Password: Citrix123 Domain: training 6. The Dashboard screen loads upon logging in. Browse the data shown here. 7. Click Trends and observe the details on the Sessions screen. 109
8. Scroll to the right and click the Export button. 9. Enter Trends as the name and select CSV from the dropdown. Click Export. 10. Wait a moment for the report to generate and then click Open at the bottom of Internet Explorer. 110
11. The data will open in Excel. Close the document when done viewing. 12. Click the Connection Failures tab and observe the details. 13. Clicking an orange dot on the timeline will display the changes made when failures occurred. Your lab environment may not have any connection failure data. 111
14. Click the Logon Performance tab move the mouse over the graph to see the details. 15. Click Search at the top right. 16. Type User1 in the search for user field and then click User One. 17. Select the connected Win2012R2 MCS session. 18. Scroll to the right and click Details. 19. User1 s session should be displayed in Activity Manager. Spend a moment browsing the data that is displayed. 112
20. Click the Shadow button. 21. Click Open on the information bar. 22. Switch to Win2012R2 PVS virtual desktop. Click Yes on the Windows Remote Assistance dialog. 23. Switch back to the Remote Assistance Window and click Request control towards the top left. 113
24. Switch to the Win2012R2 MCS remote desktop and click Yes on the dialog about Windows Remote Assistance. 25. 26. Switch to the Remote Assistance window and notice that you can now take control of the session. Sign out of the session to Win2012R2 PVS and close Windows Remote Assistance when done. Exercise Summary Director provides a wealth of real-time and historical data that can be exported for distribution or review. Director also allows administrators to shadow user sessions (works for both desktop and application sessions). 114
Revision: Change Description Updated By Date 1.4 Original version Evin Safdia 02/2015 About Citrix Citrix Systems, Inc. designs, develops and markets technology solutions that enable information technology (IT) services. The Enterprise division and the Online Services division constitute its two segments. Its revenues are derived from sales of Enterprise division products, which include its Desktop Solutions, Datacenter and Cloud Solutions, Cloud-based Data Solutions and related technical services and from its Online Services division's Web collaboration, remote access and support services. It markets and licenses its products directly to enterprise customers, over the Web, and through systems integrators (Sis) in addition to indirectly through value-added resellers (VARs), value-added distributors (VADs) and original equipment manufacturers (OEMs). In July 2012, the Company acquired Bytemobile, provider of data and video optimization solutions for mobile network operators. http://www.citrix.com 115