Integration with CipherTrust Manager
To integrate Citrix FAS with the CipherTrust Manager, you need to configure SafeNetProtectApp Key Storage Provider with Citrix FAS. To do so:
Note
Ensure that AD CS is setup and the AD CS Server is joined to an Active Directory Domain Controller.
Once Citrix FAS has been installed on the Server, edit the configuration file located at
C:\Program Files\Citrix\Federated Authentication Service
Right click
Citrix.Authentication.FederatedAuthenticationService.exe
to edit the configuration file.Uncomment
<add key="Citrix.TrustFabric.ClientSDK.TrustAreaJoinParameters.ProviderName" value="Microsoft Software Key Storage Provider"/>
and change the name of the provider to SafeNetProtectApp Key Storage Provider.Close the Citrix FAS console if open, and restart the Citrix Federated Authentication Service from
services.msc
.Deploy your certificate templates and add the support of those templates to your CA by setting up your Certificate Authority.
Click Authorize and select the appropriate CA from the dropdown to issue a pending Certificate Signing request in the Microsoft Certification Authority console.
Open command prompt and type in
certsrv.msc
. Click on the name of your CA > Pending Requests. Right click on the CSR > All Tasks > Issue to complete the process of Authorization.For configuring the rules, refer to Configuring User Rules.
This completes the integration of Citrix FAS with the CipherTrust Manager.