How to Install Web Interface on a Standalone Web Server and Configure it for XenDesktop 3

RoyATokeshi
July 14, 2009 4:13 am

How to Install Web Interface on a Standalone Web Server and Configure it for XenDesktop 3.0

Document ID: CTX119762 / Created On: Feb 20, 2009 / Updated On: Jun 25, 2009
Average Rating:
View products this document applies to

Summary

This article describes how to install Web Interface on a standalone Web Server and configure it for XenDesktop 3.0.

Background

Citrix XenDesktop 3.0 requires Web Interface 5.1 to function properly. By default, Web Interface 5.1 is installed on the Desktop Delivery Controller (DDC) and three Web Interface sites are created. It is possible to install Web Interface 5.1 on a standalone Web server. If installed on a standalone server, a utility called Site Manager can be used to create and modify Web Interface sites. This article contains information about how to install Web Interface on a separate server to the DDC and to configure it for XenDesktop using the Site Manager tool.

Note: Citrix recommends that you secure communications between the Web Interface and the Citrix XML service. For more information, consult the Web Interface Administrator’s Guide.

Procedure

Install Web Interface

The Web interface installer can be located on the installation DVD under:

[DVD drive:]\w2k3\en\Web Interface\WebInterface.exe

This executable displays a graphical user interface where select questions are asked to complete the installation. The Web Interface installation can be run silently using a set of command line options, refer to the Web Interface Administrator’s Guide for more information on this.

Site Manager

After installing Web Interface for Windows, add the sitemgr.exe tool to the Program Files\Citrix\Web Interface\[Version]\ directory. Use sitemgr.exe to add, remove, or modify sites for the Web Interface installation. The three site types can be deployed by invoking the Site Manager executable:

• Desktop Appliance Connector (DAC). This site offers simple authentication and launching of a single desktop, in Full Screen Only Mode and is used for Linux, WinCE and XP embedded (non-domain joined) desktop appliances only.

• Program Neighborhood Agent site. This site is used to support Full Screen Only Mode on domain-joined Windows XP and XP embedded clients.

• Traditional Web Interface site. This site (which should be UI branded for Desktops) is used to cater to all other scenarios, including access from a standard machine (using a Web browser and connection bar client) and access to multiple desktops.

Sitemgr.exe is a command line tool whose options can be viewed by using the /? switch.

The following three subsections describe how to create each Web Interface site. Each of these sites should also be configured after creation. The Post Installation Configuration section below explains the configuration options that should be used for compatibility with XenDesktop 3.0.

Desktop Appliance Connector Site Creation

Command:

Sitemgr.exe –c “DACDest=1:/Citrix/DesktopAppliance,AppAccessMethods=Remote,XMLService=,XMLSPort=
,SiteName=DAC Site"

Command breakdown:

Site Manager command line string

Comment

Sitemgr.exe –c

Create a new site using a definition (in quotes)

"DACDest=1:/ Citrix/DesktopAppliance,

Create DAC site at IIS site #1 (the IIS Default Web Site) using the XenDesktop path

AppAccessMethods=Remote,

Access resources published on a server

XMLService=,

Set the first farm to use the XML Service at (one or more semicolon-separated server names).

XMLSPort=
,

The port used to contact the XML Service

SiteName=DAC Site”

The site name as used in XenDesktop

Program Neighborhood Agent Site Creation

Command:

Sitemgr.exe –c "PNADest=1:/Citrix/PNAgent,XMLService=,XMLSPort=
,SiteName=PNAgent Site”

Command breakdown:

Site Manager command line string

Comment

Sitemgr.exe –c

Create a new site using a definition (in quotes)

"PNADest=1:/Citrix/PNAgent,

Create Program Neighborhood Agent site at IIS site #1 (the IIS Default Web Site) using the XenDesktop path

XMLService=,

Set the first farm to use the XML Service at (one or more semicolon-separated server names).

XMLSPort=
,

The port used to contact the XML Service

SiteName= PNAgent Site”

The site name as used in XenDesktop

Traditional Web Interface (Desktop Branded)

Command:

Sitemgr.exe –c "WIDest=1:/Citrix/DesktopWeb,XMLService=, XMLSPort=
,WIDefaultSite=Yes, UIBranding=Desktops,SiteName=Internal Site”

Command breakdown:

Site Manager command line string

Comment

Sitemgr.exe –c

Create a new site using a definition (in quotes)

"WIDest=1:/Citrix/DesktopWeb,

Create Web Interface site at IIS site #1 (the IIS Default Web Site) using the XenDesktop path

XMLService=,

Set the first farm to use the XML Service at (one or more semicolon-separated server names).

XMLSPort=
,

The port used to contact the XML Service

WIDefaultSite=Yes,

Make Web Interface the IIS default site

UIBranding=Desktops,

Brand the site for Desktops (rather than Applications)

SiteName=Internal Site”

The site name as used in XenDesktop

Post Installation Configuration

After each site has been created, the MetaInstaller writes a set of common defaults and site specific settings to the WebInterface.conf and default.ica files stored under each site’s \conf directory. The majority of available settings are pre-listed and commented out in the WebInterface.conf file.

In the default.ica file, the settings are organized into sections, and must be placed under the correct parent.

Common Settings

(Defaults for all three DAC, Program Neighborhood Agent, and Web Interface Sites)

Web interface.conf

Parameter

Value

Comment

AllowCustomizeLogoff

Off

Prevent users from customizing log off behaviour. Workspace control is not supported with XenDesktop.

AllowFontSmoothing

Off

Font Smoothing is not supported with XenDesktop

AllowUserPasswordChange

Always

Allow users to change password.

