<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>michaelcolson.com &#187; password manager</title>
	<atom:link href="http://www.michaelcolson.com/tag/password-manager/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.michaelcolson.com</link>
	<description></description>
	<lastBuildDate>Sat, 06 Mar 2010 14:54:29 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>SSL Error 47 with Citrix Password Manager</title>
		<link>http://www.michaelcolson.com/2010/03/03/ssl-error-47-with-citrix-password-manager/</link>
		<comments>http://www.michaelcolson.com/2010/03/03/ssl-error-47-with-citrix-password-manager/#comments</comments>
		<pubDate>Wed, 03 Mar 2010 18:58:48 +0000</pubDate>
		<dc:creator>michael</dc:creator>
				<category><![CDATA[citrix]]></category>
		<category><![CDATA[password manager]]></category>
		<category><![CDATA[ssl]]></category>

		<guid isPermaLink="false">http://www.michaelcolson.com/?p=344</guid>
		<description><![CDATA[<p>SSL Certificates play a big role in a Citrix Password Manager deployment. They help to ensure the password data in the central store is genuine and they also allow for encrypted communications between the Password Manager service and the Password Manager agent. There are lots of things that can go wrong with certificates that <span style="color:#777"> . . . &#8594; Read More: <a href="http://www.michaelcolson.com/2010/03/03/ssl-error-47-with-citrix-password-manager/">SSL Error 47 with Citrix Password Manager</a></span>]]></description>
			<content:encoded><![CDATA[<p>SSL Certificates play a big role in a Citrix Password Manager deployment. They help to ensure the password data in the central store is genuine and they also allow for encrypted communications between the Password Manager service and the Password Manager agent. There are lots of things that can go wrong with certificates that will stall your Password Manager deployment.</p>
<p><span id="more-344"></span></p>
<p>I recenty ran across this little gem:</p>
<p><code>[error] SSL Library Error 47 on pm.domain.com:443 with peer 10.20.30.40: An unclassified SSL network error occurred. (error code: error:1408A0C1:lib(20):func(138):reason(193))<br />
[warn] SSL handshake from client failed</code></p>
<p>Well&#8230; now isn&#8217;t that just so helpful.  After verifying and re-verifying my certificate setup I wasn&#8217;t getting anywhere.  I ended up opening the httpd.conf file that the Citrix XTE service depends on and noticed a line near the bottom:</p>
<p> <code>#Allowed CipherSuite (ALL,COM,GOV)<br />
SSLCipherSuite GOV</code></p>
<p>I didn&#8217;t go to the trouble to lookup what &#8216;exactly&#8217; this means but I theorized that I don&#8217;t really want to limit what kind of SSL cipher I can use so why not change it to read:</p>
<p> <code>SSLCipherSuite ALL</code></p>
<p>After making that simple, three letter change, I was now able to hit the Citrix Password Manager service URL from a  web browser and I saw the SSL Error 47 messages in my error.log dissappear.</p>
<p>Hopefully this will save someone else the hours of troubleshooting that I spent on this one.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.michaelcolson.com/2010/03/03/ssl-error-47-with-citrix-password-manager/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Underutilized Features of XenApp Platinum</title>
		<link>http://www.michaelcolson.com/2009/06/23/underutilized-features-of-xenapp-platinum/</link>
		<comments>http://www.michaelcolson.com/2009/06/23/underutilized-features-of-xenapp-platinum/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 02:33:40 +0000</pubDate>
		<dc:creator>michael</dc:creator>
				<category><![CDATA[citrix]]></category>
		<category><![CDATA[edgesight]]></category>
		<category><![CDATA[password manager]]></category>
		<category><![CDATA[xenapp]]></category>

