XenApp Plugin for Hosted Apps for Windows Administrator s Guide

XenApp Plugin for Hosted Apps for Windows Administrator s Guide Citrix XenApp Plugin for Hosted Apps 11.x for Windows Citrix XenApp 5.0 for Microsoft Windows Server 2008

Copyright and Trademark Notice Use of the product documented in this guide is subject to your prior acceptance of the End User License Agreement. A printable copy of the End User License Agreement is included with the installation media. Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. Other than printing one copy for personal use, no part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Citrix Systems, Inc. 2001-2008 Citrix Systems, Inc. All rights reserved. Citrix, ICA (Independent Computing Architecture), and Program Neighborhood are registered trademarks, and Citrix Presentation Server, Citrix XenApp, Citrix Password Manager, Citrix Developer Network, Citrix Access Gateway, and Citrix Application Firewall, and SpeedScreen are trademarks of Citrix Systems, Inc. in the United States and other countries. RSA Encryption 1996-1997 RSA Security Inc., All Rights Reserved. Plugin for Windows: Portions of this software are based on code owned and copyrighted by O'Reilly Media, Inc. 1998. (CJKV Information Processing, by Ken Lunde. ISBN: 1565922247.) All rights reserved. OpenSSL includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). Trademark Acknowledgements This product includes software developed by The Apache Software Foundation (http://www.apache.org/). Portions of this software are based in part on the work of the Independent JPEG Group. Portions of this software contain imaging code owned and copyrighted by Pegasus Imaging Corporation, Tampa, FL. All rights reserved. Microsoft, MS, Windows, Windows Server, Win32, Outlook, ActiveX, Visual J#, Visual C++, ClearType, Excel, SQL Server, Microsoft Access, Windows Vista,.NET, Media Player, and Active Directory are trademarks or registered trademarks of Microsoft Corporation in the U.S. and/or other countries. Mozilla and Firefox are registered trademarks of the Mozilla Foundation. Novell, Novell Directory Services, NDS, NetWare, Novell Client, and edirectory are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. SpeechMike is a trademark of Koninklijke Philips Electronics N.V. UNIX is a registered trademark of The Open Group. FLEXnet Operations and FLEXnet Publisher are trademarks and/or registered trademarks of Acresso Software Inc. and/or InstallShield Co. Inc. All other trademarks and registered trademarks are the property of their respective owners. Document Code: September 4, 2008 (jp)

Contents 1 Introduction................................................................... 9 New Names for Citrix Presentation Server Components.............................9 Deciding Which Plugin to Use................................................10 Citrix XenApp Overview....................................................11 How Published Resources are Accessed with Citrix XenApp.....................11 Citrix XenApp Management and Administration...............................11 Citrix XenApp Web Plugin Overview..........................................12 How Published Resources are Accessed with Citrix XenApp Web Plugin...........12 Citrix XenApp Web Plugin Management and Administration....................12 Program Neighborhood Overview.............................................12 How Published Resources are Accessed with Program Neighborhood..............13 Program Neighborhood Management and Administration.......................13 Plugin Comparison Table....................................................13 Citrix Connection Center Overview............................................14 Connection Center Options................................................14 Disconnect Button....................................................14 Full Screen Button....................................................14 Properties Button.....................................................14 Logoff Button........................................................14 File Security Button...................................................14 Audio Security Button.................................................15 PDA Security Button..................................................15 Scanner Security Button................................................16 Terminate Button.....................................................16 Finding Documentation......................................................16 Documentation Conventions...............................................17 Getting Support and Training..............................................17 2 Deploying and Installing Plugin Software......................................... 19 Packaging the Plugin Software................................................19 Creating MSI Packages...................................................20

4 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Configuring Your Installation Files............................................20 To configure an MSI package using the Client Packager........................21 To configure the plugins using command-line parameters........................21 Example of a Command-Line Installation..................................24 To configure an MSI package using transforms................................24 Deploying Your Installation Files..............................................25 Deploying Plugins from a Network Share Point................................25 Deploying the XenApp Web Plugin from a Web Page..........................25 Installation Differences Based on the Operating System, User Type, and Installation Package...................................................................26 Installation Options for the Plugins............................................27 Selecting a User Interface Language.........................................28 Installing the Citrix XenApp plugin.........................................28 Specifying Backup Server Addresses.....................................29 Installing Citrix XenApp Web Plugin........................................29 Installing Program Neighborhood..........................................29 Uninstalling the Plugin Software..............................................30 3 Configuring Plugin Software.................................................... 33 Configuring Citrix XenApp..................................................33 Using the Group Policy Object Template to Customize Citrix XenApp.............34 To import the icaclient template using the Group Policy Management Console....34 To import the icaclient template using the local Group Policy Editor............34 Customizing User Preferences.............................................35 To customize user preferences for Citrix XenApp...........................35 Changing the URL of the Web Interface Server................................35 To change the server URL in Citrix XenApp...............................35 Configuring Program Neighborhood...........................................36 Connecting to Published Resources.........................................36 Application Set.......................................................36 Custom ICA Connection...............................................36 ICA Browsing..........................................................37 Specifying the Network Protocol for ICA Browsing.........................37 Improving Performance over Low-Bandwidth Connections........................40 Changing Your Plugin Configuration........................................41 Changing Plugin Use.....................................................41 To configure settings for multiple users and devices..............................42 4 Optimizing the Plugin Environment.............................................. 43

