CTX-7130 Citrix NFuse Classic
Administration with Enterprise
Services for NFuse Feature Release 3

2

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

© Copyright 2003 Citrix Systems, Inc.

3

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

Citrix NFuse Classic (NFuse Classic)
Feature Overview

Objectives

At the end of this lesson you will be able to:

‹

Recognize NFuse Classic features

‹

Recognize NFuse Classic system requirements

‹

Configure support for multiple MetaFrame servers

‹

Configure Auto proxy settings

‹

Configure RSA SecurID support

4

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

NFuse Classic Features

New in this Release

Feature Release 3 adds the following new features to Citrix NFuse Classic:

‹

RSA SecurID Authentication Integration provides support for
SecurID authentication with Citrix NFuse Classic.

‹

Program Neighborhood Agent Admin Tool that provides a web-based
tool to simplify management of the Program Neighborhood Agent
XML-based configuration file. The Program Neighborhood Agent
Admin Tool also supports the management of multiple Program
Neighborhood Agent configuration files on the same server.

‹

Web Archive (WAR) File Support that allows the administrator to
install multiple NFuse Classic web sites on a single web server.

‹

FIPS-140 support for Windows platforms that provides the Citrix
administrator with the choice of using a FIPS-140 validated SSL
provider or the default provider.

‹

Private Certificate Authority Support that allows the use of a private
Certificate Authority with the ICA Java Client.

‹

Multiple MetaFrame Server Farm Support that provides the
administrator with the ability to configure multiple MetaFrame server
farms and provide users with a display of applications available in all
server farms.

‹

Auto Proxy Support that allows the ICA Win32 and ICA Java Clients to
automatically detect and use the proxy settings of the client browser.

„

56$6HFXUH,' $XWKHQWLFDWLRQ

„

3URJUDP1HLJKERUKRRG$JHQW$GPLQ7RRO

„

:$5)LOH6XSSRUW

„

),366XSSRUW

„

3ULYDWH6HFXULW\$XWKRULW\

„

6XSSRUW6XSSRUWIRU0XOWLSOH0HWD)UDPH6HUYHU)DUPV

„

$XWR3UR[\6XSSRUW

„

,&$-DYD&OLHQW6HDPOHVV:LQGRZ6XSSRUW

„

6HFXULW\&RQWURO6HWWLQJV

© Copyright 2003 Citrix Systems, Inc.

5

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

‹

ICA Java Client Seamless Window Support that allows users to resize
the application window, minimize and drag and drop objects
between the published application and applications running locally
on the client device.

‹

Security Control Settings that provide additional security control
settings and can be configured using the NFUSE.CONF file.

‹

Enterprise Services for NFuse enhancements that include:

‹

SecurID Authentication Support that enables support for SecurID
authentication with Enterprise Services for NFuse.

‹

Oracle Database Support that provides support for Oracle
database (version 8i or 9i) for use as the Enterprise Services for
NFuse database.

‹

Authentication Configuration Improvements that provide
administrators with the ability to define different authentication
methods for different NFuse Classic web servers.

‹

Enhanced Group Selection that provides easier group location
and definition. Administrators can view and search for groups
within a particular domain.

‹

Embedded Client Support that provides support for embedded
clients for users who do not have or require a local ICA client.

‹

Primary Credentials that eliminate the storage of credentials in the
Enterprise Services for NFuse database.Remote ID Management
allows users to access applications hosted by server farms in
remote domains.

‹

LDAP Failover that provides the ability for Enterprise Services for
NFuse to communicate with all domain controllers within a
domain using the Lightweight Directory Access Protocol (LDAP).
Enterprise Services for NFuse automatically switches to an
alternate domain controller if a communication problem occurs.

‹

Farm Refresh Options that provide the administrator with greater
control over refresh options for MetaFrame XP server farms.

