Product Documentation

System requirements

Jan 31, 2017

When planning your installation, Citrix recommends that you allow at least an additional 2 GB of RAM for StoreFront over and above the requirements of any other products installed on the server. The subscription store service requires a minimum of 5 MB disk space, plus approximately 8 MB for every 1000 application subscriptions. All other hardware specifications must meet the minimum requirements for the installed operating system.

Citrix has tested and provides support for StoreFront installations on the following platforms.

  • Windows Server 2012 R2 Datacenter and Standard editions
  • Windows Server 2012 Datacenter and Standard editions
  • Windows Server 2008 R2 Service Pack 1 Enterprise and Standard editions

Upgrading the operating system version on a server running StoreFront is not supported. Citrix recommends that you install StoreFront on a new installation of the operating system. All the servers in a multiple server deployment must run the same operating system version with the same locale settings. StoreFront server groups containing mixtures of operating system versions and locales are not supported. While a server group can contain a maximum of five servers, from a capacity perspective based on simulations, there is no advantage of server groups containing more than three servers. All servers in a server group must reside in the same location.

Microsoft Internet Information Services (IIS) and Microsoft .NET Framework are required on the server. If either of these prerequisites is installed but not enabled, the StoreFront installer enables them before installing the product. Windows PowerShell and Microsoft Management Console, which are both default components of Windows Server, must be installed on the web server before you can install StoreFront. The relative path to StoreFront in IIS must be the same on all the servers in a group.

The StoreFront installer will add the IIS features it requires.  If you desire to pre-install these features, below is the required list:

On all platforms:

  • Web-Static-Content
  • Web-Default-Doc
  • Web-Http-Errors
  • Web-Http-Redirect
  • Web-Http-Logging
  • Web-Mgmt-Console
  • Web-Scripting-Tools
  • Web-Windows-Auth
  • Web-Basic-Auth
  • Web-AppInit

On Windows Server 2008 R2:

  • Web-Asp-Net
  • As-Tcp-PortSharing

On Windows Server 2012 R2:

  • Web-Asp-Net45
  • Net-Wcf-Tcp-PortSharing45
     

StoreFront uses the following ports for communications. Ensure your firewalls and other network devices permit access to these ports.

  • TCP ports 80 and 443 are used for HTTP and HTTPS communications, respectively, and must be accessible from both inside and outside the corporate network.
  • TCP port 808 is used for communications between StoreFront servers and must be accessible from inside the corporate network.
  • A TCP port randomly selected from all unreserved ports is used for communications between the StoreFront servers in a server group. When you install StoreFront, a Windows Firewall rule is configured enabling access to the StoreFront executable. However, since the port is assigned randomly, you must ensure that any firewalls or other devices on your internal network do not block traffic to any of the unassigned TCP ports.
  • TCP port 8008 is used by Receiver for HTML5, where enabled, for communications from local users on the internal network to the servers providing their desktops and applications.

StoreFront supports both pure IPv6 networks and dual-stack IPv4/IPv6 environments.

Infrastructure requirements

Citrix has tested and provides support for StoreFront when used with the following Citrix product versions.

Citrix server requirements

StoreFront stores aggregate desktops and applications from the following products.

  • XenDesktop
    • XenDesktop 7.6
    • XenDesktop 7.5
    • XenDesktop 7.1
    • XenDesktop 7
    • XenDesktop 5.6 Feature Pack 1
    • XenDesktop 5.6
    • XenDesktop 5.5
  • XenApp
    • XenApp 7.6
    • XenApp 7.5
    • XenApp 6.5 Feature Pack 2
    • XenApp 6.5 Feature Pack 1 for Windows Server 2008 R2
    • XenApp 6.5 for Windows Server 2008 R2
    • XenApp 6.0 for Windows Server 2008 R2
    • XenApp 5.0 Feature Pack 3 for Windows Server 2008 x64 Edition
    • XenApp 5.0 Feature Pack 3 for Windows Server 2008
    • XenApp 5.0 Feature Pack 3 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 3 for Windows Server 2003
    • XenApp 5.0 Feature Pack 2 for Windows Server 2008 x64 Edition
    • XenApp 5.0 Feature Pack 2 for Windows Server 2008
    • XenApp 5.0 Feature Pack 2 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 2 for Windows Server 2003
    • XenApp 5.0 Feature Pack 1 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 1 for Windows Server 2003
    • XenApp 5.0 for Windows Server 2008 x64 Edition
    • XenApp 5.0 for Windows Server 2008
    • XenApp 5.0 for Windows Server 2003 x64 Edition
    • XenApp 5.0 for Windows Server 2003
  • XenMobile
    • XenMobile 9.0/App Controller 9.0
    • XenMobile 8.7/App Controller 2.10

NetScaler Gateway requirements

The following versions of NetScaler Gateway can be used to provide access to StoreFront for users on public networks.

