StoreFront 1903 Citrix Product Documentation | docs.citrix.com June 10, 2019 StoreFront 1903 Contents StoreFront 1903 3 What’s new 4 Fixed issues 5 Known issues 7 Third party notices 7 System requirements 7 Plan your StoreFront deployment 15 User access options 20 User authentication 29 Optimize the user experience 41 StoreFront high availability and multi-site configuration 46 Install, set up, upgrade, and uninstall 50 Create a new deployment 62 Join an existing server group 68 Reset a server to factory defaults 69 Migrate Web Interface features to StoreFront 71 Configure server groups 77 Configure authentication and delegation 80 Configure the authentication service 81 XML service-based authentication 89 Configure Kerberos constrained delegation for XenApp 6.5 89 Configure smart card authentication 93 Configure the password expiry notification period 98 © 1999-2019 Citrix Systems, Inc. All rights reserved. 2 StoreFront 1903 Configure and manage stores 99 Create or remove a store 100 Create an unauthenticated store 106 Export store provisioning files for users 108 Advertise and hide stores to users 109 Manage the resources made available in stores 110 Manage remote access to stores through Citrix Gateway 111 Configure two StoreFront stores to share a common subscription datastore 114 Manage subscription data for a store 116 Advanced store settings 122 Manage a Citrix Receiver for Web site 127 Create a Citrix Receiver for Web site 128 Configure Citrix Receiver for Web sites 129 Support for the unified user experience 135 Create and manage featured apps 140 Configure workspace control 142 Configure Citrix Workspace app for HTML5 use of browser tabs 143 Configure communication timeout duration and retry attempts 143 Configure user access 145 Configure StoreFront to launch applications and desktops in Windowed Mode 149 Set up highly available multi-site stores 150 Force connections through Citrix Gateway using Optimal Gateway feature of StoreFront 167 Integrate with Citrix Gateway and Citrix ADC 169 Add a Citrix Gateway connection 171 © 1999-2019 Citrix Systems, Inc. All rights reserved. 3 StoreFront 1903 Import a Citrix Gateway 174 Configure Citrix Gateway connection settings 184 Load balancing with Citrix ADC appliance 187 Configure two URLs for the same Citrix Gateway 206 Configure Citrix ADC and StoreFront for Delegated Forms Authentication (DFA) 217 Authenticate using different domains 220 Configure beacon points 230 Create a single Fully Qualified Domain Name (FQDN) to access a store internally and exter- nally 232 Advanced configurations 250 Configure Desktop Appliance sites 251 Configure Resource Filtering 255 Configure using configuration files 256 Configure StoreFront using the configuration files 257 Configure Citrix Receiver for Web sites using the configuration files 261 Secure your StoreFront deployment 263 Export and import the StoreFront configuration 270 StoreFront SDK 280 Troubleshoot StoreFront 296 © 1999-2019 Citrix Systems, Inc. All rights reserved. 4 StoreFront 1903 StoreFront 1903 March 28, 2019 StoreFront 1903 is the latest Current Release version of StoreFront. This documentation reflects fea- tures and configurations in this latest release. StoreFront is an enterprise app store that aggregates applications and desktops from Citrix Virtual Apps and Desktops sites into a single easy to use store for users. StoreFront is an integral component of Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop) but can be used with several versions of Virtual Apps and Desktops. Users can work with Citrix Workspace app or supported versions of Citrix Receiver to access StoreFront stores. If a specific version behaves differently or the user interface text refers to both, it will be called out, otherwise the documentation refers to “Citrix Workspace app”. Earlier releases For documentation on previous releases, see: • StoreFront 1811 • StoreFront 3.16 • StoreFront 3.15 • StoreFront 3.14 • StoreFront 3.13 • StoreFront 3.12 • Earlier StoreFront versions The product lifecycle strategy for Citrix Virtual Apps and Desktops Current Releases (CR) and Long Term Service Releases (LTSR) is described in Lifecycle Milestones. Additional Lifecycle Information for StoreFront is provided in CTX200356. Note: Upgrades to the latest Current Release version of StoreFront from earlier unsupported versions is not supported. If you are using Current Releases you must ensure that you are on a supported StoreFront Current Release version at all times. Citrix product name and version number changes If you’ve been a Citrix customer or partner for a while, you’ll notice new names in our products and in this product documentation. If you’re new to this Citrix product, you might see different names for © 1999-2019 Citrix Systems, Inc. All rights reserved. 