- Infrastructure requirements
- User device requirements
StoreFront provides a number of different options for users to access their desktops and applications. Citrix Receiver users can either access stores through Citrix Receiver or use a web browser to log on to a Receiver for Web site for the store. For users who cannot install Citrix Receiver, but have an HTML5-compatible web browser, you can provide access to desktops and applications directly within the web browser by enabling Receiver for HTML5 on your Receiver for Web site.
Users with non-domain-joined desktop appliances access their desktops through their web browsers, which are configured to access Desktop Appliance sites. In the case of domain-joined desktop appliances and repurposed PCs running the Citrix Desktop Lock, along with older Citrix clients that cannot be upgraded, users must connect through the XenApp Services URL for the store.
If you plan to deliver offline applications to users, the Offline Plug-in is required in addition to Receiver for Windows. If you want to deliver Microsoft Application Virtualization (App-V) sequences to users, a supported version of the Microsoft Application Virtualization Desktop Client is also required. For more information, see Publishing Applications for Streaming and Publishing App-V Sequences in XenApp. Users cannot access offline applications or App-V sequences through Receiver for Web sites.
It is assumed that all user devices meet the minimum hardware requirements for the installed operating system.
The following Citrix Receiver versions can be used to access StoreFront stores from both internal network connections and through NetScaler Gateway. Connections through NetScaler Gateway can be made using both the NetScaler Gateway Plug-in and/or clientless access.
For lifecycle information for Citrix Receiver, see Lifecycle Milestones for Citrix Receiver.
The following Citrix Receiver, operating system, and web browser combinations are recommended for users to access Receiver for Web sites from both internal network connections and through NetScaler Gateway. Connections through NetScaler Gateway can be made using both the NetScaler Gateway Plug-in and clientless access.
The following operating systems and web browsers are recommended for users to access desktops and applications using Receiver for HTML5 running on Receiver for Web sites. Both internal network connections and connections through NetScaler Gateway are supported. However, for connections from the internal network, Receiver for HTML5 only enables access to resources provided by specific products. Additionally, specific versions of NetScaler Gateway are required to enable connections from outside the corporate network. For more information, see Infrastructure requirements.
The following Citrix Receiver, operating system, and web browser combinations are recommended for users to access Desktop Appliance sites from the internal network. Connections through NetScaler Gateway are not supported.
All the versions of Citrix Receiver listed above can be used to access StoreFront stores with reduced functionality through XenApp Services URLs. In addition, you can use the older client that does not support other access methods — Citrix Receiver for Linux 12.0 (internal network connections only) — to access stores through XenApp Services URLs. Connections through NetScaler Gateway, where supported, can be made using both the NetScaler Gateway Plug-in and clientless access.
Requirement for using Receiver for Windows 4.X with smart cards
Citrix tests for compatibility with the U.S. Government Common Access Card (CAC), U.S. National Institute of Standards and Technology Personal Identity Verification (NIST PIV) cards, and USB smart card tokens. You can use contact card readers that comply with the USB Chip/Smart Card Interface Devices (CCID) specification and are classified by the German Zentraler Kreditausschuss (ZKA) as Class 1 smart card readers. ZKA Class 1 contact card readers require that users insert their smart cards into the reader. Other types of smart card readers, including Class 2 readers (which have keypads for entering PINs), contactless readers, and virtual smart cards based on Trusted Platform Module (TPM) chips, are not supported.
For Windows devices, smart card support is based on Microsoft Personal Computer/Smart Card (PC/SC) standard specifications. As a minimum requirement, smart cards and card readers must be supported by the operating system and have received Windows Hardware Certification.
The following smart card and middleware combinations have been tested by Citrix as representative examples of their type. However, other smart cards and middleware can also be used. For more information about Citrix-compatible smart cards and middleware, see http://www.citrix.com/ready.
Middleware implementation |
Smart card |
---|---|
HID Global ActivClient 7.0 in both GSC-IS and NIST PIV modes |
CAC |
HID Global ActivClient 6.2 CAC edition in GSC-IS mode |
CAC NIST PIV |
Gemalto Minidriver 8.3 for .NET Smart Card |
Gemalto IDPrime .NET 510 |
SafeNet Authentication Client 8.0 for Windows |
SafeNet eToken 5100 |
GSC-IS – (U.S.) Government Smart Card Interoperability Specifications |
Requirements for using Desktop Appliance sites with smart cards
For users with desktop appliances and repurposed PCs running the Citrix Desktop Lock, Citrix Receiver for Windows Enterprise 3.4 is required for smart card authentication. On all other Windows devices, Citrix Receiver for Windows 4.1 can be used.
Requirements for using Receiver for Android with smart cards
Smartcard authentication to NetScaler Gateway with StoreFront 2.x and XenDesktop 5.6 and above or XenApp 6.5 and above.
Supported smartcard readers:
Supported smartcards:
Requirements for using Receiver for iOS with smart cards
Smartcard authentication to NetScaler Gateway with StoreFront 2.x and XenDesktop 5.6 and above or XenApp 6.5 and above.
Supported smartcard readers:
Supported smartcards:
Requirements for using Receiver for Linux 13.1 with smart cards and XenApp Services Support
The following smart cards and readers are supported:
Smart cards:
Smart card readers:
Requirements for authentication through NetScaler Gateway
The following versions of NetScaler Gateway can be used to provide access to StoreFront for users on public networks authenticating with smart cards.