A typical data upload size for an EdgeSight for Endpoints agent is 80KB. EdgeSight for XenApp agent data uploads are typically larger due to the greater amount of data collected and can reach 300KB. These data upload sizes depend on a number of factors such as the agent properties and the usage profile of the system hosting the agent.

From Edgesight Admin guide page 22.

Of course it depend how your worker are configured and what data you need to collect. I’m still trying to figure our how to calculate the amount of data transferred from agents to the web server, this is a complex calculation and it take a lot of time for something Citrix should provide.

So architecture for large environment is the same as the one you could watch in the previous blog – Citrix Edgesight architecture scenario – part 1/2 – except you need to split database and EdgeSight server. Only one Citrix license server and you can also keep one SQL Reporting Services for both Edgesight servers.

This configuration means you need to configure agents with a different http address, for example, at one customer I had 4000 XenApp servers and 5000 Endpoint agents, so I choose to split Endpoint agents on one Edgesight server and all XenApp on the other. This is not very handy when you want to check from XenApp servers to the endpoint statistics, but this is the way it is for now.  By multiplying EdgeSight environment, complexity is getting stronger and find the good information is sometimes a matter of hours instead of minutes…

What Citrix should consider for the future of Edgesight :

• Stop to check Citrix licenses on the Edgesight Servers, only agents is enough I think, then we would be able to load balance Edgesight Servers and SQL Reporting Services servers, spliting wouldn’t be necessary.
• Since we don’t have Resource manager anymore, consider to bring at least the same level of information in EdgeSight we had with RM with the Advanced license.
• Make available a complete EdgeSight database diagram.
• Provide a simple tool to build 1,2,3 custom report.
• Correct these annoying bug : When a Desktop is publish, no statistics are recorded, this is the same for an application with an argument in the command line…

Useful Links :
EdgeSight Wikipedia
EdgeSight Forums

EdgeSight Under The Hood

Since Ressource Manager (RIP) disappear with Citrix XenApp 6, Edgesight became a mandatory tool to have the big picture of your XenApp farms health. It’s of course a lot more than that with Platinum licenses, this will be the subject for another blog. This blog focuses on Citrix Edgesight 5.3.

Important notes regarding supported database :

SQL Server 2008 (Standard or better) or SQL Server 2005 SP2 or later (Standard or better). Note that SQL Server 2008 R2 is not supported,
Important: Note the following configuration requirements:
In SQL Server 2008, the Reporting Services Role called Manage Shared Schedules no longer exists as a stand-alone role; it is now part of the System Administrator Role. For more information, see Configuring Reporting Services for Citrix EdgeSight.
SQL Server must be configured for case-insensitive collation. Case-sensitive collation is not currently supported for this release.
SQL Server should be configured to use Windows Authentication or Mixed-Mode Authentication.
Reporting Services is included with SQL Server 2008 and SQL Server 2005. Reporting Services can be installed on a separate machine from the data source.
SQL Agent Service running and set to start automatically (if Reporting Services is installed on the machine)

First when you need to practice and want to check out what is Citrix Edgesight, you can easily setup a VM with Microsoft Windows 2008 R2 x64, install SQL 2008 and its SP1 with Reporting Services. Then you can configure Internet Information Services (IIS) to host Edgesight’s website and install the Citrix License Server as well on the same machine. Keep in mind this is for Proof Of Concept only and shouldn’t be used in Production environment.

Before going further you need to estimate the Edgesight SQL Database size regarding the number of agent deployed. Couple of year ago I had to request the mathematics law to Citrix support to know about that; now there is a tool EdgeSight Database Size Estimation Tool this is a Excel sheet witch estimate automatically the requested database size needed regarding the number of XenApp agent and Endpoint agent to deploy (See the screenshot bellow)

For Small and Medium business, you can watch bellow, the typical architecture I choose to deliver. When you plan a deployment in Production,  you need to think about your DR and backup plan : Backing up the Database and custom reports stored on the Reporting Services are recommended. If you can restore the Database and upload your custom report back, it will be very fast to install the Citrix Edgesight Website and running Citrix Edgesight after a crash. Don’t think about deploying two Edgesight websites on two different servers with a DNS alias or NLB, the only result you will have is twice more licenses used.

With this scenario, I announce 1000 XenApp Agents and 500 Endpoint Agents can be handle very smoothly and Citrix announces beeing able to support 6000 agents with this architecture design.