5 StoreFront 1903 a product or component. The new product and component names stem from the expanding Citrix portfolio and cloud strategy. To learn about how recent name changes affect StoreFront, see New product names. What’s new March 28, 2019 StoreFront 1903 StoreFront 1903 includes the following new features. For information about bug fixes, see Fixed issues. Removal of classic user experience The classic user experience (“green bubbles”) was announced as deprecated at XenApp and Xen Desk- top 7.15 LTSR, and it is no longer supported in StoreFront 1903 (Citrix Virtual Apps and Desktops 7 1903). When you upgrade to StoreFront 1903, stores which were using the classic experience are changed to the unified experience. The unified experience delivers a centrally managed HTML5 user experience to the web and to native Citrix Workspace apps (formerly Citrix Receiver), together with customiza- tion and featured app groups management. For more information about the unified experience, see Unified user experience. New product names If you’ve been a Citrix customer or partner for a while, you’ll notice new names in our products and in this product documentation. If you’re new to this Citrix product, you might see different names for a product or component. The new product and component names stem from the expanding Citrix portfolio and cloud strategy. Implementing this transition in our products and their documentation is an ongoing process. • In-product content might still contain former names. For example, you might see instances of earlier names in console text, messages, and directory/file names. • It is possible that some items (such as commands and MSIs) might continue to retain their for- mer names to prevent breaking existing customer scripts. • Related product documentation and other resources (such as videos and blog posts) that are linked from this product’s documentation might still contain former names. © 1999-2019 Citrix Systems, Inc. All rights reserved. 6 StoreFront 1903 • In this StoreFront documentation, mentions of “Citrix Workspace app” also represent the sup- ported versions of Citrix Receiver unless otherwise noted. Your patience during this transition is appreciated. For more detail about our new names, see https: //www.citrix.com/about/citrix-product-guide/. Management console and documentation product name changes Text in the StoreFront management console has been updated to the new Citrix product names. Ref- erences to removed functionality and products, which are described in the Citrix Virtual Apps and Desktops Deprecation article, are also removed. For example, references to “NetScaler Gateway” are now “Citrix Gateway”,and references to “Citrix Receiver” are now “Citrix Workspace app”. Please note that the term “Citrix Receiver for Web site” is unchanged, and still refers to a website used as an app store. The StoreFront product documentation is updated to match text in the StoreFront management con- sole, and the new Citrix product names. Deprecation of TLS versions The deprecation of StoreFront support for TLS 1.0 and 1.1 protocols was announced at StoreFront 3.14 and XenApp and XenDesktop 7.17, see CTX232266. Customers can now also upgrade to Citrix Workspace app, which supports the TLS 1.2 protocol. At StoreFront 1903, Citrix further recommends disabling TLS 1.0 and 1.1 support in the Web Server hosting StoreFront. You should enforce this via group policy objects, which create the necessary reg- istry settings on the StoreFront server to disable older protocols like TLS 1.0 and TLS 1.1. See also the Microsoft TLS/SSL Settings reference topic. Fixed issues March 28, 2019 The following issues have been fixed since version 1811: • Uninstalling StoreFront on Windows Server 2019 can result in the PowerShell console (Power- shell.exe) no longer running on the server. The symptoms are that Powershell.exe opens briefly then vanishes immediately and cannot be used. Powershell_ISE.exe is unaffected and can still be used to run Powershell scripts. [STF-2585] © 1999-2019 Citrix Systems, Inc. All rights reserved. 7 StoreFront 1903 • The StoreFront management console does not allow keywords ExcludeMe and IncludeMe to be set together. Either keyword can be set but as soon as you attempt to set the other, the first keyword is removed by the console. [STF-3388] • The StoreFront management console permits you to use the prohibited underscore character (_) in a Base URL. This makes stores inaccessible as DNS does not support the use of underscores. [STF-3509] • Receiver for Web becomes unusable if you use the StoreFront PowerShell SDK to set both Ex- clude and Include keywords for resource filtering. [STF-3208] • When a desktop contains an ampersand (&) character in its