| MetaFrame offers you a choice of three ICA Win32 Clients, and an ICA Java Client for use on 32-bit Windows systems and other java compliant devices. The following is a little about each of the clients: ICA Win32 Program Neighborhood Agent The state-of-the-art ICA Win32 Client Transparent integration of published resources with the client desktop Native support for the full feature set of MetaFrame XP Native support for the Windows 2000 and Windows XP operating systems Requires Citrix NFuse Classic 1.71 ICA Win32 Web Client The lean ICA Win32 Client for quick distribution Web browser-based access to published resources from links on your Web page No user interface, completely hands-off user experience Limited support for the full feature set of MetaFrame XP Native support for the Windows 2000 and Windows XP operating systems Requires Citrix NFuse Classic or Application Launching and Embedding (ALE) ICA Win32 Program Neighborhood Client Program Neighborhood user interface Requires initial user configuration Native support for MetaFrame XP features Native support for the Windows 2000 and Windows XP operating systems Does not require NFuse Classic ICA Java Client The platform-independent, zero-install ICA Client No user interface, completely hands-off user experience Limited support for the full feature set of MetaFrame XP The ICA Win32 Program Neighborhood Agent allows you to seamlessly add published application content directly to the users local desktop. With the Program Neighborhood Agent, users can access remote applications by clicking icons on the Windows desktop, in the Start menu, in the Windows system tray, or a combination of these. The Program Neighborhood Agent operates in the background. It has no user interface, except for a shortcut menu in the system tray. Therefore, working with remote applications has the look and feel of working with local applications. The default properties for all Program Neighborhood Agents on your network are controlled by a single, editable configuration file called Config.xml. This file is placed on the NFuse Classic server during NFuse Classic installation. You can edit Config.xml to dynamically manage and control the clients on your network. For example, you can edit Config.xml to prevent users from editing certain settings and the changes are automatically configured on the local client device. The Program Neighborhood Agent communicates with the NFuse Classic web server over HTTP or HTTPS protocols, which makes it easy to pass through firewalls using port 80 or 443. The PN Agent client can be deployed both automatically and manually. If you will be using the PN Agent exclusively then you can set NFuse Classic to automatically push the Program Neighborhood Agent client by editing the NFuse.conf file as defined below. 1. Open the NFuse.conf file, by default located in the c:\Program Files\Citrix\NFuse\Conf folder. 2. Edit the Win32Client parameter and change the ica32.exe to ica32a.msi. For example: Win32Client=Click here for the Client&/Citrix/ICAWEB/en/ica32/ica32a.msi 3. Click Start click Run type: IISRESET and click OK. The following defines how to manually install the Program Neighborhood Agent on a local workstation. 1. Download the Program Neighborhood Agent Client from http://www.citrix.com/download. When finished run the downloaded ICA32a.MSI file and click Next to start the installation.  2. Click to select the I accept the license agreement radio button and click Next.  3. Click Next to accept the default ICA client location.  4. Enter the server address of an NFuse-enabled web server. You can use http: or https:. If you have followed my recommendations and installed CSG and have secured the NFuse web server with an SSL certificate then enter https://nfuse_enabled_webserver and click Next with finished.  5. Click Next to accept the default program folder name.  6. Enter a name to be assicated with the local workstation. Remember that this name must be unique to the network. Click Next when finished.  7. The next screen asks if you would like to enable Single Sign-On. If you are installing the PN Agent of a workstation that you will be logging on to with the same username and password as the Citrix users account then click Yes, othewise click No. Click Next with finished.  8. Click Next to install the Program Neighborhood Agent.  9. Click Finish.  You have now successfully installed the Program Neighborhood Agent and are ready to take advantage of seamlessly adding published applications to the end-users desktop, programs group and or system tray not to mention client to server content redirection. The ICA Win32 Web Client is used if you want users to launch published resources from within their familiar Web browser. This ICA Client requires the use of NFuse Classic or ALE (Application Launching and Embedding) The Web Client is available as a self-extracting executable. At approximately 1.8MB in size, this package is significantly smaller than the other ICA Win32 Clients. The smaller size allows quicker downloads and installation. You can configure the ICA Win32 Web Client for silent user installation. The ICA Win32 Web Client (ica32t.exe) can also be automatically deployed. Keeping with the goal of limited client touch, I recommend using the ICA32 Web Client and NFuse Classic to automatically deploy it. One method of deploying ICA Clients on your users devices is to use the Web-based ICA Client installation, which is a default component of NFuse Classic. This feature uses HTML documents and ICA Client installation files, stored on a Web server, to determine the type of client device and Web browser, and display the user with a link to the appropriate ICA Client installation file. When users click on a link, the ICA Client is installed on their client device. The following shows the default installation option:  In order to take advantage of Web-based ICA Client installation you will need to verify that the ICA clients are installed to the NFuse web server. (/webroot/Citrix/ICAWEB/language/platform, i.e., C:\inetpub\wwwroot\citrix\icaweb\en\i386\). If during the installation of NFuse use did not choose to install the ICA Client to the ICAWEB directory then you will need to copy them now. 1. Create a directory called \Citrix\ICAWEB off the root of your Web server. 