  • NetScaler Gateway 10.5
  • NetScaler Gateway 10.1
  • Access Gateway 10 Build 69.4 (the version number is displayed at the top of the configuration utility)
  • Access Gateway 9.3, Enterprise Edition

Receiver for HTML5 requirements

If you plan to enable users to access desktops and applications using Receiver for HTML5 running on Receiver for Web sites, the following additional requirements apply.

For internal network connections, Receiver for HTML5 enables access to desktops and applications provided by the following products.

  • XenDesktop 7.6
  • XenDesktop 7.5
  • XenDesktop 7.1
  • XenDesktop 7
  • XenApp 7.6
  • XenApp 7.5
  • XenApp 6.5 Feature Pack 2
  • XenApp 6.5 Feature Pack 1 for Windows Server 2008 R2 (requires Hotfix XA650R01W2K8R2X64051, which is available at http://support.citrix.com/article/CTX135757)

For remote users outside the corporate network, Receiver for HTML5 enables access to desktops and applications through the following versions of NetScaler Gateway.

  • NetScaler Gateway 10.1
  • Access Gateway 10 Build 71.6014 (the version number is displayed at the top of the configuration utility)

For users connecting through NetScaler Gateway, Receiver for HTML5 enables access to desktops and applications provided by the following products.

  • XenDesktop
    • XenDesktop 7.6
    • XenDesktop 7.5
    • XenDesktop 7.1
    • XenDesktop 7
    • XenDesktop 5.6
    • XenDesktop 5.5
  • XenApp
    • XenApp 7.6
    • XenApp 7.5
    • XenApp 6.5 Feature Pack 2
    • XenApp 6.5 Feature Pack 1 for Windows Server 2008 R2
    • XenApp 6.5 for Windows Server 2008 R2
    • XenApp 6.0 for Windows Server 2008 R2
    • XenApp 5.0 Feature Pack 3 for Windows Server 2008 x64 Edition
    • XenApp 5.0 Feature Pack 3 for Windows Server 2008
    • XenApp 5.0 Feature Pack 3 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 3 for Windows Server 2003
    • XenApp 5.0 Feature Pack 2 for Windows Server 2008 x64 Edition
    • XenApp 5.0 Feature Pack 2 for Windows Server 2008
    • XenApp 5.0 Feature Pack 2 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 2 for Windows Server 2003
    • XenApp 5.0 Feature Pack 1 for Windows Server 2003 x64 Edition
    • XenApp 5.0 Feature Pack 1 for Windows Server 2003
    • XenApp 5.0 for Windows Server 2008 x64 Edition
    • XenApp 5.0 for Windows Server 2008
    • XenApp 5.0 for Windows Server 2003 x64 Edition
    • XenApp 5.0 for Windows Server 2003

User device requirements

Updated: 2015-03-16

StoreFront provides a number of different options for users to access their desktops and applications. Citrix Receiver users can either access stores through Citrix Receiver or use a web browser to log on to a Receiver for Web site for the store. For users who cannot install Citrix Receiver, but have an HTML5-compatible web browser, you can provide access to desktops and applications directly within the web browser by enabling Receiver for HTML5 on your Receiver for Web site.

Users with non-domain-joined desktop appliances access their desktops through their web browsers, which are configured to access Desktop Appliance sites. In the case of domain-joined desktop appliances and repurposed PCs running the Citrix Desktop Lock, along with older Citrix clients that cannot be upgraded, users must connect through the XenApp Services URL for the store.

If you plan to deliver offline applications to users, the Offline Plug-in is required in addition to Receiver for Windows. If you want to deliver Microsoft Application Virtualization (App-V) sequences to users, a supported version of the Microsoft Application Virtualization Desktop Client is also required. For more information, see Publishing Applications for Streaming and Publishing App-V Sequences in XenApp. Users cannot access offline applications or App-V sequences through Receiver for Web sites.

