System requirements


Citrix does not support installation of any Self-Service Password Reset component on a domain controller. Deploy the Self-Service Password Reset components on dedicated servers.

This article describes the hardware and software requirements for your Self-Service Password Reset environment. This article assumes that each computer meets the minimum hardware requirements for the installed operating system.


Computers in your Self-Service Password Reset environment might require the following supporting system software.

  • Windows 2016 and Windows 2012 R2 -  Required by Self-Service Password Reset Server.
  • Microsoft Windows Installer 2.0 or later - Required by all.
  • Microsoft .NET Framework - Required by Self-Service Password Reset Server.
    • 4.6.x (Windows 2016)
    • 4.5.2 (Windows 2012 R2)
  • Internet Information Services (IIS) - Required by Self-Service Password Reset Server.
    • IIS 10.0 (Windows 2016)
    • IIS 8.5 (Windows 2012 R2)
  • VC++ 2008 SP1 runtime - Required by the Self-Service Password Reset Server.
    For a first-time installation, you must download vcredist_x86.exe from, and install it on the Self-Service Password Reset Server.

Self-Service Password Reset Server

  • Self-Service Password Reset Component - Central store
  • Supported Environment - SMB File Share
  • Hardware Requirement - 30 KB disk space per user

ASP.NET 3.5/4.X requirements

The ASP.NET component for your version of .NET framework on your Windows Server computer.

Security and account requirements

Before you install the Self-Service Password Reset Service, ensure that the appropriate accounts and components are available to support the service. Also, because the service uses secure HTTP (HTTPS), it requires a server authentication certificate for Transport Layer Security (TLS) communication with StoreFront.

Server Authentication Requirement:

Before you install the service, obtain a server authentication certificate for TLS communication from a Certificate Authority (CA) or your internal Public Key Infrastructure (PKI), if available.

Accounts Required for Service Modules:

Note: Ensure that both accounts will not expire.

The Self-Service Password Reset Service requires these account types to read and write data as it operates in your environment:

  • Data proxy account
  • Self-service account

When different modules require the same type of account, you can use the same account for multiple modules. Or you can specify different customized accounts for each module.

  • Data proxy account

Requires read and write access to the central store. For more information, see the Create a central store section in Install and configure.

  • Self-service account

Requires sufficient privileges to unlock and reset the password of the relevant users in User Configuration. For more information, Secure configuration.


  • StoreFront 3.7
  • StoreFront 3.8 or later

Citrix Workspace app


  • Citrix Workspace app for Web
  • Citrix Workspace app for Windows
  • Citrix Workspace app for Linux
  • Citrix Workspace app for Mac (Requires StoreFront 3.8)

Not supported:

  • Citrix Workspace app for Chrome
  • Mobile devices (not even with Citrix Workspace app for Web)

External use with Citrix Gateway


System requirements