Gateway

Configuring the Secure Ticket Authority on Citrix Gateway

The Secure Ticket Authority (STA) is responsible for issuing session tickets in response to connection requests for published applications on Citrix Virtual Apps and published desktops on Citrix Virtual Desktops. These session tickets form the basis of authentication and authorization for access to published resources.

You can bind the STA globally or to virtual servers. You can also add multiple servers running the STA when you configure a virtual server.

If you are securing communications between the Citrix Gateway and the STA, make sure a server certificate is installed on the server running the STA.

In a typical Citrix Gateway GSLB deployment, all gateway virtual servers (in each site) must be configured with the same back-end STA servers to avoid reconnection issues.

To bind the STA globally

  1. Navigate to Citrix Gateway > Global Settings.
  2. In the details pane, under Servers, click Bind/Unbind STA Servers to be used by the Secure Ticket Authority.
  3. In the Bind/Unbind STA Servers dialog box, click Add.
  4. In the Configure STA Server dialog box, enter the URL of the STA server, click Create, and then click OK.
  5. In the STA Server dialog box, in URL, type the IP address or fully qualified domain name (FQDN) of the server running the STA and then click Create.

    Note: You can add more than one server running the STA to the list. The STAs that are listed in the Web Interface must match the STAs that are configured on Citrix Gateway. If you are configuring multiple STAs, do not use load balancing between Citrix Gateway and the servers running the STA.

To bind a STA to the virtual server

  1. Navigate to Citrix Gateway > Virtual Servers.
  2. In the details pane, select a virtual server and then click Edit.
  3. On the Published Applications tab, under Secure Ticket Authority, click Add.
  4. In the Configure STA Server dialog box, enter the URL of the STA server and then click Create.
  5. Repeat Step 4 to add additional STA servers and then click OK.

References

Configuring the Secure Ticket Authority on Citrix Gateway