Part. 2, Citrix Edgesight for Large deployment and traffic generated understanding.

---

Join the forum discussion on this post

If you read the first part, now you know how to apply the Microsoft Windows 2003/2008/R2 GPO to hide A,B,C or/and D drives. But what’s happening if you have a E: drive or O: ? You cannot use this GPO anymore, you need to create your own. This is simple to understand how it works, just read what’s follow.

By default the Hide Drives part in the system.adm file look like this :

Code block

POLICY !!NoDrives
   EXPLAIN !!NoDrives_Help
      PART !!NoDrivesDropdown          DROPDOWNLIST NOSORT REQUIRED
         VALUENAME "NoDrives"
          ITEMLIST
                NAME !!ABOnly           VALUE NUMERIC 3
                NAME !!COnly            VALUE NUMERIC 4
                NAME !!DOnly            VALUE NUMERIC 8
                NAME !!ABConly          VALUE NUMERIC 7
                NAME !!ABCDOnly         VALUE NUMERIC 15
                NAME !!ALLDrives        VALUE NUMERIC 67108863
                ;low 26 bits on (1 bit per drive)
                NAME !!RestNoDrives     VALUE NUMERIC 0 (Default)
          END ITEMLIST
     END PART
   END POLICY
 
[strings]
ABCDOnly="Restrict A, B, C and D drives only"
ABConly="Restrict A, B and C drives only"
ABOnly="Restrict A and B drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
RestNoDrives="Do not restrict drives"

Then if I explain you this policy displays only specified drives on the client computer. The registry key that this policy affects uses a decimal number that corresponds to a 26-bit binary string, with each bit representing a drive letter:

Code block

11111111111111111111111111
ZYXWVUTSRQPONMLKJIHGFEDCBA

I choose an example where I want to hide A,B,C,D and E drives :

Code block

00000000000000000000011111
ZYXWVUTSRQPONMLKJIHGFEDCBA

Then convert to decimal. This binary string converts to 31 in decimal. Add this line to the [strings] section in the new HideDrives.adm file:

Code block

ABCDEOnly="Restrict A,B,C,D and E drives only"

After add this entry in the ITEMLIST section above and save the HideDrives.adm file.

Code block

NAME !!ABCDE_Only         VALUE NUMERIC 31

So the whole ADM file must look like this :

Code block

CLASS USER
 
CATEGORY  !!HideDrives
 
KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    POLICY !!HideDrives
 
    PART !!HideDrivesDropdown    DROPDOWNLIST NOSORT REQUIRED
    VALUENAME "NoDrives"
    ITEMLIST
        NAME !!ABOnly           VALUE NUMERIC    3
        NAME !!COnly            VALUE NUMERIC    4
        NAME !!DOnly            VALUE NUMERIC    8
        NAME !!ABConly          VALUE NUMERIC    7
        NAME !!ABCDOnly         VALUE NUMERIC    15
        NAME !!HideABCDE        VALUE NUMERIC    31
        NAME !!ALLDrives        VALUE NUMERIC    67108863 DEFAULT
        NAME !!RestNoDrives     VALUE NUMERIC    0
    END ITEMLIST
    END PART
    END POLICY
 
END CATEGORY;HideDrives
 
[strings]
Blank=" "
ABCDOnly="Restrict A, B, C and D drives only"
ABConly="Restrict A, B and C drives only"
ABOnly="Restrict A and B drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
HideABCDE="Restrict A,C,E,D and E drives only"
HideDrives="Hide Drives"
HideDrivesDropdown="Hide Drives Selection"
MoveProfile="Move Profiles"
MoveProfileDropdown="Move User Profile Location"
MOVEPROFILETOD="Move Profile to D Drive"
RestNoDrives="Restore Drives"

I think you’re good with this one, just import this ADM file and activate it following the part 1.

Links : Microsoft KB (thx to CTXBlog.fr)

First you need to know there is a built-in GPO in Microsoft Windows 2003 / 2008 / R2 with these settings ready to be set.

To set it up, you need to create a new GPO or edit an existing one and find these two GPO bellow as follow :

Most of the administrators I spoke with told me they’ve done that already, but it still doesn’t work, they rebooted XenApp servers, Domain controller, everything they could reboot… But they forgot the essential…

These GPO above are USER GPO and this GPO is place on the XenApp OU in the Active Directory where there is no user at all. The solution is very simple you need to activate the GPO loopback :

This setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers, such as those in public places, laboratories, and classrooms, where you must modify the user setting based on the computer that is being used.

