Client for 32-bit Windows Administrator's Guide - Citrix Knowledge ...

More documents

Recommendations

Info

84 Client for 32-bit Windows Administrator’s Guide Go to Document Center6. Enter the fully qualified domain name (FQDN) of the Secure Gateway server inthe Secure gateway address box.Important The fully qualified domain name (FQDN) must list, in sequence,the following three components:• Host name• Intermediate domain• Top-level domainFor example: my_computer.my_company.com is an FQDN, because it lists, insequence, a host name (my_computer), an intermediate domain (my_company),and a top-level domain (com). The combination of intermediate and top-leveldomain (my_company.com) is generally referred to as the domain name.7. Enter the port number in the Port box.8. Click OK twice.Citrix SSL RelayBy default, Citrix SSL Relay uses TCP port 443 on the server running MetaFramePresentation Server for SSL/TLS-secured communication. When the SSL Relayreceives an SSL/TLS connection, it decrypts the data before redirecting it to theserver running MetaFrame Presentation Server, or, if the user selects SSL/TLS+HTTPS browsing, to the Citrix XML Service.You can use Citrix SSL Relay to secure communications:• Between an SSL/TLS-enabled Client and a server running MetaFramePresentation Server. Connections using SSL/TLS encryption are marked with apadlock icon in Citrix Connection Center.• With a server running the Web Interface, between the server runningMetaFrame Presentation Server and the Web server.For information about configuring and using SSL Relay to secure your MetaFramePresentation Server installation, see the MetaFrame Presentation ServerAdministrator's Guide. For information about configuring the server running theWeb Interface to use SSL/TLS encryption, see the Web Interface Administrator'sGuide.
Go to Document Center Chapter 6 Securing Client Communication 85System RequirementsIn addition to the system requirements listed for each Client in its respectivechapter, you also must ensure that:• The client device supports 128-bit encryption• The client device has a root certificate installed that can verify the signature ofthe Certificate Authority on the server certificate• The Client is aware of the TCP listening port number used by the SSL Relayservice in the server farmVerifying Cipher Strength/128-bit EncryptionIf you have Internet Explorer installed on your system, you can determine theencryption level of your system as follows:1. Start Internet Explorer.2. From the Help menu, click About Internet Explorer.3. Check the Cipher Strength value. If it is less than 128-bit, you need to obtainand install a high encryption upgrade from the Microsoft Web site. Go tohttp://www.microsoft.com/ and search for “128-bit” or “strong encryption.”4. Download and install the upgrade.If you do not have Internet Explorer installed, or if you are not certain about theencryption level of your system, visit Microsoft’s Web site athttp://www.microsoft.com/ to install a service pack that provides 128-bitencryption.Note The Clients support certificate key lengths of up to 4096 bits. Ensure thatthe bit lengths of your Certificate Authority root and intermediate certificates, andthose of your server certificates, do not exceed the bit length your Clients support,or connection may fail.About Root CertificatesSee “Installing Root Certificates on the Clients” on page 89 for information aboutroot certificates.Important All secure systems need to be maintained. Ensure that you apply anyservice packs or upgrades that Microsoft recommends.
Page 5:
Go to Document Center Contents 5Con
Page 8 and 9:
8 Client for 32-bit Windows Adminis
Page 10 and 11:
10 Client for 32-bit Windows Admini
Page 12 and 13:
Page 14 and 15:
Page 17 and 18:
Go to Document CenterDeploying Clie
Page 19 and 20:
Go to Document Center Chapter 2 Dep
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Go to Document CenterConfiguring th
Page 33 and 34: Go to Document Center Chapter 3 Con
Page 39: Go to Document Center Chapter 3 Con
Page 42 and 43: 42 Client for 32-bit Windows Admini
Page 95 and 96: Go to Document CenterUpdating the C
Page 97 and 98: Go to Document Center Chapter 7 Upd
Page 105 and 106: Go to Document Center Index 105Inde
Page 107: Go to Document Center Index 107Sess
show all

Client for 32-bit Windows Administrator's Guide - Citrix Knowledge ...

Create successful ePaper yourself

Delete template?

Save as template?