2. Insert the MetaFrame XP with Feature Release 2 Components CD in your Web servers CD-ROM. 3. Change directories to the CDs ICAWEB directory and copy the contents of the ICAWEB directory on the CD into the /Citrix/ICAWEB directory on the web server. Make sure you copy the contents of the directory and not the ICAWEB directory itself. For more information about the utilize NFuse to automatically deploy ICA Clients please refer to the Client Download Settings section of the ICA Client Deployment section of this document. If the design calls for deploying ICA Clients over a low-bandwidth network or you are not sure what platform your users are on, consider using the ICA Java Client. The ICA Java Client is a Java applet that is cross-platform compatible and can be deployed by the NFuse Classic server to any Java-compatible Web browser. Using NFuse Classic, you can configure the ICA Java Client to be a small download (as small as 300K) by removing unwanted components. You can also allow users to control which ICA Java Client components they require. The ICA Java Client is configured and optimized for zero-residence download-and-run deployment, which gives you the ability to connect from anywhere without the need to install an ICA Client. For information on how to configure NFuse Classic 1.71 to utilize the ICA Java Client, please refer to the Embedded Application in the ICA Client Deployment section of the Implementation Phase in this document. For information of how the end-user would configure NFuse to use the ICA Java Client please refer to Sample end-user training document in the End-User Training section of the Readiness Phase in this document. The following defines how to deliver your private CA root certificate to clients using the ICA Java client in NFuse Classic 1.71. If you created your own digital certificates for use with Citrix Secure Gateway or the SSL Relay Service, you need to deliver your private CA root certificate to all client devices. Windows ICA clients read root certificates from the client certificate store in the Windows operating system, but the ICA Java client does not have access to that certificate store. Therefore, by default, you will find that the Win32 ICA client connects successfully using SSL but the ICA Java client fails to connect. In order to use a private root certificate with the ICA Java client in NFuse Classic 1.71, your root certificate must be exported to a file, copied to your web server, and then changes must be made to the template.ica and guest_template.ica files: 1. Export your private root certificate to a DER-encoded binary file named myroot.crt. 2. Copy this file to the NFuse Classic 1.71 web server in the document root beneath /Citrix/ICAWEB/en/icajava. For example, http://NFuse17-server-name/Citrix/ICAWEB/en/icajava/myroot.crt should be a valid URL. 3. On the NFuse Classic 1.71 web server, locate the template.ica and guest_template.ica files. On Windows/IIS servers running NFuse Classic 1.71, these files are located beneath %ProgramFiles%\Citrix\NFuse. Edit each the files and add the following two lines just below the [NFuse_IcaEncryption] tag: SSLNoCACerts=1 SSLCACert0=myroot.crt Changes should take effect immediately and ICA Java client users should now be able to connect using SSL. If you are running Suns Java plug-in changes to to appembed.asp are required in NFuse Classic 1.71 in order to support Windows Internet Explorer. Users who have installed the Java Virtual Machine (JVM) plug-in from Sun Microsystems and opt to use the Sun JVM for applet tags will not be able to connect to MetaFrame applications using the ICA Java client in NFuse Classic 1.71. The error message users receive is: java.lang.ClassNotFoundException: com.citrix.JICA.class NFuse Classic 1.71 renders improper applet HTML for Windows/IE users because it assumes these users will use the Microsoft JVM. To resolve this issue, either 1) disable the option in Internet Explorer to use Sun JVM for applets, or 2) edit the appembed.asp file to accomodate these users: Disable the Sun JVM in Internet Explorer: In Internet Explorer select the Tools > Options menu and click the Advanced tab. Locate the option that says "Use Sun JVM for <applet>" and clear that checkbox. or Edit the appembed.asp file: On your NFuse Classic 1.71 web server, edit the /Citrix/NFuse17/appembed.asp file: o Locate the following line of code, around line 408: o hange this line so that it reads: o Locate the following line of code, around line 414: | jicaPackages = Replace(jicaPackages, ",", packageSuffix & ",") | Replace this line with the following three lines: | jicaCabFiles = jicaPackages jicaPackages = Replace(jicaPackages, ",", packageSuffix & ",") jicaCabFiles = Replace(jicaCabFiles, ",", "M.cab,") | o Locate the applet tag, starting aroud line 435: | <applet code=com.citrix.JICA width="<%=DesiredHRES%>" height="<%=DesiredVRES%>" codebase="/Citrix/ICAWEB/<%=langCode%>/icajava" archive="<%=jicaPackages%>" name="javaclient" > <param name=cabinets value="<%=jicaPackages%>"> | o Edit the tag so that it reads as follows: | <applet code=com.citrix.JICA width="<%=DesiredHRES%>" height="<%=DesiredVRES%>" codebase="/Citrix/ICAWEB/<%=langCode%>/icajava" archive="<%=jicaPackages%>" name="javaclient" MAYSCRIPT > <param name=cabinets value="<%=jicaCabFiles%>"> | Changes should take effect immediately. When you install MetaFrame, the ICA Win32 Program Neighborhood Client is installed on the MetaFrame server. To overcome the lack of Published Application support on alternative devices (Mac, Linux, Thin Terminals) and to give users the benefits of Program Neighborhood, you can publish the ICA Win32 Client application on your MetaFrame XP servers. Users of the ICA Client on other platforms can create one connection in their connection managers to the Program Neighborhood application. After they connect to Program Neighborhood, they can use the interface to launch all other applications that are published on all the servers in the server farm. Use Citrix Management Console to publish the application, the executable file to publish is Pn.exe. This program file is located at %SystemRoot%\Program Files\Citrix\Ica PassThrough. The following defines hbow to install the ICA Client on a Redhat Linux 7.1 client. 1. Download the client from www.citrix.com/dowload or Navigate to a pre-configured NFuse site which has the client available for download  2. Log on as root at the client workstation. 3. Open a command window. 4. If you are installing the ICA Client from a CD-ROM, insert the CD-ROM in the drive. Mount the CD-ROM using the appropriate instructions for your workstation. Change to the ICAinst/IcaUNIX directory (ICAclient/IcaUNIX for Version 3.0 installations) on the mounted CD-ROM. or If you are installing the ICA Client from a tar file, uncompress the tar file and extract the contents into a temporary directory.
|