Then with a gpupdate /enforce this hiding drives GPO is working ! Finally !

In the second part of this blog I will explain how you can go further and hide drives with other letters than A,B,C or D.

---

Join the forum discussion on this post

What’s new ?

• Monitoring of Citrix License Servers and reporting on license usage by product group or individual products. The license servers to be monitored are specified at Configure > License Monitor Configuration > License Servers. License usage reports are available on the Track Usage tab.
• Monitoring of Published Applications and reporting on application launches and unique users. Published application reports are available on the Track Usage tab and the Browse tab.
• Monitoring of session duration by farm or user group. Session duration reports are available on the Track Usage tab and the Browse tab.
• EdgeSight Agent support for XenApp 6

Warning : if you have a SQL 2000 database, you need to upgrade to SQL 2005 or SQL 2008 !

So here are some screen shot about the new tab with the two licenses nodes :

It looks very nice, but you cannot subscribe these license reports to generate an automatic email (yet)…

There still an annoying bug with the filter option on many pop-up pages… The problem is, if you don’t know there is a filter button outside the actual windows you can reach while playing with tab key, you cannot apply your filter… It has always been here in Edgesight 5.x versions… (I will post more detail about that tomorrow)

Next blog about Edgesight will be all architecture I’ve deployed for different customers

---

Join the forum discussion on this post

3/10/2010 » SANTA CLARA, CA » Citrix Systems, Inc. (NASDAQ: CTXS), today announced Citrix® XenApp™ 6, the de facto standard for centralizing applications in the datacenter and delivering them as an on-demand service to both physical and virtual desktops. XenApp 6 offers major new enhancements that simplify computing for IT, including easier central management, enhanced enterprise scalability and seamless integration with Microsoft technologies like App-V and Windows Server 2008 R2. XenApp 6 also improves productivity for end users with extensive new high-definition HDX™ technology enhancements and simplified self-service access to apps from any device, including PCs, Macs, laptops and smart phones.

The new enhancements to XenApp 6 will also be available as an integrated feature of the company’s comprehensive desktop virtualization solution, Citrix XenDesktop™ 4. Mainstream adoption of desktop virtualization requires a proven, scalable solution with the ability to deliver any type of virtual desktop to any user on any device, and to be able to interchange delivery technologies at any time. With more than half the ROI of virtual desktops coming from centralized app management, this integration provides an unparalleled advantage over any other desktop virtualization solution on the market today. This powerful combination makes it easy for customers to deliver apps as an on-demand service to any user, on any device, across a broad range of both physical and virtual desktops.

Bill Burley, Group Vice President and General Manager, XenApp Product Group at Citrix

“Citrix XenApp 6 delivers an entirely new level of IT simplification and user experience that goes beyond anything we’ve ever done with XenApp. The new simplified management capabilities and increased scalability reduce the cost of application management by up to 50 percent for both physical and virtual desktop environments. Combined with Citrix Dazzle, the self-service enterprise app store, and broad new support for Macs, laptops and smart phones with Citrix Receiver, customers can now deliver apps as an on-demand service to any user in any location at a fraction of the cost of traditional application management.”

Garth Fort, General Manager of System Center Marketing, Server and Tools Business at Microsoft Corp.  

“With support for Windows Server 2008 R2 in XenApp 6 and new integration with Citrix XenApp and Microsoft App-V, we are providing increasing value to our customers and delivering a simplified yet powerful application delivery infrastructure. Customers can leverage their existing investment in Microsoft solutions while continuing to expand their ability to deliver applications on-demand.”

Key Facts and Highlights:

• Simplified Management – XenApp 6 dramatically simplifies desktop computing with AppCenter™, a powerful new management console that makes it easy for IT to centrally manage all applications enterprise-wide from a single location.
• Unparalleled Scalability – XenApp 6 has been verified to scale up to more than 100,000 concurrent users in a single farm, giving customers unprecedented levels of cost savings and datacenter efficiency.
• Expanded Microsoft Integration – Seamless integration between XenApp 6 and Microsoft App-V makes it easy for customers to centrally manage applications using whatever mix of local and hosted solutions best fit their unique requirements. XenApp 6 also includes full support for Microsoft Windows Server 2008 R2, adding a broad range of platform enhancements including simplified provisioning, easier automation, and more efficient power consumption.
• Self-Service Apps – Through its integration with Citrix Dazzle™, XenApp 6 gives users an entirely new level of flexibility and mobility, allowing them to choose the apps they need on-demand, without costly manual IT support. Apps available to users through the Dazzle “storefront” can include those delivered by XenApp or Microsoft App-V, as well as IT supported SaaS or web applications.
• Mac and Smart Phone Support – In addition to supporting PCs, thin clients and laptops, XenApp 6 now makes it easy for users to access Windows apps from Macs and popular smart phones such as Apple iPhone, Google Android and Windows Mobile.
• Enhanced High-Definition HDX™ Technology – XenApp 6 includes broad new HDX technology enhancements that allow customers to deliver real-time media applications like voice and CD-quality audio with a rich, high-definition user experience. New HDX enhancements in XenApp 6 also expand support for a broad range of USB devices, including webcams, microphones, digital cameras and scanners.

Video: Highlights of XenApp 6
Pricing and Availability:

The new XenApp 6 release will be available for download beginning on March 24, 2010, and will be offered as a free upgrade to all XenApp customers with current Subscription Advantage agreements. Suggested list pricing for new licenses of XenApp 6 will begin at $350 per concurrent user. More information on the new features in XenApp 6 can be found at http://www.citrix.com/xenapp6.

XenApp 6 will also be included as an integrated feature of the company’s broader XenDesktop 4 product line, which is available to customers at a suggested list price beginning at $225 per-user or per-device.

My company (Activlan) had to renew our certificate installed on our Citrix Secure Gateway 3.1.3. As you might know, Citrix has issued some virtual appliance and I had to chose between, Citrix Access Gateway 4.6.2 VPX and Netscaller VPX Express (Free !). My choice was to integrate a Citrix Access Gateway (CAG) mainly because we are using other product to manage VPN to all our customers and I wanted to install what I needed, nothing less, nothing more.

So here we go, I got my xva file from MyCitrix account and I just deploy it on our XenServer, very easy, very simple, just some clicks. Once installed and basics configuration set, I had to generate the CSR (Certificate Signing Request) and wait for Verisign to send me the certificate I had to use with the CAG. This was a big adventure and of course I should have read the manual before, and configuration isn’t so easy but I guess when you do it all day long you begin to know everything and I can say now, I know how to troubleshoot a CAG from the client side to the Web Interface.

This error I got with my Mac didn’t show up on my Windows computers. In fact Apple doesn’t have a very big list of root certificate install on their OS compare to Windows. Here is the error message I got when I wanted to launch published application (XenApp). I was able to login in the CAG and the Web Interface as well, but not able to launch application.

SSL Error 61: You have not chosen to trust “Verisign Class 3 Secure Server CA – G2″, the issuer of the server’s security certificate.

Error number: 183

Sexy message, isn’t it ?

After searching around a bit I found this thread on Citrix’s forums : http://forums.citrix.com/message.jspa?messageID=447656 everything went clear, I didn’t had the root certificate on my computer to validate my brand new certificate from Verisign… So I tried to find how to get these root certificates, especially Verisign Class 3 Secure Server CA – G2, the one I needed. I found this Verisign address http://www.verisign.com/repository/roots/pca_certificate.html where you just have to fill a form to get a zip with everything what you might need :

Code block

Stephane-THIRIONs-MacBook:VeriSign Root Certificates stephane$ ls ./*
./Roots ReadMe.txt	./SHA1 Thumbprints.txt	./Serial Numbers.txt
 
./Generation 1 (G1) PCAs:
Class 1 Public Primary Certification Authority.cer	Class 2 Public Primary Certification Authority.cer	Class 3 Public Primary Certification Authority.cer
Class 1 Public Primary Certification Authority.pem	Class 2 Public Primary Certification Authority.pem	Class 3 Public Primary Certification Authority.pem
Class 1 Public Primary Certification Authority.txt	Class 2 Public Primary Certification Authority.txt	Class 3 Public Primary Certification Authority.txt
 
./Generation 2 (G2) PCAs:
Class 1 Public Primary Certification Authority - G2.cer	Class 2 Public Primary Certification Authority - G2.pem	Class 3 Public Primary Certification Authority - G2.txt
Class 1 Public Primary Certification Authority - G2.pem	Class 2 Public Primary Certification Authority - G2.txt	Class 4 Public Primary Certification Authority - G2.cer
Class 1 Public Primary Certification Authority - G2.txt	Class 3 Public Primary Certification Authority - G2.cer	Class 4 Public Primary Certification Authority - G2.pem
Class 2 Public Primary Certification Authority - G2.cer	Class 3 Public Primary Certification Authority - G2.pem	Class 4 Public Primary Certification Authority - G2.txt
 