Contents 5 Securing Your Connections..................................................43 Windows NT Challenge/Response (NTLM) Support for Improved Security.........43 Using Certificate Revocation List Checking for Improved Security................44 To enable certificate revocation list checking...............................44 Smart Card Support for Improved Security...................................45 To select smart card-based logon (Program Neighborhood)...................45 Using Security Support Provider Interface/Kerberos Pass-Through Authentication for Improved Security.........................................................46 Configuring Kerberos Authentication....................................47 Configuring Kerberos Without Pass-Through Authentication..................47 Configuring Kerberos with Pass-Through Authentication.....................48 To configure Kerberos with pass-through authentication......................49 Improving Plugin Performance................................................50 Increasing Image Download Speed..........................................50 To enable SpeedScreen Browser Acceleration..............................50 Reconnecting Users Automatically..........................................51 To disable auto-plugin reconnect for a particular user........................51 Providing Session Reliability..............................................52 Enabling the Program Neighborhood Quick Launch Bar.........................52 Connecting Client Devices and Published Resources..............................53 Providing Continuity for Roaming Users.....................................53 To configure workspace control settings...................................53 Synchronizing PDAs with Tethered USB Connections..........................54 Making Scanning Transparent for Users......................................54 Mapping Client Devices..................................................55 Turning off Client Device Mappings......................................55 Mapping Client Drives.................................................55 Mapping Client Printers................................................57 Mapping Client COM Ports.............................................58 Mapping Client Audio.................................................58 Associating Client Device File Types with Published Applications................59 Configuring Extended Parameter Passing..................................60 Determining the Plugin Executable.......................................60 Identifying Published Applications.......................................61 Including Parameter Passing Arguments...................................61 Entering Parameter Passing in the Windows Registry........................62 Improving the User Experience...............................................62 ClearType Font Smoothing in ICA Sessions..................................63 To enable or disable ClearType font smoothing in Citrix XenApp..............63 To enable or disable ClearType font smoothing in the Web Interface............63

6 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Supporting Digital Dictation...............................................64 Configuring Multiple Monitors.............................................64 Enhancing Printing Performance............................................66 Windows Key Combinations Supported in Remote Sessions.....................67 Plugins Support for 32-Bit Color Icons......................................68 Supporting NDS Users......................................................68 Setting a Default Context for NDS..........................................69 Using Windows NT Credentials with the Novell Client and Pass-Through Authentication 69 To configure individual plugins after installation............................69 Connecting to Citrix XenApp for UNIX........................................70 Using the Window Manager...............................................70 About Seamless Windows..............................................70 Switching Between Seamless and Full Screen Modes........................70 Minimizing, Resizing, Positioning, and Closing Windows....................70 Using the Citrix Window Manager Menus...................................71 To access the ctxwm menu system.......................................71 To choose an option from the ctxwm menu................................71 Cutting and Pasting Graphics Using ctxgrab and ctxcapture......................71 Using ctxgrab........................................................71 Using ctxcapture......................................................72 Matching Client Names and Computer Names...................................73 DNS Name Resolution......................................................73 Disabling DNS Name Resolution...........................................74 To disable DNS name resolution on the Plugins for Windows.................74 5 Securing Plugin Communication................................................ 75 Support for Microsoft Security Templates.......................................75 Connecting Through a Proxy Server...........................................75 Citrix XenApp and Citrix XenApp Web Plugin and Proxy Server Settings..........76 Program Neighborhood and Proxy Server Settings.............................76 Enabling Auto-Plugin Proxy Detection....................................76 To enable auto-plugin proxy detection....................................76 Enabling Automatic Proxy Detection.....................................77 Manually Specifying the Details of Your Proxy Server.......................78 Configuring the User Name and Password.................................78 Connecting with the Secure Gateway or Citrix Secure Sockets Layer Relay............80 Connecting with the Secure Gateway........................................80 Configuring Citrix XenApp and Citrix XenApp Web Plugin for Secure Gateway..81 Configuring Program Neighborhood for Secure Gateway.....................81