It is assumed that all user devices meet the minimum hardware requirements for the installed operating system.

Requirements for Receiver-enabled stores

The following Citrix Receiver versions can be used to access StoreFront stores from both internal network connections and through NetScaler Gateway. Connections through NetScaler Gateway can be made using both the NetScaler Gateway Plug-in and/or clientless access. Citrix Receiver for Windows 4.3 is the minimum version required to receive the full StoreFront 3.0.x unified Citrix Receiver experience.  See Support for the unified Citrix Receiver experience.

Requirements for access to stores through Receiver for Web sites

The following Citrix Receiver, operating system, and web browser combinations are recommended for users to access Receiver for Web sites from both internal network connections and through NetScaler Gateway. Connections through NetScaler Gateway can be made using both the NetScaler Gateway Plug-in and clientless access.

  • Citrix Receiver for Windows 4.3 and Citrix Receiver for Windows 4.2.x
    • Windows 10  (32-bit and 64-bit editions) 
    • Windows 8.1  (32-bit and 64-bit editions) 
    • Windows 8 (32-bit and 64-bit editions)
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions)
    • Windows Embedded Standard 7 Service Pack 1 or Windows Thin PC
      • Internet Explorer 11, 10, 9, 8  (32-bit mode)
  • Citrix Receiver for Windows 4.0 and  Citrix Receiver for Windows 3.4
    • Windows 8 (32-bit and 64-bit editions)
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions)
    • Windows Embedded Standard 7 Service Pack 1 and Windows Thin PC
      • Internet Explorer 11, 10, 9, 8  (32-bit mode) 
  • Citrix Receiver for Mac 11.8 and Citrix Receiver for Mac 11.7
  • Citrix Receiver for Linux 12.1 and Citrix Receiver for Linux 13
    • Ubuntu 12.04 (32-bit) and 14.04 LTS (32-bit)
      • Google Chrome 43 and 42
      • Mozilla Firefox 38 and 37 

Requirements for access to desktops and applications through Receiver for HTML5

The following operating systems and web browsers are recommended for users to access desktops and applications using Receiver for HTML5 running on Receiver for Web sites. Both internal network connections and connections through NetScaler Gateway are supported. However, for connections from the internal network, Receiver for HTML5 only enables access to resources provided by specific products. Additionally, specific versions of NetScaler Gateway are required to enable connections from outside the corporate network. For more information, see Infrastructure requirements.

  • Browsers
    • Internet Explorer 11 and 10 (HTTP connections only)
    • Safari 7
    • Safari 6
    • Google Chrome 43 and 42 — Requires reenabling Netscape Plug-in API (NPAPI). See http://support.citrix.com/article/CTX200889.
    • Mozilla Firefox 38 and 37
  • Operating systems
    • Windows RT
    • Windows 8.1 (32-bit and 64-bit editions)
    • Windows 8 (32-bit and 64-bit editions)
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions)
    • Windows Vista Service Pack 2 (32-bit and 64-bit editions)
    • Windows Embedded XP
    • Mac OS X 10.10 Yosemite
    • Mac OS X 10.9 Mavericks
    • Mac OS X 10.8 Mountain Lion
    • Mac OS X 10.7 Lion
    • Mac OS X 10.6 Snow Leopard
    • Google Chrome OS 42
    • Google Chrome OS 33
    • Ubuntu 12.04 (32-bit)

Requirements for access to stores through Desktop Appliance sites

The following Citrix Receiver, operating system, and web browser combinations are recommended for users to access Desktop Appliance sites from the internal network. Connections through NetScaler Gateway are not supported.

  • Citrix Receiver for Windows 4.1
    • Windows 8.1 (32-bit and 64-bit editions)
      • Internet Explorer 11 (32-bit mode)
    • Windows 8 (32-bit and 64-bit editions)
      • Internet Explorer 10 (32-bit mode)
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
      • Internet Explorer 9 (32-bit mode)
      • Internet Explorer 8 (32-bit mode)
    • Windows Embedded XP
      • Internet Explorer 8 (32-bit mode)
  • Citrix Receiver for Windows 4.0 or Citrix Receiver for Windows 3.4
    • Windows 8 (32-bit and 64-bit editions)
      • Internet Explorer 10 (32-bit mode)
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
      • Internet Explorer 9 (32-bit mode)
      • Internet Explorer 8 (32-bit mode)
    • Windows Embedded XP
      • Internet Explorer 8 (32-bit mode)
  • Citrix Receiver for Windows Enterprise 3.4
    • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
      • Internet Explorer 9 (32-bit mode)
      • Internet Explorer 8 (32-bit mode)
    • Windows Embedded XP
      • Internet Explorer 8 (32-bit mode)
  • Citrix Receiver for Linux 12.1
    • Ubuntu 12.04 (32-bit)
      • Mozilla Firefox 27