For more information on Citrix NFuse Classic and Enterprise Services for
NFuse, please see the Citrix NFuse Classic Administrator’s Guide and
Citrix Enterprise Services for NFuse Administrator’s Guide.

6

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

NFuse Classic 2.0 System Requirements

System Requirements

NFuse Classic can be installed on a server with the following minimum
requirements:

‹

MetaFrame XP for Windows Versions 1.0 or higher

‹

MetaFrame for Windows Version 1.8

‹

Citrix MetaFrame for UNIX Operating Systems Version 1.1

Additional Software
Requirements

MetaFrame for Windows Version 1.8 servers must have:

‹

Citrix MetaFrame 1.8 Service Pack 2 or 3 installed on each server.

‹

A Citrix MetaFrame 1.8 Feature Release 1 license installed and
activated on each server.

Web Server
Requirements

An administrator can use NFuse Classic on the following Windows web
servers and platforms:

‹

Internet Information Services 6.0 on Windows

2003 Server

‹

Internet Installation Services 5.0 on Windows 2000 Server family

An administrator can use NFuse Classic on the following UNIX web
server/operating system/ servlet engine/JDK combinations:

NFuse Classic requires a Java Virtual Machine (JVM) for
execution of its Web Server Extension software. During
NFuse Classic installation on Windows platforms and
Web servers, the system is automatically checked for a
JVM. If a JVM is not present on the system, the
installation wizard will install a JVM.

Web Server

Operating
System

Servlet
Engine

JDK

Apache 1.3.26‘

Redhat 7.3

Solaris 8

Tomcat 4.0.5

Tomcat 4.0.5

Sun 1.4.0

Sun 1.4.0

© Copyright 2003 Citrix Systems, Inc.

7

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

NFuse Classic may also be used on the following other web server
platforms that support Java servlets and/or JavaServer Pages.

ICA Client Device
Requirements

The following table lists the minimum ICA Client version levels for
supported web browsers.

Web Server

Operating
System

Servlet Engine

JDK

Apache 1.3.26‘

Redhat 7.2

Solaris 8

Tomcat 3.2.4

Tomcat 3.2.4

Sun 1.3.1

Sun 1.3.1

Sun ONE 6.0

Solaris 9

Sun ONE 6.0

Sun 1.4.0

WebSphere 4.0

Solaris 9

WebSphere 6.0

Sun 1.4.0

ICA Client

Version

Supported Web Browser

Win32

6.1.963 and
above

Internet Explorer 5 and above

Netscape Communicator 4.7x
and above

Netscape Navigator 6.21 and
above

Macintosh

6.0.66 and above

Internet Explorer 5 and above

Netscape Communicator 4.7x
and above

Netscape Navigator 6.21 and
above

UNIX for Solaris

6.0.915 and
above

Netscape Communication 4.7x
and above

Redhat Linux

6.3 and above

Netscape Communicator 4.7x
and above

Netscape Navigator 6.21 and
above

It is recommended that the latest ICA clients be
deployed to end users to ensure latest feature
functionality. The features and functionalities differ for
each ICA client, for more information on supported ICA
client features, see the Citrix ICA Client Administrator’s
Guides for each ICA client.

8

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Enterprise Services for
NFuse System
Requirements

The Enterprise Services for NFuse web server must meet the following
system requirements:

‹

350 MHz CPU (minimum), 800 MHz CPU (recommended)

‹

256 MD RAM (minimum)

‹

Windows 2000 with Service Pack 2 or later and Security Rollout
Package 1 (SRP1) or later

‹

Microsoft Internet Information Server 5.0

The Enterprise Services for NFuse database server must meet the
following system requirements:

‹

350 MHz CPU

‹

256 MD RAM

‹

Windows NT 4.0 with Service Pack 6a or later or Windows 2000 with
Service Pack 2 or later

‹

Microsoft SQL Server 2000 (with Windows 2000) or Microsoft SQL
Server 7.0 (with Windows NT 4.0)

© Copyright 2003 Citrix Systems, Inc.

