Citrix Cloud Connector requirements
The Citrix Cloud Connector is a component with a collection of Windows services installed on Windows Server 2012 R2 or Windows Server 2016.
The machines hosting the Cloud Connector must meet the following requirements. Citrix strongly recommends installing at least two Cloud Connectors in each resource location to ensure high availability.
Windows Server 2012 R2 or Windows Server 2016 is supported.
The Cloud Connector is not supported for use with Windows Server Core.
Microsoft .NET Framework 4.7.2 or later is required.
- Use dedicated machines for hosting the Cloud Connector. Do not install any other components on these machines.
- The machines are not configured as Active Directory domain controllers. Installing the Cloud Connector on a domain controller is not supported.
- Server clock is set to the correct UTC time.
- Internet Explorer Enhanced Security Configuration (IE ESC) is turned off. If this is turned on, the Cloud Connector might not be able to establish connectivity with Citrix Cloud.
- Citrix strongly recommends enabling Windows Update on all machines hosting the Cloud Connector. When configuring Windows Update, automatically download and install updates, but do not allow automatic restarts. The Citrix Cloud platform handles machine restarts, allowing them for only one Cloud Connector at a time when needed. Alternatively, you can control when the machine is restarted after an update using Group Policy. For more information, see https://docs.microsoft.com/en-us/windows/deployment/update/waas-restart.
Active Directory requirements
- Joined to an Active Directory domain that contains the resources and users that you will use to create offerings for your users. For multi-domain environments, see Deployment scenarios for Cloud Connectors in Active Directory in this article.
- Each Active Directory forest you plan to use with Citrix Cloud should be reachable by two Cloud Connectors at all times.
- The Cloud Connector must be able to reach the parent (root) domain controllers as well as the child domain controllers in the Active Directory infrastructure (to complete the Active Directory workflows) in which the Cloud Connector is installed. For more information, refer to the following Microsoft support articles:
- Connected to a network that can contact the resources you will use in your resource location. For more information, see Cloud Connector Proxy and Firewall Configuration.
- Connected to the Internet. For more information, see Internet Connectivity Requirements.
Supported Active Directory functional levels
The Citrix Cloud Connector supports the following forest and domain functional levels in Active Directory.
|Forest Functional Level||Domain Functional Level||Supported Domain Controllers|
|Windows Server 2008 R2||Windows Server 2008 R2||Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2008 R2||Windows Server 2012||Windows Server 2012, Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2008 R2||Windows Server 2012 R2||Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2008 R2||Windows Server 2016||Windows Server 2016|
|Windows Server 2012||Windows Server 2012||Windows Server 2012, Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2012||Windows Server 2012 R2||Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2012||Windows Server 2016||Windows Server 2016|
|Windows Server 2012 R2||Windows Server 2012 R2||Windows Server 2012 R2, Windows Server 2016|
|Windows Server 2012 R2||Windows Server 2016||Windows Server 2016|
|Windows Server 2016||Windows Server 2016||Windows Server 2016|
Federal Information Processing Standard (FIPS) support
The Cloud Connector currently supports the FIPS-validated cryptographic algorithms that are used on FIPS-enabled machines. Only the latest version of the Cloud Connector software available in Citrix Cloud Government includes this support. If you have existing Cloud Connector machines in your environment (installed before November 2018) and you want to enable FIPS mode on these machines, perform the following actions:
- Uninstall the Cloud Connector software on each machine in your resource location.
- Enable FIPS mode on each machine.
- Install the latest version of the Cloud Connector on each FIPS-enabled machine.
- Do not attempt to upgrade existing Cloud Connector installations to the latest version. Always uninstall the old Cloud Connector first and then install the newer one.
- Do not enable FIPS mode on a machine hosting an older Cloud Connector version. Cloud Connectors older than Version 5.102 do not support FIPS mode. Enabling FIPS mode on a machine with an older Cloud Connector installed prevents Citrix Cloud Government from performing regular maintenance updates for the Cloud Connector.
For instructions to download the latest version of the Cloud Connector, see Task 3: Install Cloud Connectors.
- Download the Cloud Connector software only from Citrix Cloud Government and install it on prepared machines. By default the Cloud Connector installer attempts to connect with the control plane from which it is downloaded. So, if you attempt to install the software downloaded from a commercial Citrix Cloud account, the installer will not connect with Citrix Cloud Government.
- Because the Cloud Connector software is downloaded, your browser must allow downloading executable files.
Important usage considerations
- Keep all Cloud Connectors powered on at all times to ensure an always-on connection to Citrix Cloud Government.
- Do not upgrade a previously-installed Cloud Connector with a newer version. Instead, uninstall the old Cloud Connector and then install the new one.
- Citrix strongly recommends enabling Windows Update on all machines hosting the Cloud Connector.
- Citrix strongly recommends installing at least two (2) Cloud Connectors in each resource location. In general, the number of Cloud Connectors you should install is N+1, where N is the capacity needed to support the infrastructure within your resource location. This ensures the connection between Citrix Cloud Government and your resource location remains intact in the event any single Cloud Connector becomes unavailable.
- Each Active Directory forest you plan to use with Citrix Cloud Government should be reachable by two Cloud Connectors at all times.
- After installation, do not move the machine hosting the Cloud Connector into a different domain. If the machine needs to be joined to be a different domain, uninstall the Cloud Connector and then re-install it after the machine is joined to the different domain.## View the health of the Cloud Connector
The Resource Locations page in Citrix Cloud Government displays the health status of all the Cloud Connectors in your resource locations.
Troubleshoot the Cloud Connector
The first step in diagnosing any issues with the Cloud Connector is to check the event messages and event logs. If you don’t see the Cloud Connector listed in your resource location or is “not in contact,” the event logs will provide some initial information.
If the Cloud Connector is “disconnected” and the event logs don’t indicate why a connection can’t be established between the Cloud Connector and Citrix Cloud Government, contact Citrix Support.
If the Cloud Connector is in an “error” state, there might be a problem hosting the Cloud Connector. Install the Cloud Connector on a new machine. If the issue persists, contact Citrix Support.
To troubleshoot commmon issues with installing or using the Cloud Connector, refer to CTX221535.
Event messages are available in the Windows Event viewer on the connector machine. The Windows event logs that the Cloud Connector generates are in the following documents:
By default, event logs are located in the C:\ProgramData\Citrix\WorkspaceCloud\Logs directory of the machine hosting the Cloud Connector.