Citrix Director 1912 LTSR Installation and Configuration

Citrix Director 1912 LTSR Installation and Configuration is the fifth article in Citrix Virtual Apps and Desktop 7 1912 LTSR Installation and Configuration Series.

Following Topics are covered in this article

  1. SCOM Management Packs
  2. SSL Certificate
  3. Citrix Director 1912 LTSR Installation
  4. Disable “You are not using a secure Connection
  5. Bind SSL Certificate to HTTPS in IIS
  6. Citrix Director HTTP Redirect
  7. Google Analytics

SCOM Management Packs

Citrix SCOM Management Packs for XenApp and XenDesktop, Provisioning Services, and StoreFront have been phased out in 1912 LTSR. It means that after June 2020, you must remove any SCOM Management Pack from your Citrix Virtual Apps and Desktops 7 1912 LTSR site to keep your LTSR support and benefits. Read more about the deprecated features at Removed Features.

Citrix SCOM Management PackNotice of ChangeEOMEOL
Citrix SCOM Management Pack for XenApp and XenDesktopDec 14 2019March 2020June 2020
Citrix SCOM Management pack for Provisioning services Dec 14 2019 March 2020 June 2020
Citrix SCOM Management pack for Store Front Dec 14 2019 March 2020 March 2020

The alternative is to use Citrix Director 1912 LTSR for monitoring and managing your deployment. Remember! SCOM Management Packs are available to be downloaded for Premium customers that is why Director is an alternative of SCOM for premium customers only. CVAD premium license (platinum) provides following extra features. Visit Citrix Director Version Matrix for the full list.

  • Desktop probing
  • Hypervisor Alerts Monitoring
  • Application probing
  • Key RTOP Data display
  • Application probing
  • Smart alert policies
  • Custom Reporting
  • Alerting extended for CPU, memory and ICA RTT conditions
  • Integration with Citrix ADM
  • Proactive monitoring and alerting
  • SCOM integration
  • Single-session and Multi-session OS Usage
  • Session recording integration

SSL Certificate for Citrix Director 1912 LTSR

Since Director is in internal network, I am going to use internal authority to issue the SSL certificate. Please understand that the SSL certificate issued to the hostname of the Director Server will only secure the communication between director and the endpoint.

  1. Open Run / Certlm.msc
  2. Right click on Personal Certificate store. Select All Tasks and click on Request New Certificate
Certificate Manager
  1. Click on Next in Before you Begin window
Citrix Director 1912 LTSR Certificate Enrollment Before you begin
  1. Select the Enrollment Policy. Expand Details and click on Properties. I am using a Web Server Template with Application Policies set to Server Authentication, Key type as RSA, Key size as 2048 Bits and Private Key is not exportable
Certificate Enrollment Policy
Certificate Enrollment Policy Properties
  1. Give a Friendly Name in General Tab.
Certificate Properties General tab
  1. Switch to Subject tab. Select Common name in Type drop down under Subject name. Type the FQDN of the Director Server and click on Add>. Click on Apply and then OK
Certificate Properties Subject tab
  1. Click on Enroll
Certificate Enrollment Policy Properties
  1. Notice that enrollment was successful, enrollment request was auto-approved and the certificate has been installed in Personal Certificate Store of the local computer
Certificate Store Personal Store Installed Certificate