Contents 7 Connecting with Citrix SSL Relay..........................................82 Client Device Requirements............................................83 About Root Certificates................................................83 Using Citrix SSL Relay with Nonstandard TCP Ports........................83 Configuring and Enabling Plugins for SSL and TLS...............................85 Forcing TLS Connections for all Plugins.....................................85 To configure Program Neighborhood to use SSL/TLS........................86 To configure Citrix XenApp to use SSL/TLS...............................86 To configure TLS support..............................................87 Meeting FIPS 140 Security Requirements.................................88 Installing Root Certificates on the Client Devices..............................89 Securing Citrix XenApp with SSL/TLS......................................89 Configuring the Server Running the Web Interface..........................89 Configuring the Computer Running Citrix XenApp..........................90 Configuring the Client Device...........................................90 Enabling Smart Card Logon...............................................91 Smart Card Logon with Kerberos Pass-Through Authentication................91 Smart Card Logon without Pass-Through Authentication.....................91 Connecting Through a Firewall...............................................92 To connect to a server through a firewall.....................................92 Enforcing Trust Relations....................................................92 To enable trusted server configuration.......................................93

8 XenApp Plugin for Hosted Apps for Windows Administrator s Guide

CHAPTER 1 Introduction This XenApp Plugin for Hosted Apps for Windows Administrator s Guide is designed for system administrators responsible for installing, configuring, deploying, and maintaining Citrix XenApp and Citrix XenApp Plugin for Hosted Apps and assumes knowledge of the following: The server farm to which your plugins connect The operating system on the client device Users run the Citrix XenApp Plugin for Hosted Apps on their client devices to access resources published on XenApp servers. The plugins combine ease of deployment and use, and offer quick, secure access to applications, content, and entire server desktops. This document introduces Version 11.x of the plugins for computers running 32- bit or 64-bit Windows operating systems. It is designed to help you decide which plugins to use in your computing environment. Note: For information about the plugin for Windows CE devices, refer to the Client for Windows CE Handheld PCs Administrator s Guide available from the Downloads section of the Citrix Web site, http://www.citrix.com/. New Names for Citrix Presentation Server Components Citrix XenApp is the new name for Citrix Presentation Server. The following clients and components have been updated to reflect that product name. Citrix XenApp Advanced Configuration is the new name for the Presentation Server Console Citrix XenApp Plugin for Hosted Apps is the new name for the plugin for server-side virtualization (formerly named Citrix Presentation Server Client), which contains the following plugins: Citrix XenApp, formerly named Program Neighborhood Agent

10 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Citrix XenApp Web Plugin, formerly named the Web Client Program Neighborhood Citrix XenApp Plugin for Streamed Apps is the new name for the plugin for client-side virtualization, formerly named the Citrix Streaming Client Citrix XenApp Provider is the new name for the WMI Provider Citrix XenApp Management Pack is the new name for the System Center Operations Manager and MOM Management Packs Deciding Which Plugin to Use Different enterprises have different corporate needs, and your expectations and requirements for the way users access your published resources can shift as your corporate needs evolve and grow. This section summarizes the plugins you can use and how to decide which one best suits your needs. The plugins are: Citrix XenApp (formerly named Program Neighborhood Agent) Program Neighborhood Citrix XenApp Web Plugin (formerly named the Web Client) For information about plugins for other client devices and operating systems, visit our Web site at http://www.citrix.com/. Each of the plugins differs in terms of: Access method by which published resources are delivered to users. Resources can be delivered to users by three different methods through a Web browser, through a user interface, or on the desktop. Extent of user involvement in configuring, administering, and managing the plugin. Support for the XenApp feature set. For a complete list of Citrix XenApp features, refer to the Plugin Feature Matrix available from the Plugin Download page of the Citrix Web site (http://www.citrix.com/). To decide which plugin best fits your needs, consider the way you want users to access your published resources, the way you want to manage this access, and the feature set that your users will need.

1 Introduction 11 Citrix XenApp Overview Citrix XenApp supports the full XenApp feature set. Using Citrix XenApp with the Web Interface, you can integrate published resources with users desktops. It is centrally administered and configured in the Access Management Console using a Citrix XenApp site created in association with a site for the server running the Web Interface. Citrix XenApp is one of two plugins (the other being the Citrix XenApp Web Plugin) that operates with the client-side application virtualization plugin, Citrix XenApp Plugin for Streamed Apps, to provide application streaming to the user desktop. Install Citrix XenApp on client devices running the Citrix XenApp Plugin for Streamed Apps to take advantage of the full set of application streaming features of XenApp and Citrix XenApp. For more information about the streamed application feature, see the Citrix Application Streaming Guide. Important: Citrix XenApp requires the Citrix Web Interface. How Published Resources are Accessed with Citrix XenApp Citrix XenApp allows your users to access all of their published resources from a familiar Windows desktop environment. Users work with your published resources the same way they work with local applications and files. Published resources are represented throughout the client desktop, including the Start menu and the Windows notification area, by icons that behave just like local icons. Users can double-click, move, and copy icons, and create shortcuts in their locations of choice. Citrix XenApp works in the background. Except for a shortcut menu available from the notification area, it does not have a user interface. Citrix XenApp Management and Administration You configure Citrix XenApp at a site created in the Access Management Console and associated with the site for the server running the Web Interface. By using the Access Management Console in this way, you can manage and control your client population dynamically throughout your network from a single location and in real time.