Requirements for access to stores through XenApp Services URLs

All the versions of Citrix Receiver listed above can be used to access StoreFront stores with reduced functionality through XenApp Services URLs. In addition, you can use the older client that does not support other access methods — Citrix Receiver for Linux 12.0 (internal network connections only) — to access stores through XenApp Services URLs. Connections through NetScaler Gateway, where supported, can be made using both the NetScaler Gateway Plug-in and clientless access.

Smart card requirements

Requirement for using Receiver for Windows 4.X with smart cards

Citrix tests for compatibility with the U.S. Government Common Access Card (CAC), U.S. National Institute of Standards and Technology Personal Identity Verification (NIST PIV) cards, and USB smart card tokens. You can use contact card readers that comply with the USB Chip/Smart Card Interface Devices (CCID) specification and are classified by the German Zentraler Kreditausschuss (ZKA) as Class 1 smart card readers. ZKA Class 1 contact card readers require that users insert their smart cards into the reader. Other types of smart card readers, including Class 2 readers (which have keypads for entering PINs), contactless readers, and virtual smart cards based on Trusted Platform Module (TPM) chips, are not supported.

For Windows devices, smart card support is based on Microsoft Personal Computer/Smart Card (PC/SC) standard specifications. As a minimum requirement, smart cards and card readers must be supported by the operating system and have received Windows Hardware Certification.

The following smart card and middleware combinations have been tested by Citrix as representative examples of their type. However, other smart cards and middleware can also be used. For more information about Citrix-compatible smart cards and middleware, see http://www.citrix.com/ready.

Middleware implementation

Smart card

HID Global ActivClient 7.0 in both GSC-IS and NIST PIV modes

CAC

HID Global ActivClient 6.2 CAC edition in GSC-IS mode

CAC

NIST PIV

Gemalto Minidriver 8.3 for .NET Smart Card

Gemalto IDPrime .NET 510

SafeNet Authentication Client 8.0 for Windows

SafeNet eToken 5100

GSC-IS – (U.S.) Government Smart Card Interoperability Specifications

Requirements for using Desktop Appliance sites with smart cards

For users with desktop appliances and repurposed PCs running the Citrix Desktop Lock, Citrix Receiver for Windows Enterprise 3.4 is required for smart card authentication. On all other Windows devices, Citrix Receiver for Windows 4.1 can be used.

Requirements for using Receiver for Android with smart cards

Smartcard authentication to NetScaler Gateway with StoreFront 2.x and XenDesktop 5.6 and above or XenApp 6.5 and above.

Supported smartcard readers:

  • BaiMobile 3000MP Bluetooth Smart Card Reader

Supported smartcards:

  • PIV cards
  • Common Access Card

Requirements for using Receiver for iOS with smart cards

Smartcard authentication to NetScaler Gateway with StoreFront 2.x and XenDesktop 5.6 and above or XenApp 6.5 and above.

Supported smartcard readers:

  • Precise Biometrics Tactivo for iPad Mini
  • Precise Biometrics Tactivo for iPad (4th generation) and Tactivo for iPad (3rd generation) and iPad 2
  • Thursby TSS-PK7 and PK8 Smart Card Readers
  • BaiMobile 3000MP Bluetooth Smart Card Reader

Supported smartcards:

  • PIV cards
  • Common Access Card

Requirements for using Receiver for Linux 13.1 with smart cards and XenApp Services Support

The following smart cards and readers are supported:

Smart cards:

  • Smart cards with PKCS#11 drivers for the appropriate Linux platform

Smart card readers:

  • Readers that are CCID compliant

Requirements for authentication through NetScaler Gateway

The following versions of NetScaler Gateway can be used to provide access to StoreFront for users on public networks authenticating with smart cards.

  • NetScaler Gateway 10.1
  • Access Gateway 10 Build 69.4 (the version number is displayed at the top of the configuration utility)
  • Access Gateway 9.3, Enterprise Edition