System requirements

Last published : Oct 16, 2026
Important
Citrix® does not support installation of any Self-Service Password Reset component on a domain controller. Deploy the Self-Service Password Reset components on dedicated servers.
This article describes the hardware and software requirements for your Self-Service Password Reset environment. This article assumes that each computer meets the minimum hardware requirements for the installed operating system.

Software

Computers in your Self-Service Password Reset environment might require the following supporting system software.
  • Windows 2016 and Windows 2012 R2 -  Required by Self-Service Password Reset Server.
  • Microsoft Windows Installer 2.0 or later - Required by all.
  • Microsoft .NET Framework - Required by Self-Service Password Reset Server.
    • 4.6.x (Windows 2016)
    • 4.5.2 (Windows 2012 R2)
  • Internet Information Services (IIS) - Required by Self-Service Password Reset Server.
    • IIS 10.0 (Windows 2016)
    • IIS 8.5 (Windows 2012 R2)
  • VC++ 2008 SP1 runtime - Required by the Self-Service Password Reset Server.
    For a first-time installation, you must download vcredist\_x86.exe from <https://www.microsoft.com/en-us/download/details.aspx?id=26368>, and install it on the Self-Service Password Reset Server.

Self-Service Password Reset Server

  • Self-Service Password Reset Component - Central store
  • Supported Environment - SMB File Share
  • Hardware Requirement - 30 KB disk space per user

ASP.NET 3.5/4.X requirements

The ASP.NET component for your version of .NET framework on your Windows Server computer.

Security and account requirements

Before you install the Self-Service Password Reset Service, ensure that the appropriate accounts and components are available to support the service. Also, because the service uses secure HTTP (HTTPS), it requires a server authentication certificate for Transport Layer Security (TLS) communication with StoreFront.
Server Authentication Requirement:
Before you install the service, obtain a server authentication certificate for TLS communication from a Certificate Authority (CA) or your internal Public Key Infrastructure (PKI), if available.
Accounts Required for Service Modules:
Note: Ensure that both accounts will not expire.
The Self-Service Password Reset Service requires these account types to read and write data as it operates in your environment:
  • Data proxy account
  • Self-service account
When different modules require the same type of account, you can use the same account for multiple modules. Or you can specify different customized accounts for each module.
  • Data proxy account
Requires read and write access to the central store. For more information, see the Create a central store section in Install and configure.
  • Self-service account
Requires sufficient privileges to unlock and reset the password of the relevant users in User Configuration. For more information, Secure configuration.

StoreFront

  • StoreFront 3.7 to 1912

Citrix Workspace™ app

Supported:
  • Citrix Workspace app for Web
  • Citrix Workspace app for Windows
  • Citrix Workspace app for Linux
  • Citrix Workspace app for Mac (Requires StoreFront 3.8)
Not supported:
  • Citrix Workspace app for Chrome
  • Mobile devices (not even with Citrix Workspace app for Web)

External use with Citrix Gateway

Unsupported