12 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Citrix XenApp Web Plugin Overview Citrix XenApp Web Plugin is a smaller plugin that can be installed from the XenAppWeb.msi or the XenAppWeb.exe file. Citrix XenApp Web Plugin setup files are significantly smaller than those for the other plugins. The small size allows users to download and install the plugin software quickly. How Published Resources are Accessed with Citrix XenApp Web Plugin If you want users to access published resources from within a familiar browser environment, use Citrix XenApp Web Plugin. Users access published resources by clicking links on a Web page you publish on your corporate intranet or the Internet. The published resource launches either in the same window or in a new, separate browser window. Citrix XenApp Web Plugin does not require user configuration and does not have a user interface. Citrix XenApp Web Plugin Management and Administration You can use Citrix XenApp Web Plugin to access resources available from the Web Interface and for access to resources published with traditional Application Launching and Embedding (ALE). Publish links to your resources with the Web Interface or by using an HTML wizard. This plugin requires the presence on client devices of Microsoft Internet Explorer 6.0 or 7.0; or Mozilla Firefox 1.0 and later. Program Neighborhood Overview Program Neighborhood supports the full XenApp feature set and it requires user configuration and maintenance. Use Program Neighborhood if you are not using the Web Interface to deliver resources. Program Neighborhood cannot be configured from a centralized site, such as the Citrix XenApp site; thus, it does not require the Web Interface. Program Neighborhood does not support zone preference and failover on XenApp.

1 Introduction 13 How Published Resources are Accessed with Program Neighborhood If you want users to access your published resources from within a distinctive user interface, use Program Neighborhood. Using Program Neighborhood s own user interface, the Program Neighborhood window, users can browse for groups of published resources (referred to as application sets) or create custom connections to individual published resources or to XenApp servers. Icons representing application sets and custom ICA connections appear in the Program Neighborhood window. Program Neighborhood Management and Administration You can set up scripted updates for Program Neighborhood using various.ini files and users can also configure options for Program Neighborhood using its interface. For this reason, users running Program Neighborhood must be able to navigate through the interface easily and be able to understand the implications of any changes to their options. Choose Program Neighborhood if you do not want to publish your resources using the Web Interface. If you choose to implement the Web Interface at a later time, Program Neighborhood users can also access resources published through the Web Interface. However, if you are planning to use the Web Interface and did not deploy any plugins, use the Citrix XenApp or Citrix XenApp Web Plugin. Plugin Comparison Table Plugin Access method User involvement Plugin features Citrix XenApp Transparent integration of published resources into user s desktop Central administration of user settings Supports the full feature sets of XenApp server. Citrix XenApp Web Plugin Web browser-based access to published resources Central administration of user settings Supports the full feature sets of XenApp server. Program Neighborhood An interface users access from their desktops Requires initial user configuration Supports the full feature sets of XenApp server except for zone preference and failover.

14 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Citrix Connection Center Overview The Citrix Connection Center displays all ICA connections established from a client. The ICA Connections window displays a list of active ICA sessions. Each server entry in the list represents an ICA session. For each seamless session, below each server entry, a list of the published resources you are running on that server appears. Connection Center Options The Connection Center offers various options to view statistics and control sessions and applications. Disconnect Button The Disconnect button disconnects the currently selected server session. Full Screen Button When the Full Screen button is clicked, the currently selected seamless connection switches to a full screen session. Press SHIFT+F2 to return this session to seamless mode. Properties Button Displays communication statistics for the selected server. The user name, server name, encryption level, session reliability, and SpeedScreen settings also appear for the currently selected session. Logoff Button To log off from a server, select a server entry from the list and click Logoff. The ICA session ends and all published applications you are running on that server are terminated. File Security Button Note: This button is functional only when a connection is made from the Web Interface. The File Security button opens the File Security dialog box. Use the File Security dialog box to set access permissions of published applications to files located on your mapped local drive. The settings do not affect the applications permissions to access files located on the server.

