Product Documentation

System requirements

Sep 22, 2016


Citrix does not support installation of any Self-Service Password Reset component on a domain controller. Deploy the Self-Service Password Reset components on dedicated servers.

This article describes the hardware and software requirements for your Self-Service Password Reset environment. This article assumes that each computer meets the minimum hardware requirements for the installed operating system.


Computers in your Self-Service Password Reset environment might require the following supporting system software.

  • Windows 2016, Windows 2012 R2, Windows 2008 R2 (We recommend using Windows 2008 R2 only with a local file share and appropriate extra lock down. For more information, see Create a central store.) -  Required by Self-Service Password Reset Server.
  • Microsoft Windows Installer 2.0 or later - Required by all.
  • Microsoft .NET Framework - Required by Self-Service Password Reset Server.
    • 4.6.x (Windows 2016)
    • 4.5.2 (Windows 2012 R2)
    • 3.5.1 (Windows 2008 R2)
  • Internet Information Services (IIS) - Required by Self-Service Password Reset Server.
    • IIS 10.0 (Windows 2016)
    • IIS 8.5 (Windows 2012 R2)
    • IIS 7.5 (Windows 2008 R2)

Self-Service Password Reset Server

  • Self-Service Password Reset Component - Central store
  • Supported Environment - SMB File Share
  • Hardware Requirement - 30KB disk space per user

ASP.NET 3.5/4.X requirements

The ASP.NET component for your version of .NET framework on your Windows Server computer.

Security and account requirements

Before you install the Self-Service Password Reset Service, ensure that the appropriate accounts and components are available to support the service. Also, because the service uses secure HTTP (HTTPS), it requires a server authentication certificate for Transport Layer Security (TLS) communication with StoreFront.

Server Authentication Requirement:

Before you install the service, obtain a server authentication certificate for TLS communication from a Certificate Authority (CA) or your internal Public Key Infrastructure (PKI), if available.

Accounts Required for Service Modules:

Note: Ensure both accounts will not expire.

The Self-Service Password Reset Service requires these account types to read and write data as it operates in your environment:

  • Data proxy account
  • Self-service account

When different modules require the same type of account, you can use the same account for multiple modules, or you can specify different customized accounts for each module.

  • Data proxy account

Requires read and write access to the central store. For more information, see Create a central store.

  • Self-service account

Requires sufficient privileges to unlock and reset the password of the relevant users in User Configuration. For more information, Secure configuration.


StoreFront 3.7

Citrix Receivers


  • Citrix Receiver for Web 
  • Citrix Receiver for Windows
  • Citrix Receiver for Linux

Not supported:

  • Citrix Receiver for Mac
  • Citrix Receiver for Chrome
  • Mobile devices (not even with Receiver for Web)

External use with NetScaler Gateway