XenMobile Autodiscovery Service

Autodiscovery is an important part of many XenMobile deployments. Autodiscovery simplifies the enrollment process for users. They can use their network user names and Active Directory passwords to enroll their devices, rather than having to also enter details about the XenMobile server. Users enter their user name in user principal name (UPN) format; for example, user@mycompany.com. The XenMobile AutoDiscovery Service enables you to create or edit an autodiscovery record without assistance from Citrix support.

To access the XenMobile AutoDiscovery Service, navigate to https://xenmobiletools.citrix.com and then click Request Auto Discovery.

Image of the AutoDiscovery Service

Requesting AutoDiscovery

  1. On the AutoDiscovery Service page, you need to first claim a domain. Click Add Domain.

    Image of the Add Domain screen

  2. In the dialog box that opens, enter the domain name of your XenMobile environment and then click Next.

    Image of the Domain name field

  3. The next step provides instructions on verifying that you own the domain.

    • Copy the DNS token provided in the XenMobile Tools Portal.

    • Create a DNS TXT record in the zone file for your domain in your domain hosting provider portal.

      To create a DNS TXT record you need to log into the Domain Hosting Provider portal for the domain you have added in step 2 above. In the Domain Hosting portal you can edit your Domain Name Server Records and add a custom TXT record. An example below of a adding a DNS TXT entry in a hosting portal for sample domain domain.com.

    • Paste the Domain Token in your DNS TXT record and save your Domain name Server record.

    • Back in the XenMobile Tools Portal, click Done to start the DNS check.

    The system detects your DNS TXT record. Alternatively, you can click I’ll update later, and the record is saved. The DNS check won’t start until you select the Waiting record and click DNS Check.

    This check ideally takes about an hour, but it can take up to two days to return a response. In addition, you may need to leave the portal and return to see the status change.

    Image of Verify your Domain dialog box

  4. After you claim your domain, you can enter AutoDiscovery Service information. Right-click the domain record for which you want to request autodiscovery and then click Add ADS.

    If your domain already has an AutoDiscovery record, log a case with Citrix Technical Support to modify details as required.

    Image of the add ADS option

  5. Enter your XenMobile Server FQDN, NetScaler Gateway FQDN, and Instance Name and then click Next. If you are unsure, add a default instance of “zdm”.

    Image of XenMobile Info options

    Note: In the preceding screenshot, note that Worx Home is now called Secure Hub.

  6. Enter the following information for Secure Hub and then click Next.

    • User ID Type: Select the type of ID with which users sign on as either E-mail address or UPN.

      UPN is used when the user’s UPN (User Principal Name) is the same as their e-mail address. Both methods use the domain entered to find the server address. With E-mail address the user will be asked to enter their user name and password and with UPN, they will be asked to enter their password.

    • HTTPS Port: Enter the port used to access Secure Hub over HTTPS. Typically, this is port 443.

    • iOS Enrollment Port: Enter the port used to access Secure Hub for iOS enrollment. Typically, this is port 8443.

    • Required Trusted CA for XenMobile: Indicate whether a trusted certificate is required to access XenMobile or not. This option can be OFF or ON. Currently, the ability to upload a certificate for this feature does not exist. If you want to use trusted certificates for XenMobile, you need to call Citrix Support. To learn more about certificate pinning, see the section on certificate pinning in Secure Hub in the mobile productivity apps documentation. To read about the ports required for certificate pinning to work, see the support article on XenMobile Port Requirements for ADS Connectivity.

    Image of the Secure Hub Info settings

    Note: In the preceding screenshot, note that Worx Home is now called Secure Hub.

  7. A summary page displays all the information you entered in the preceding steps. Verify that the data is correct then click Save.

    Image of the summary page

    Note: In the preceding screenshot, note that Worx Home is now called Secure Hub.

XenMobile Autodiscovery Service

In this article