1 Introduction 15 Choose No Access to deny the published application any access to your local files. Choose Read Access to give the published application read-only access to your associated local files. Choose Full Access to give the published application read-write access to your associated local files. Only the Full Access option allows you to save changes to your local drive. Note: Special Folder Redirection requires access to the Documents and Desktop folders on the user s local computer. When a user launches an application through the Web Interface and selects No Access in the File Security dialog box in Connection Center, access is denied to the user s local workstation drives including the user s local Documents and Desktop folders. As a result, some applications might be unstable when trying to perform read/write operations to the denied folders. To avoid this, always grant full local access when Special Folder Redirection is enabled. See the Citrix XenApp Administrator s Guide for information about Special Folder Redirection. Audio Security Button This button is functional only when a connection is made from the Web Interface. The Audio Security button opens the Audio Security dialog box. Use the Audio Security dialog box to set published application access permissions to your computer s microphone for recording audio transmissions. Choose No to deny the published application access to your computer s microphone Choose Yes to give the published application access to your computer s microphone to record your audio transmissions Audio Security applies only to audio input. A microphone is required for audio input. PDA Security Button This button is functional only when a connection is made from the Web Interface. The PDA Security button opens the PDA Security dialog box. Use the PDA Security dialog box to set published application access permissions to your local PDA device. Choose No to deny the published application access to the PDA device Choose Yes to give the published application access to the PDA device

16 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Scanner Security Button This button is functional only when a connection is made from the Web Interface. The Scanner Security button opens the Scanner Security dialog box. Use the Scanner Security dialog box to set published application access permissions to your local scanners, digital cameras, or other devices to acquire still image files. Choose No to deny the published application access to your image acquisition devices Choose Yes to give the published application access to your image acquisition devices Terminate Button To terminate an individual published application connection, select a published application and click Terminate. If you have other published applications running on that server, the ICA session remains active and the published applications remain running. If no other published applications are running on the server, the ICA connection to the server is terminated. Finding Documentation Welcome to Citrix XenApp (Read_Me_First.html), which is included on the installation media, contains links to documents that will help get you started. It also contains links to the most up-to-date product documentation for XenApp and its components, plus related technologies. After installing documentation and help from Autorun, you can access this document by clicking Start > All Programs > Citrix > XenApp Server > Documentation. The Citrix Knowledge Center Web site, http://support.citrix.com, contains links to all product documentation, organized by product. Select the product you want to access and then click the Documentation tab from the product information page. Known issues information is included in the product readme. See the Citrix XenApp Comparative Feature Matrix at http://www.citrix.com/ xenapp/comparativematrix for information about which features are supported in the XenApp editions. To provide feedback about the documentation, click the Article Feedback link located on the right side of the product documentation page.

1 Introduction 17 Documentation Conventions For consistency, Windows Vista and Windows Server 2008 (64-bit) terminology is used throughout the documentation set; for example, Documents rather than My Documents and Computer rather than My Computer are used. Citrix XenApp documentation uses the following typographic conventions. Convention Boldface Italics Monospace {braces} Meaning Commands, names of interface items such as text boxes, option buttons, and user input. Placeholders for information you provide. For example, filename means you type the actual name of a file. Italics are also used for new terms and titles of books. Text displayed in a text file. In a command, a series of items, one of which is required. For example, {yes no } means you must type yes or no. Do not type the braces themselves. [ brackets ] In a command, optional items. For example, [/ping] means you can type /ping with the command. Do not type the brackets themselves. (vertical bar) In a command, a separator between items in braces or brackets. For example, { /hold /release /delete } means you must type /hold or /release or /delete.... (ellipsis) The previous item(s) in the command can be repeated. For example, /route:devicename[, ] means you can type additional devicenames separated by commas. Getting Support and Training Citrix provides an online user forum for technical support. This forum can be accessed at http://support.citrix.com/xenappforum/. The Web site includes links to downloads, the Citrix Knowledge Center, Citrix Consulting Services, and other useful support pages. The Citrix Knowledge Center (http://support.citrix.com) offers a variety of technical support services, tools, and developer resources. Information about Citrix training is available at http://www.citrix.com/edu/.

18 XenApp Plugin for Hosted Apps for Windows Administrator s Guide

CHAPTER 2 Deploying and Installing Plugin Software The Citrix XenApp server installation media contains the installation files for Citrix XenApp Plugin for Hosted Apps in the Clients directory. This section describes how to deploy and install your plugin software. Topics include: Ensuring you meet the system requirements Packaging the plugin software Configuring the installation package to limit user interaction in the installation process Deploying the installation package to users Installing the plugin software; specifically, the options that the Setup wizard presents to your users Uninstalling the plugin software Before you upgrade the plugins, check if your users previously installed the Citrix Streaming Clients Package.msi, which included the client for streaming and the Citrix XenApp Plugin for Hosted Apps (formerly named the Presentation Server Clients). Citrix no longer releases or supports the Streaming Clients package. If your list of removable programs shows Citrix Streaming Clients for Windows, uninstall that package, and then individually install the current versions of the Citrix XenApp Plugin for Hosted Apps using XenAppHosted.msi, and Citrix XenApp Plugin for Streamed Apps, using XenAppStreaming.exe. Packaging the Plugin Software You can install the plugins using a Microsoft Windows Installer package (MSI). You can allow users to choose their own options when installing or you can preconfigure an MSI package to select certain options in advance. If all options are preconfigured, the install is silent, requiring no user interaction.