./Generation 3 (G3) PCAs:
VeriSign Class 1 Public Primary Certification Authority - G3.cer	VeriSign Class 3 Public Primary Certification Authority - G3.cer
VeriSign Class 1 Public Primary Certification Authority - G3.pem	VeriSign Class 3 Public Primary Certification Authority - G3.pem
VeriSign Class 1 Public Primary Certification Authority - G3.txt	VeriSign Class 3 Public Primary Certification Authority - G3.txt
VeriSign Class 2 Public Primary Certification Authority - G3.cer	VeriSign Class 4 Public Primary Certification Authority - G3.cer
VeriSign Class 2 Public Primary Certification Authority - G3.pem	VeriSign Class 4 Public Primary Certification Authority - G3.pem
VeriSign Class 2 Public Primary Certification Authority - G3.txt	VeriSign Class 4 Public Primary Certification Authority - G3.txt
 
./Generation 4 (G4) PCA:
VeriSign Class 3 Public Primary Certification Authority - G4.cer	VeriSign Class 3 Public Primary Certification Authority - G4.txt
VeriSign Class 3 Public Primary Certification Authority - G4.pem
 
./Generation 5 (G5) PCA:
VeriSign Class 3 Public Primary Certification Authority - G5.cer	VeriSign Class 3 Public Primary Certification Authority - G5.txt
VeriSign Class 3 Public Primary Certification Authority - G5.pem
 
./VeriSign Universal Root CA:
VeriSign Universal Root Certification Authority.cer	VeriSign Universal Root Certification Authority.pem	VeriSign Universal Root Certification Authority.txt
Stephane-THIRIONs-MacBook:VeriSign Root Certificates stephane$

As you can see, the root certificate I’m looking for is here. I just find the good file and click on it, after validate this action with my password the certificate was install in the system Keychain Access in my Mac. You can go to check if the certificate is correctly installed, open Keychain Access in your Mac utilities folder (cmd+shift+U) :

Here it is. I though I was good to go and able to launch my applications, but no, not yet… I still got the same error message… My next step was to import our new certificate on my Mac as well following the same step as above. Importing the certificate didn’t work also, but importing the certificate with the intermediate certificate did the trick. A bit more explanation about Intermediate Certificate here.

Question : Did our new certificate with the intermediate certificate without the root certificate update is enough to make it work ? The answer is YES

Conclusion: If you have this issue, don’t follow the error message on your screen, your computer might have everything needed about root certificate,. The only thing missing is your new certificate with the intermediate certificate. I don’t know why we need to import this certificate yet but I will find out. Certificate are not really my cup of tea with PKI, private key, public key etc… I need to dive again in this subject for a while to understand.

Update : Re issuing the certificate and importing it onto my Citrix Access Gateway with the intermediate certificate

---

Join the forum discussion on this post

I want to begin a new document as we had with Citrix Metaframe 1.8 tuning tips on Microsoft Windows NT4 TSE. This was a great document and very helpfull in many way.

If you have any ideas, agree on what I will write or disagree, I take everything to form a big document available online for everyone.

First I would like to know if we should create a wiki-like to let everyone working on the document and add/change at will, what do you think ?

If you choose other please add a comment bellow !

First you need to publish the Java Control Panel, you can do it easily by make a new publish application and using the executable file called javacpl.exe in the java/bin directory of your Java JRE installation directory. Look the next screenshot for details about published application :

Once you Java Control Panel is published you need to grant access to this publish application to the target account and launch it. Then you need to go to the advanced tab and use the same configuration as above :

Next, you need to go to Java tab and view to add this command line after the javaw.exe path

-Djavaplugin.trace=true
-Djavaplugin.trace.option=basic|net|security|ext|liveconnect
-Djavax.net.debug=all

The click on Apply the OK to close everything.

The setup to trap all the information in the java console is done, now you can open you publish browser and go the the website and get all the debug information you will need to send the the dev of the problematic website.

You can test you console/debug mode with this url : http://java.com/en/download/help/testvm.xml it should give you something like that :

The word <DEBUG> should appear in the console.