ClientProxy

*,Auto,-

Allow ICA client to detect client proxy settings automatically.

EnableFileTypeAssociation

Off

Disable client-side content redirection.

OverrideIcaClientname

Off

Do not override the ICA client name for desktop sessions.

CSG_EnableSessionReliability

On

Enable session reliability if Secure Gateway is used.

default.ica

Section

Parameter

Value

Comment

WFClient

TransportReconnectEnabled

Off

Auto Client Reconnect is disabled

Site Specific Settings

(Set in addition to common defaults)

Desktop Appliance Connector

Web interface.conf

Parameter

Value

Comment

AllowCustomizeClientPrinterMapping

On

Allow users to customize printer mapping during desktop sessions.

AllowCustomizeAudio

On

Allow users to customize the audio quality of desktop sessions.

AllowCustomizeReconnectAtLogin

Off

Prevent users from customizing reconnect at login behaviour. Workspace control is not supported with XenDesktop.

AllowCustomizeReconnectButton

Off

Prevent users from customizing whether the Reconnect link is displayed. Workspace control is not supported with XenDesktop.

AllowCustomizeShowHints

Off

Prevent users from customizing whether hints are displayed.

AllowCustomizeTransparentKeyPassthrough

On

Allow users to customize the behaviour of key combinations within desktop sessions.

AllowCustomizeWinColor

On

Allow users to customize the color depth of desktop sessions.

AutoLoginDefault

Off

Do not automatically log users in to the Web interface when pass-through authentication is configured.

EnableLogoffApplications

Off

Do not log off desktop sessions when users log off from Web Interface. Workspace control is not supported with XenDesktop.

EnableWorkspaceControl

Off

Workspace control is not supported with XenDesktop.

ShowHints

Off

ShowSearch

Off

WIAuthenticationMethods

Explicit

Enable explicit authentication only.

default.ica

Section

Parameter

Value

Comment

WFClient

SessionReliabilityTTL

15

Session reliability timeout

Program Neighborhood Agent

Web interface.conf

Parameter

Value

Comment

WIAuthenticationMethods

Explicit,SingleSignOn

Enable explicit authentication and pass-through authentication.

default.ica

Section

Parameter

Value

Comment

WFClient

SessionReliabilityTTL

15

Session reliability timeout

Additional settings:

In order to enable single-sign on, in the \conf\config.xml file, the line:

prompt

is replaced with

prompt sson

Traditional Web Interface

Web interface.conf

Parameter

Value

Comment

WIAuthenticationMethods

Explicit

Enable explicit authentication only.

AutoLaunchDesktop

On

Automatically launch a desktop session if only one desktop is available to the user.

UpgradeClientsAtLogin

On

Automatically prompt the user to upgrade their client.

ClientIcaWin32

Filename:DesktopReceiver.msi

Set the win32 client type for XenDesktop

default.ica

Section

Parameter

Value

Comment

WFClient

SessionReliabilityTTL

60

Session reliability timeout

This document applies to:

XenDesktop 3.0 x32



Primary links

Custom Search

User login

Who's new

  • Preatercelepe
  • Kxtuzjgv
  • Maitacewwisat
  • abnonsoks
  • themopoty

Who's online

There are currently 0 users and 4 guests online.

KrissysCorner.com RuthSwensonLaw.com CreativeLizardProductions.com

DISCLAIMER:

None of this has anything to do with us, someone else is responsible for the entire thing, and we have no idea who or why. We do not know anything about it. It may be alien life forms for all we know: we haven't a clue. You cannot blame us for anything that may result from your visit. That was entirely your own personal choice, made by you of your own volition, and without our knowledge. We do not, after all, have any control over you and cannot by any stretch of the imagination be expected to accept or acknowledge, be it legally or morally, any accountability for decisions made by you on an independent basis, utilizing your own free will, and without our intervention. We are therefore in no way, shape, or form answerable to anyone for any consequences arising from the aforementioned or indeed any other actions, similar or otherwise, because it was not us that did, or did not do anything. It is not even remotely our fault, and we are in no way prepared or willing to accept any liability, not even slightly, ever. We are, in fact completely and utterly blameless, in that it is definitely not our concern, and no blame can possibly be laid at our doorstep, even if we had one, the possession of which we hereby reserve as being entirely our own free choice. The onus is not on us at all, and furthermore, never has been. The entire matter is wholly beyond our control, and completely out of our hands, each of which are washed scrupulously clean of the whole business. We are not accountable for anything at all, and we hereby categorically deny all responsibility for all that has ever, or will ever happen. Our innocence is therefore wholly beyond doubt and absolutely unimpeachable, and so cannot, under even the remotest or unlikeliest circumstances, be brought into question. By clicking either on a link on this site, clicking on a link that leads to this site, or by arriving at this site by natural or supernatural means, you are in effect accepting responsibility for the fact that it is all entirely your own fault, down to the most miniscule detail, and that you are wholly accountable for whatever outcome may arise as a consequence of the aforementioned action or actions insofar as they were undertaken personally by you on an entirely voluntary basis and without any persuasion, coercion or influence from any party or parties other than yourself. Don't come sniveling to us, we are only figments of your imagination. I also agree that if I am ever with a contributor to this website during mealtimes I agree to pay for any super-sizing of their meal, or at least a nice dessert or one of those foo-foo drinks with an umbrella or a monkey. By admitting to have seen the worthless spineless drivel on this website (also known as content)

I Agree Wholeheartedly and Without Reservation to the above. (Except maybe for that part about the monkey.)

All Your Base Are Belong To Us.

Soylent Green Is People!

Never make a bet with a Sicilian when Death is on the Line!

No. Really, I do agree.