20 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Each installation that includes the plugins also includes the Citrix Connection Center, allowing users to see information about their current ICA connections. Note: If you installed a previous version of the plugin software on client devices by using the Access Client package, you cannot upgrade the plugin software using stand-alone plugin installation software. To install this version of the plugin software on client devices where the Access Client package is deployed, uninstall the Access Client package first. (Removing the Access Client package removes all previous plugins from the client device.) Creating MSI Packages The installation packages, XenAppHosted.msi (also called the Client Packager) and XenAppWeb.msi for the Citrix XenApp Web Plugin, are provided on the installation media. Using the Client Packager, you can wrap all of the plugins into a single MSI package. You can customize the Client Packager to deploy and maintain any number and combination of plugins network-wide. Based on Windows Installer technology, using the Client Packager you can install, uninstall, modify, and repair plugins as well as perform controlled plugin upgrades. Important: To install the plugin software using an MSI package, the Windows Installer Service must be installed on the client device. This service is present by default on systems running Windows XP, Windows Vista, Windows Server 2003, or Windows Server 2008. To install plugins on client devices running Windows 2000, you must install the Windows Installer 3.0 Redistributable for Windows, available at http://www.microsoft.com/. Configuring Your Installation Files If you choose to use MSI packages to deploy the plugins, you can preconfigure numerous settings for your users. You can remove some user interaction in the installation process or all of it; thus enforcing a silent installation. This section details how to configure these settings. MSI packages can be configured in three ways: With the Client Packager Using command-line parameters Using transforms

2 Deploying and Installing Plugin Software 21 To configure an MSI package using the Client Packager 1. Copy the Client Packager (XenAppHosted.msi) from the installation media to a local directory. 2. Create a share point on a file server that is accessible to your users. 3. Type the following at a command prompt: msiexec.exe /a path/xenapphosted.msi where path/ is the local path where you placed this file in Step 1. The Client Packager Setup wizard appears. 4. Enter the Uniform Naming Convention (UNC) path to the network share point where you want to store the customized package. 5. Select your compression option and click Next. 6. Select one or more plugins to be included in the install package. If you select Program Neighborhood or Citrix XenApp, the Setup wizard for each plugin appears. 7. On the Upgrade Settings page, choose whether or not the install package can upgrade or downgrade existing plugins. 8. On the Select User Dialog Boxes page, specify the dialog boxes displayed to users when they run the install package. 9. Verify your selections on the summary page and click Finish. The install package you specified above is created in the specified UNC path. To configure the plugins using command-line parameters 1. On the computer where you want to install the plugin package, type the following at a command prompt: msiexec.exe /I path/xenapphosted.msi [Options] where path/ is the location of the MSI package and [Options] can be any of the traditional MSI command-line parameters. 2. Set your options as needed. These are the recommended parameters. See the Microsoft documentation for a complete list of parameters. /qn executes a completely silent installation. /qb shows simple progress and error handling.

22 XenApp Plugin for Hosted Apps for Windows Administrator s Guide /qb-! shows simple progress and error handling without displaying a Cancel button to the user. /l*v logfile_path creates a verbose install log where logfile_path is the path and filename for where to save the log. Use quotation marks for a path with spaces. PROPERTY=Value Where PROPERTY is one of the following all-uppercase variables (keys) and Value is the value the user should specify. PROGRAM_FOLDER_NAME=Start Menu Program Folder Name, where Start Menu Program Folder Name is the name of the Programs folder on the Start menu containing the shortcut to the Citrix XenApp software. The default value is Citrix\. This function is not supported during plugin upgrades. INSTALLDIR=Installation directory, where Installation directory is the location where the plugin software is installed. The default value is C:\Program Files\Citrix\ICA Client. CLIENT_NAME=ClientName, where ClientName is the name used to identify the client device to the server farm. The default value is %COMPUTERNAME%. ENABLE_DYNAMIC_CLIENT_NAME={Yes No}. To enable dynamic client name support during silent installation, the value of the property ENABLE_DYNAMIC_CLIENT_NAME in your installer file must be Yes. To disable dynamic client name support, set this property to No. For more information about this feature, see Matching Client Names and Computer Names on page 73. ADDLOCAL=feature[,...]. Install one or more of the specified features. When specifying multiple feature parameters, separate each parameter with a comma and without spaces. The names are case sensitive. ICA_Client. Plugin engine component (always installs) PN. Installs Program Neighborhood (not installed by default) PN_AGENT. Installs Citrix XenApp WEB_CLIENT. Installs Citrix XenApp Web Plugin SSON. Installs the files for pass-through authentication