9

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

Configuring Support for Multiple
MetaFrame Server Farms

Introduction

Administrators can configure NFuse Classic to support multiple
MetaFrame server farms and provide users with a display of applications
available to them from all farms. Users are not aware that the
applications displayed are from multiple MetaFrame farms.

Configuring Multiple
MetaFrame Server
Farms Procedure

An administrator can use the following procedure to configure multiple
MetaFrame servers farms in NFuse Classic.

Step

Action

1

Type http://servername/Citrix/NFuseAdmin in Internet
Explorer.

2

Click Manage Farms.

The Manage Citrix MetaFrame farms page appears.

3

Type the name of the MetaFrame server farm in the Farm
name field.

4

Click Create. The farm name appears in the Citrix MetaFrame
Farms list.

10

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

5

Continue to add additional MetaFrame server farms as
required.

6

Click the Up and Down buttons to place the server farms in
the appropriate order.

7

Click Save.

Step

Action

© Copyright 2003 Citrix Systems, Inc.

11

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

Configuring Auto Proxy

Introduction

NFuse Classic currently supports specifying a proxy server for the ICA
Client to use for ICA traffic. Auto proxy support extends this feature by
allowing administrators to specify auto instead of a specific proxy which
will instruct the ICA Win32 and Java Clients to detect and use the clients
browser’s proxy settings. This feature also allows the administrator to
specify Direct which instructs the ICA client to always make a direct
connection without going through a proxy server.

Configuring Auto Proxy
Procedure

An administrator can use the following procedure to configure auto
proxy settings.

Step

Action

1

Type http://servername/Citrix/NFuseAdmin in Internet
Explorer.

2

Click Client-Side Firewall.

The Client-side firewall settings page appears.

3

Select Auto to allow the ICA client to automatically detect
proxy settings.

4

Click Save.

12

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Configuring RSA SecurID Support

RSA SecurID Overview

RSA SecurID is a two-factor authentication method, using numbers
generated by SecurID tokens (Tokencodes) and PIN numbers to create a
passcode. Users enter their usernames, domains, and SecurID passcodes
in the NFuse Classic login page before they can access applications on
the MetaFrame farm(s).

An administrator can use the NFuse Classic Admin Tool to enable the
SecurID authentication field for users to login. When creating users on
the ACE/Sever, user login names must be the same as their domain
usernames.

RSA SecurID and
NFuse Classic

For the ACE/Server to recognize the NFuse Classic server and accept
authentication requests, an Agent Host must be created for the NFuse
Classic server in the ACE/Server database.

To create an Agent Host, select Net OS Agent from the Agent type drop-
down list on the ACE/Server.

The administrator must locate the sdconf.rec file on the ACE/Server and
copy the file to the Windows\System32 or WINNT\System 32 directory on
the NFuse Classic server. The sdconf.rec file contains the necessary
information that allows the NFuse Classic server to connect to the ACE/
Server.

For more information on Enabling SecurID Authentication see the NFuse
Classic Administrators Guide.

Enabling SecurID
Authentication
Procedure

An administrator can use the following procedure to allow users to
authenticate to NFuse Classic using SecurID.

Step

Action

1

Type http://servername/Citrix/NFuseAdmin in Internet
Explorer.

2

Click Authentication.

3

Select Explicitly login to force users to supply a username and
password to log on to NFuse Classic.

4

Select Use RSA SecurID under Explicit Login settings.

5

Click Save.

© Copyright 2003 Citrix Systems, Inc.

13

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3

Feature Release 3 Addendum

6

Click Apply Changes on the Overview page.

7

Click Apply Changes on the Apply Changes page.

Step

Action

14

© Copyright 2003 Citrix Systems, Inc.

Feature Release 3 Addendum

CTX-7130 Citrix NFuse Classic Administration with Enterprise Services for NFuse Feature Release 3