Install and configure 编辑

Install and setup sequence

1. Install the Federated Authentication Service (FAS)
2. Enable the FAS plug-in on StoreFront stores
3. Configure the Delivery Controller
4. Configure Group Policy
5. Use the FAS administration console to:
   1. Deploy certificate templates
   2. Set up certificate authorities
   3. Authorize FAS to use your certificate authorities
   4. Configure rules
   5. Connect FAS to Citrix Cloud (optional)

Install the Federated Authentication Service

For security, Citrix recommends that the Federated Authentication Service (FAS) is installed on a dedicated server that is secured in a similar way to a domain controller or certificate authority. FAS can be installed from either:

• the Citrix Virtual Apps and Desktops installer (from the Federated Authentication Service button on the autorun splash screen when the ISO is inserted), or
• the stand-alone FAS installer file (available as an MSI file on Citrix Downloads).

These install the following components:

• Federated Authentication Service
• PowerShell snap-in cmdlets for advanced FAS configuration
• FAS administration console
• FAS Group Policy templates (CitrixFederatedAuthenticationService.admx/adml)
• Certificate template files
• Performance counters and event logs

Upgrading FAS

You can upgrade FAS to a newer version using an in-place upgrade. Before upgrading, consider the following:

• All FAS server settings are preserved when you perform an in-place upgrade.
• Ensure that the FAS administration console is closed before you upgrade FAS.
• Ensure that at least one FAS server is available always. If no server is reachable by a Federation Authentication Service-enabled StoreFront server, users cannot log on or start applications.

To start an upgrade, install FAS from the Citrix Virtual Apps and Desktops installer or from the stand-alone FAS installer file.

Enable the FAS plug-in on StoreFront stores

Note:

This step is not needed if you are using FAS only with Citrix Cloud.

To enable FAS integration on a StoreFront Store, run the following PowerShell cmdlets as an Administrator account. If the store has a different name, modify $StoreVirtualPath.

    Get-Module "Citrix.StoreFront.*" -ListAvailable | Import-Module
    $StoreVirtualPath = "/Citrix/Store"
    $store = Get-STFStoreService -VirtualPath $StoreVirtualPath
    $auth = Get-STFAuthenticationService -StoreService $store
    Set-STFClaimsFactoryNames -AuthenticationService $auth -ClaimsFactoryName "FASClaimsFactory"
    Set-STFStoreLaunchOptions -StoreService $store -VdaLogonDataProvider "FASLogonDataProvider"
<!--NeedCopy-->