2 Deploying and Installing Plugin Software 23 CLIENT_UPGRADE={Yes No}. By default, this property is set to Yes. This installs the plugin if an earlier version of the plugin is already installed. ENABLE_SSON={Yes No}. The default value is No. If you enable the SSON (pass-through authentication) property, set the ALLOW_REBOOT property to No to avoid automatic restarting of the client system. Important: If you disable pass-through authentication, users must reinstall the plugin if you decide to use pass-through authentication at a later time. ALLOW_REBOOT={Yes No}. The default value is Yes. DEFAULT_NDSCONTEXT=Context1 [, ]. Include this parameter if you want to set a default context for Novell Directory Services (NDS). If you are including more than one context, place the entire value in quotation marks and separate the contexts by a comma. Examples of correct parameters: DEFAULT_NDSCONTEXT=Context1 DEFAULT_NDSCONTEXT="Context1,Context2" Example of an incorrect parameter: DEFAULT_NDSCONTEXT=Context1,Context2 SERVER_LOCATION=Server_URL. The default value is Web Server. Enter the URL of the server running the Web Interface. The URL must be in the format http://servername or https://servername. Citrix XenApp appends the default path and file name of the configuration file to the server URL. If you change the default location of the configuration file, you must enter the entire new path in the SERVER_LOCATION key. CTX_PN_ENABLE_CUSTOMICA = {Yes No}. By default, this property is set to Yes. Defines whether or not you want to enable the Custom Connection icon in Program Neighborhood. CTX_PN_ENABLE_QUICKLAUNCH = {Yes No}. By default, this property is set to Yes. Defines whether or not you want to enable the Quick Launch bar in Program Neighborhood.

24 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Example of a Command-Line Installation Using the above procedure, a command-line configuration of your MSI package could resemble: msiexec.exe /I XenAppHosted.msi /qb-! /l*v c:\my logs\ica32_install.log ADDLOCAL=ICA_Client,PN_AGENT,WEB_CLIENT SERVER_LOCATION=http://mywebinterface This example: Installs defined plugins with visible progress dialog boxes, but the Cancel button is disabled for the user Logs the installation messages to c:\my logs\ica32_install.log Installs the plugin engine, Citrix XenApp, and Citrix XenApp Web Plugin Specifies the URL (http://mywebinterface) of the server running the Web Interface that Citrix XenApp will reference To configure an MSI package using transforms Important: Transforms manipulate the installation process by making changes to the installation database contained within a Windows Installer package. Do not attempt the following procedure if you are not familiar with transforms and their impact on these settings. For more information, see the Citrix XenApp Administrator s Guide. 1. Using your preferred tool for editing Windows Installer packages, open the Client Packager (XenAppHosted.msi). 2. In the Property table, enter new values for the properties you want to change. 3. Generate the transform file and save it with a.mst file extension. 4. To install the MSI package and use the transform you just created, follow the same steps as outlined in To configure the plugins using command-line parameters on page 21. Additionally, however, you must add the following TRANSFORMS = path\ my.mst where path is the location of the transform and my.mst is its file name.

Deploying Your Installation Files 2 Deploying and Installing Plugin Software 25 You can deliver plugin software to your users using several methods, depending on the size of your organization and the available resources. This section describes some of the methods by which you can deploy your plugin installation files. If you are using XenApp with the Web Interface, see the Web Interface Administrator s Guide for information about deploying plugins in that environment. MSI packages can be deployed with Windows Active Directory Services or Microsoft Systems Management Server. See your Windows or Systems Management Server documentation for more information. Deploying Plugins from a Network Share Point In many environments, your users can access internal resources from network share points. You can centralize your plugin deployment by deploying an MSI package from a single network share point. Use the Client Packager to configure your installation settings. During this procedure you can provide a UNC path to the network share point where you want to store the customized MSI package. Note: You can also use Active Directory Group Policy to install the plugin software or provide the network path to your users. See your Windows or Systems Management Server documentation for more information. Related topics: Packaging the Plugin Software on page 19 Deploying the XenApp Web Plugin from a Web Page The Citrix XenApp installation media also contains the XenAppWeb.exe installation package, which is functionally the same as the XenAppWeb.msi package. The only difference is that you can deploy the XenAppWeb.exe package from a Web page to ensure that users have the plugin installed before they try to use the Web Interface. Create a home page and run an Internet Explorer script to download the XenAppWeb.exe package automatically from the Web server and install it for the user.

