Before you install StoreFront, review Plan your StoreFront deployment.
StoreFront server requirements
Citrix has tested and provides support for StoreFront installations on the following platforms:
- Windows Server 2019 Datacenter and Standard editions
- Windows Server 2016 Datacenter and Standard editions
- Windows Server 2012 R2 Datacenter and Standard editions
All StoreFront servers in a server group must use the same operating system version, language and locale.
Upgrading the operating system version on a server running StoreFront is not supported. Citrix recommends that you install StoreFront on a new installation of the operating system.
Storefront servers must meet the following minimum requirements in addition to requirements of the operating system:
Processor: 2 virtual CPUs
RAM: 4GB, plus 700 bytes per resource available, per user.
- 250MB for StoreFront itself.
- 30MB for each store, assuming one website per store.
- For each store with favorites enabled, 5MB plus 8MB for each 1000 favorites.
- Sufficient space for IIS log files according to your requirements, see Microsoft documentation on Managing IIS Log File Storage.
- Sufficient space for StoreFront diagnostics logs. By default StoreFront only keeps 15MB of logs but you may want to increase this. See Troubleshoot storefront.
Before you can install StoreFront, the following Windows features must be enabled on the web server. These components are enabled by default on a new Windows installation so no action is required unless they have been explicitly uninstalled.
If the version of .NET Framework installed is older than 4.7.0 then the installer automatically installs .NET Framework 4.7.0. Note this requires that the NET-Framework-45-Core Windows feature is already installed.
If the StoreFront installer detects that any of the following Windows features are missing, they are automatically installed:
It is possible to move the IIS website to a different directory or drive before installing StoreFront. The relative path to StoreFront in IIS must be the same on all the servers in a server group.
StoreFront uses the following ports for communication. Ensure your firewalls and other network devices permit access to these ports.
- TCP ports 80 and 443 are used for HTTP and HTTPS communications, respectively, and must be accessible from both inside and outside the corporate network.
- TCP port 808 is used for communications between StoreFront servers and must therefore be accessible.
- A TCP port randomly selected from all unreserved ports is used for communications between the StoreFront servers in a server group. When you install StoreFront, a Windows Firewall rule is configured enabling access to the StoreFront executable. However, since the port is assigned randomly, you must ensure that any firewalls or other devices on your internal network do not block traffic to any of the unassigned TCP ports.
- TCP port 8008 is used by Citrix Workspace app for HTML5, or supported versions of Citrix Workspace app, where enabled, for communications from local users on the internal network to the servers providing their desktops and applications.
StoreFront supports both pure IPv6 networks and dual-stack IPv4/IPv6 environments.
Storing subscription data using Microsoft SQL Server
You can optionally Store subscription data using Microsoft SQL Server. StoreFront supports same Microsoft SQL Server versions for this as Citrix Virtual Apps and Desktops does for databases. In Citrix Virtual Apps and Desktops system requirements, see Databases.
Citrix has tested and provides support for StoreFront when used with the following Citrix product versions.
StoreFront stores aggregate desktops and applications from the following products.
- Citrix Virtual Apps and Desktops 7 1912 LTSR
- Citrix Virtual Apps and Desktops 7 1909
- Citrix Virtual Apps and Desktops 7 1906
- Citrix Virtual Apps and Desktops 7 1903
- Citrix Virtual Apps and Desktops 7 1811
- Citrix Virtual Apps and Desktops 7 1808
- XenApp and XenDesktop 7.15 LTSR *
- XenApp and XenDesktop 7.6 LTSR *
The following versions of Citrix Gateway and NetScaler Gateway can be used to provide access to StoreFront for users on public networks.
- Citrix Gateway 13.0
- Citrix Gateway 12.1
- NetScaler Gateway 12.0
- NetScaler Gateway 11.1
Connections through Citrix Gateway can be made using the ICA proxy, Citrix Gateway plug-in, or clientless VPN (cVPN).
User device requirements
StoreFront provides a number of different options for users to access their desktops and applications. Citrix users can either access stores through Citrix Workspace app, or use a web browser.
When accessing a store through a web browser, apps and desktops can be launched either via a natively installed Citrix Workspace app, or via Citrix Workspace app for HTML5. Depending on your website configuration, it is possible for end users to switch between the two launch methods.
To deliver Microsoft Application Virtualization (App-V) sequences to users, you also require a supported version of the Microsoft Application Virtualization Desktop Client. For more information, see App-V. Users cannot access offline applications or App-V sequences through a web browser.
You can use all currently supported versions of Citrix Workspace app to access StoreFront stores from both internal network connections and through Citrix Gateway. For Citrix Workspace app lifecycle dates, see https://www.citrix.com/support/product-lifecycle/workspace-app.html.
To access store websites through a web browser, use latest versions of the following browsers.
- Internet Explorer 11
- Microsoft Edge
- Google Chrome
- Mozilla Firefox
- Google Chrome
- Mozilla Firefox
- Google Chrome
- Mozilla Firefox
To enable users to connect to desktops and applications using Citrix Workspace app for HTML5, see System requirements.
Legacy Citrix clients can use XenApp Services URLs to access StoreFront stores with reduced functionality. XenApp Services URLs provide backward compatible legacy support for connections made by Citrix Receiver 3.4 Enterprise and older clients that only support connections via PNAgent.
Smart card requirements
Citrix tests for compatibility with the U.S. Government Dept. Of Defense Common Access Card (CAC), U.S. National Institute of Standards and Technology Personal Identity Verification (NIST PIV) cards, and some USB smart card tokens. You can use contact card readers that comply with the USB Chip/Smart Card Interface Devices (CCID) specification and are classified by the German Zentraler Kreditausschuss (ZKA) as Class 1 smart card readers. ZKA Class 1 contact card readers require that users insert their smart cards into the reader. Other types of smart card readers, including Class 2 readers (which have keypads for entering PINs), contactless readers, and virtual smart cards based on Trusted Platform Module (TPM) chips, are not supported.
For Windows devices, smart card support is based on Microsoft Personal Computer/Smart Card (PC/SC) standard specifications. As a minimum requirement, smart cards and card readers must be supported by the operating system and have received Windows Hardware Certification.
Citrix Analytics service requirements
You can configure Citrix StoreFront so that Citrix Workspace App can send data to the Citrix Analytics service. Configuration details are described in Citrix Analytics service. This functionality is supported for the following scenarios:
- Stores which are accessed by web browsers.
- Stores which are accessed from Citrix Workspace app 1903 for Windows or later.
- Stores which are accessed from Citrix Workspace app 1901 for Linux or later.