Citrix Director 1912 LTSR Installation

  1. Mount the ISO and go the mounted drive
  2. Right click on Autoselect.exe and select Run as Administrator
  3. CVAD Meta Installer will open up. Click on Citrix Director
Citrix Director 1912 LTSR Installation Meta Installer
  1. Select I have read, understand, and accept the terms of the license agreement. Click on Next
Citrix Director 1912 LTSR Installation License Agreement
  1. Add Delivery Controller(s). If you configured multiple Citrix sites then you can add one Controller for each site. Citrix Director 1912 LTSR or any Director can auto detect other Delivery Controllers within a Site.
Citrix Director 1912 LTSR Installation Delivery Controllers
  1. Select Automatically under Configure firewall rules. Click on Next
Citrix Director 1912 LTSR Installation Firewall
  1. Click on Install in Summary
Citrix Director 1912 LTSR Installation Summary
  1. Installation will prompt for the reboot. Click on Close
Citrix Director 1912 LTSR Installation Reboot
  1. Once the server is up, installer will prompt you to locate the media so the installation can resume from where it left at the time of reboot. Mount the media again and select the mount drive within the installer window.
  2. Installation will resume and once it is completed, click on Finish. Leave Launch Director checked
Installation Succeeded
  1. Notice in the address that the URL is HTTP. Using http is not a problem unless there is some security guideline from the customer that requires Director to be on HTTPS. In one of the next topic of this article, we will bind the SSL certificate to HTTPS (443) in IIS. Further, in this article we will set up a HTTP Redirect to HTTPS.
Citrix Director 1912 LTSR home page

Warning – You are not using a secure connection

If you are fine with http then you can remove the warning that says You are not using a secure connection (see above screenshot)

  1. Open RUN / INETMGR
  2. Go to Sites / Default Web Site / Director in the left hand pane
  3. Open Application Settings on the right
IIS Director Application Settings
  1. Double click on UI.EnableSslCheck. Change the value to false and click on OK.
IIS Director Application Settings UI.EnableSslCheck

Bind SSL Certificate to HTTPS in IIS

  1. Open RUN / INETMGR
  2. Go to Sites / Default Web Site
  3. Click on Bindings in the right pane
IIS Bindings
  1. Click on Add in Site Bindings window
  2. Select https in Type and Select the certificate (certificate’s Friendly name) in SSL Certificate we installed previously. Click on OK
IIS Bindings HTTPS
  1. Click on Close.
IIS Bindings HTTPS Finished

Citrix Director 1912 LTSR HTTP Redirect

For HTTP Redirect to HTTPS to work, you need to download and install IIS URL Rewrite module 2. Although IIS in-built module HTTP Redirect can do the job but it is not robust enough for all use cases. Check out Redirect HTTP to HTTPS with IIS

  1. Download IIS URL Rewrite Module 2 from https://www.iis.net/downloads/microsoft/url-rewrite#additionalDownloads
Download IIS Rewrite module
  1. Install it as an Administrator
IIS Rewrite module Installation
  1. Open RUN / INETMGR
  2. Go to Sites / Director
  3. Open URL Rewrite
IIS URL Rewrite Module
  1. Click on Add Rules in the right pane
IIS URL Rewrite Module Add Rule
  1. Select Blank rule and click on OK
IIS URL Rewrite Module Add Blank Rule
  1. Give the rule some Name
IIS URL Rewrite Module Name
  1. In Match URL section, select Wildcards in Using from the drop down and type * in the Pattern field
IIS URL Rewrite Module Rule Match URL
  1. Under Conditions section, click on Add
  2. Type {HTTPS} in Condition Input. Leave Matches the pattern in Check if input string. Type Off in Pattern. Click on OK
IIS URL Rewrite Module Add Condition1
IIS URL Rewrite Module Add Condition2
  1. Nothing to be done in Server Variables section
  2. In Actions section, ensure Redirect is select in Action type. Type https://{HTTP_HOST}/Director/LogOn.aspx in Redirect URL
IIS URL Rewrite Module Action Type
  1. Click on Apply in the right pane.
IIS URL Rewrite Module Apply

Google Analytics Data Collection

From Citrix Director Documentation The Director Service starts using Google Analytics to collect usage data anonymously after Director is installed. Statistics regarding the usage of the Trends pages and OData API call analytics are collected. Analytics collection complies with the Citrix Privacy Policy. Data collection is enabled by default when you install Director.

To disable Google Analytics Data Connection:

  1. Open RUN / Regedit
  2. Go to HKEY_LOCAL_MACHINE\Software\Citrix\Director
  3. Set the value of DisableGoogleAnalytics to 1. 1 is Disabled and 0 is Enabled
  4. If the key doesn’t exist then create it (DWORD).

Be the first to reply

Leave a Reply