26 XenApp Plugin for Hosted Apps for Windows Administrator s Guide To install the plugin software using XenAppWeb.exe, the Windows Installer Service must be installed on the client device. This service is present by default on systems running Windows XP, Windows Vista, Windows Server 2003, or Windows Server 2008. To install plugins on client devices running Windows 2000, you must install the Windows Installer 3.0 Redistributable for Windows, available at http://www.microsoft.com/. Add the site(s) from which the XenAppWeb.exe file is downloaded to the Trusted Sites zone. Related topics: Packaging the Plugin Software on page 19 Installation Differences Based on the Operating System, User Type, and Installation Package The outcome of XenAppHosted.msi or XenAppWeb.exe package plugin installations differs based on the combination of the operating system on the client device, user type, whether User Account Control (UAC) is enabled or disabled on Windows Vista and Windows 2008 computers, and which installation package is used. This table contains various plugin installation scenarios. The first column contains the operating system and user type for the computer on which the software is installed. The second and third columns describe which plugin features are installed and whether the installation is per-computer or per-user based on the installation package and the scenario outlined in the first column. Operating system and user type XenAppHosted.msi XenAppWeb.exe OS: Windows 2000, Windows XP, and Windows Server 2003 User: Administrator Installation type: per-computer Features: Citrix XenApp, Program Neighborhood, Citrix XenApp Web Plugin, and passthrough authentication Installation type: percomputer Features: Citrix XenApp Web Plugin OS: Windows 2000, Windows XP, and Windows Server 2003 User: Non-administrator Installation type: per-user Features: Citrix XenApp Web Plugin Installation type: per-user Features: Citrix XenApp Web Plugin

2 Deploying and Installing Plugin Software 27 Operating system and user type XenAppHosted.msi XenAppWeb.exe OS: Windows Vista and Windows Server 2008 User: Built-in administrator with UAC disabled OS: Windows Vista and Windows Server 2008 User: Built-in administrator with UAC enabled OS: Windows Vista and Windows Server 2008 User: Standard user Installation type: per-computer Features: Citrix XenApp, Program Neighborhood, Citrix XenApp Web Plugin, and passthrough authentication Installation type: per-computer Features: Citrix XenApp, Program Neighborhood, Citrix XenApp Web Plugin, and passthrough authentication Not supported Installation type: percomputer Features: Citrix XenApp Web Plugin Installation type: per-user Features: Citrix XenApp Web Plugin Installation type: per-user Features: Citrix XenApp Web Plugin Related topics: Packaging the Plugin Software on page 19 Installation Options for the Plugins For each MSI package, the Setup wizard guides you through the process of installing the plugin software. When Setup begins, a series of information pages and dialog boxes prompts you to select options and configure the product. In each installation, you must accept the Citrix License Agreement before Setup continues. Note: The Canadian keyboard layouts now are aligned with those supported by Microsoft. If users install the plugins without uninstalling the Presentation Server Clients Version 10.x first, they must manually edit the module.ini file (usually in C:\Program Files\Citrix\ICA Client) to upgrade the keyboard layout settings: Replace: Canadian English (Multilingual)=0x00001009 Canadian French=0x00000C0C Canadian French (Multilingual)=0x00010C0C With: Canadian French=0x00001009 Canadian French (Legacy)=0x00000C0C Canadian Multilingual Standard=0x00011009

28 XenApp Plugin for Hosted Apps for Windows Administrator s Guide Selecting a User Interface Language The Windows Installer package includes a Multilingual User Interface, meaning it installs the plugins in all supported languages automatically. During the installation, the user selects a language for the user interface: German (Deutsch), English, Spanish (Español), French (Français), Japanese, Russian, Simplified Chinese, or Traditional Chinese. After the plugin is installed, the user interface appears in the language stored in the ICA_UILocale registry value. If the value does not exist or has no data, the user interface language of the plugin is determined by the following factors, in order: The UILocale ICA parameter defined in the ICA file is checked if an ICA session is getting started If the language specified in the UILocale ICA parameter is not supported, the user s default language is checked If the user s default language is not supported, the system s default language is checked If the system s default language is not supported, the user interface defaults to English Installing the Citrix XenApp plugin When users install Citrix XenApp, they are presented with the following options: Upgrade existing plugin software. Setup searches the client device for previously installed versions of Citrix XenApp. If Setup detects a previous installation of Citrix XenApp, the user can upgrade Citrix XenApp. The default value is Upgrade the existing plugin. If you are upgrading with the MSI package, you are not presented with any further options. Select Program Folder. Users can choose to use the default plugin folder, specify the name of a new program folder, or add the Citrix XenApp icon to an existing folder. Specify the Server Address. Users must enter the URL of the appropriate server running the Web Interface in the format http://servername (for non-secure connections) or https://servername (for secure connections). Citrix XenApp connects to the server at startup to get the latest configuration information including available published resources and permissions to change local settings.