If you have any request or detail to ask, just go on the forum and ask.

---

Join the forum discussion on this post

User Profile Manager 3 Tech. Prev.

Here is a list of new featured inluded in this TP

• Citrix streamed user profiles. With Citrix streamed user profiles, files and folders are synchronized on the local computer only when they are needed, which speeds up logon and logoff. (Registry entries are cached immediately.) This feature includes the following settings in the ADM file.
• Cache entire profile. Profiles are synchronized locally after logon as a background system task, without any feedback to users.
• Active profile write back. Files and folders (but not Registry entries) that are modified can be synchronized to the user store in the middle of a session, before logoff.
• More supported operating systems. Windows 7 and Windows Server 2008 R2 are now supported.
• Diagnostic enhancements. Administrators can now set the computers and groups to be monitored using the Diagnostic Facility in the Daily Management Console. They no longer have to configure logging in the ADM template and force a group policy update (that they may not have permissions for). In addition, new event log messages display the full path to the user store for each user logon.
• For further deployment information, including how to add the ADM file in the download to Group Policy, see the installation topics in the Version 2.1 documentation.
• Installation enhancements. Profile management checks for more errors during installation and, if they are encountered, writes messages to the event log. A new command-line switch installs Profile management without the .ini files that were previously used for configuration.

You can see bellow installation screenshots :

When you download it, you’ll have a zip file with x86 and x64 version, a html file to redirect you to Citrix EDoc and the ADM file to use with Windows GPO, this ADM is well organised/comment and you can easily find news feature added inside if you edit it.

You can see with the next screenshot how the features are categorized in the group policie management console :

And the a screenshot of each feature you can find:

For me the major new feature is the possibility to update the profile without waiting for a log off, this profile streaming stuff is just awesome, and I need to test it and check under heavy load how it will behave.

Merchandising Server 1.2 Tech. Prev.

A new release of mechandising server has been deliver with XenApp 6 (Project Parra) and at first look the is not a huge difference with the Production version 1.1

As far as I can see there is a proxy configuration, i saw while browsing on internet some people were using it to deploy Xentools as well. There is not much to read on the web yet.

Hdx

HDX for flash is now supported on XenApp, there also what is call HDX Usb device plug and play, I will post more informations about this later in a dedicated blog post.

Single Sign On 4.8

Single sign-on 4.8 includes the following:

• Enhanced Web application definition creation and management functionality
• Sendkeys functionality for Web, matching existing availability for Windows

Web Application Compatability

• Dynamic Web Page Support

Single sign-on now recognizes and responds when Web pages refresh through Javascript or similar technology.

• Sendkeys Functionality for Web

Single sign-on now supports Sendkeys for Web applications without the use of the Redirect to Windows application feature.

Administrator Experience

• The new Web page selector highlights Web pages in Windows Internet Explorer as you select them to ensure you choose the desired Web page
• Advanced Matching now features simplified, clearer Web elements, using highlights to connect the selected elements with the contents of the Web page
• The Define form action process for Web applicaiton definitions now resembles the process used for Windows application definitions
• New action editor is now similar to the one used with Windows application definitions
• The Form Definition Wizard now can adjust as Web page refresh or reload, or you navigate to a new page
• The Data Integrity certicate expiration date can now be seen in the Single sign-on Properties display in the Delivery Services Console, enabling you to create a new certificate before the existing one expires.
• Single sign-on 4.8 contains a modified administrative data migration feature to cleanly move data from one central store to another.

End User Experience

Users will no longer see an intrusive progress bar telling them the Single sign-on plug-in is starting. That information is now contained in a tooltip visible when users roll over the Single sign-on plug-in notification tray icon. As always, users can begin working while the plug-in is starting.

Security

Single sign-on 4.8 uses the stronger encryption standards of the Advanced Encryption Standard (AES) and SHA-256 (Secure Hash Algorithm) for the storage of credentials.

Other New Functionality

• Windows 7 and Windows Server 2008 R2 support.
• Single sign-on Service for V4.8 runs on 64-bit servers.

I cannot post more informations about Single Sign On 4.8, I need to update my VM with new binaries and it will take some times. I will also make a blog only about SmartAuditor to screenshot everything and test all the new features.

You can find all these informations and more at Citrix Edoc : http://support.citrix.com/proddocs/topic/xenapp/ps-6-w2k8-wrapper.html

---

Join the forum discussion on this post