		<guid isPermaLink="false">http://www.michaelcolson.com/?p=317</guid>
		<description><![CDATA[<p>Anyone who has worked with or around Citrix licensing knows that there is an incredible amount of value that can be obtained by either upgrading or purchasing XenApp Platinum Edition licenses.  But most people who go the route of Platinum licenses aren&#8217;t utilizing all of the features.</p> <p></p> <p>I completely agree that licensing can <span style="color:#777"> . . . &#8594; Read More: <a href="http://www.michaelcolson.com/2009/06/23/underutilized-features-of-xenapp-platinum/">Underutilized Features of XenApp Platinum</a></span>]]></description>
			<content:encoded><![CDATA[<p>Anyone who has worked with or around Citrix licensing knows that there is an incredible amount of value that can be obtained by either upgrading or purchasing XenApp Platinum Edition licenses.  But most people who go the route of Platinum licenses aren&#8217;t utilizing all of the features.</p>
<p><span id="more-317"></span></p>
<p>I completely agree that licensing can be a real pain sometimes especially when there are frequent changes as there seem to have been lately with  Citrix XenApp licensing.  I would love to post a simple listing of what products are included with the XenApp Platinum license&#8230; but unfortunately it just isn&#8217;t that simple.  It turns out that for some products like EdgeSight portions of the product are included with Advanced and Enterprise with the all of the individual product features being exposed only in the Platinum license.</p>
<p>OK so I admit that I may not have cleared up any licensing mysteries here, but that wasn&#8217;t my goal.  On with the show.  Here are what I feel are the most often overlooked features or products in the XenApp Platinum suite.</p>
<p><strong>Citrix EdgeSight for Load Testing</strong>- If you can honestly tell me that you have never had to answer the question &#8220;how many users can I expect to get on a single XenApp server&#8221; then I would say you haven&#8217;t built too many XenApp environments.  Citrix EdgeSight for Load Testing is an amazing product that allows you to record and replay interactions with XenApp published applications.  Once you have your set of instructions compiled you can then setup a test by replaying those instructions over and over again until you find the breaking points or performance thresholds you are looking for.</p>
<p><strong>Citrix Password Manager</strong>- Quite possibly my favorite Citrix product <img src='http://www.michaelcolson.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />   I use Password Manager EVERYDAY for single sign-on to what feels like about 1000 different applications.  Password Manager as you may have guessed is a single sign-on product that also has self service password functionality.  I find that right out of the box (without complex scripting) I have a very high success rate with configuring applications for single sign-on.  Furthermore, Citrix has expanded the licensing terms of Password Manger to extend its reach to both desktop and offline users!  If you are constantly setting, forgetting, and resetting password on websites you NEED to try Password Manager.</p>
<p><strong>Citrix SmartAuditor</strong>- If you have ever worked in any type of support role you know how difficult it can be to diagnose or troubleshoot a problem without some vision into what the end user is seeing.  SmartAuditor can address this problem area by recording sessions and allowing for storage and playback at a later date.  SmartAuditor may also help to address some compliance issues you may have because you can now have a complete visual representation for auditing instead of combing through logs from multiple systems.  <em>I do have to say that I really liked the older name of this product:  Project IRIS (ICA Record ICA Surveillance).</em></p>
<p>I should point out that I purposely left out the XenApp Platinum features that require additional appliances.  I should also point out that EdgeSight for Load Testing is actually available to XenApp Enterprise and XenApp Platinum customers.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.michaelcolson.com/2009/06/23/underutilized-features-of-xenapp-platinum/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Hot Desktop Functionality Broken in Password Manager Agent</title>
		<link>http://www.michaelcolson.com/2009/06/16/hot-desktop-functionality-broken-in-password-manager-agent/</link>
		<comments>http://www.michaelcolson.com/2009/06/16/hot-desktop-functionality-broken-in-password-manager-agent/#comments</comments>
		<pubDate>Tue, 16 Jun 2009 18:46:08 +0000</pubDate>
		<dc:creator>michael</dc:creator>
				<category><![CDATA[citrix]]></category>
		<category><![CDATA[password manager]]></category>

		<guid isPermaLink="false">http://www.michaelcolson.com/?p=222</guid>
		<description><![CDATA[<p>In working on a new deployment of the Hot Desktop feature within Citrix Password Manager I discovered that there are a few problems with the latest Password Manager agents.</p> <p>Ok so there are more than just a few problems&#8230;  Basically Hot Desktop doesn&#8217;t work with Password Manager Agents 4.6.265 and 4.6.266.</p> <p>When using either <span style="color:#777"> . . . &#8594; Read More: <a href="http://www.michaelcolson.com/2009/06/16/hot-desktop-functionality-broken-in-password-manager-agent/">Hot Desktop Functionality Broken in Password Manager Agent</a></span>]]></description>
			<content:encoded><![CDATA[<p>In working on a new deployment of the Hot Desktop feature within Citrix Password Manager I discovered that there are a few problems with the latest Password Manager agents.</p>
<p><span id="more-222"></span>Ok so there are more than just a few problems&#8230;  Basically Hot Desktop doesn&#8217;t work with Password Manager Agents 4.6.265 and 4.6.266.</p>
<p>When using either one of these two agents you will find that Hot Desktop installs without incident but the process that executes the session.xml functions only appears to be triggered on the first logon after a reboot.  That&#8217;s a BIG problem because the whole idea behind Hot Desktop is the fast switching from one user account to another!  So if you have to reboot each time a user logs off just to prepare the system for the next user then you probably aren&#8217;t shaving very much time off of the logon process.</p>
<p>The good news is that Password Manager Agent 4.6.264 DOES work properly with Hot Desktop.  The bad news&#8230; it doesn&#8217;t support the new XenApp Platinum licensing model for desktop and offline usage.  As it turns out this isn&#8217;t that big of a problem because it&#8217;s not very likely that you would need the Hot Desktop functionality in a disconnected or offline mode.</p>
<p>I briefly spoke with Citrix support and they verbally acknowledged that in fact they were aware the functionality was missing or broken in the two latest agents.  I didn&#8217;t get a very clear sense of when or if a fix would be available but I did hear that a new release of Password Manager might be on the horizon.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.michaelcolson.com/2009/06/16/hot-desktop-functionality-broken-in-password-manager-agent/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Citrix Password Manager with Non Domain User</title>
		<link>http://www.michaelcolson.com/2008/11/14/citrix-password-manager-with-non-domain-user/</link>
		<comments>http://www.michaelcolson.com/2008/11/14/citrix-password-manager-with-non-domain-user/#comments</comments>
		<pubDate>Fri, 14 Nov 2008 14:22:20 +0000</pubDate>
		<dc:creator>michael</dc:creator>
				<category><![CDATA[citrix]]></category>
		<category><![CDATA[password manager]]></category>

		<guid isPermaLink="false">http://www.michaelcolson.com/?p=157</guid>
		<description><![CDATA[<p>If you have a user who is not a member of the &#8216;Domain Users&#8217; group and still requires access to Citrix Password Manager there is a simple workaround.</p> <p></p> <p>Open the XTE service configuration file: C:\Program Files\Common Files\Citrix\XTE\conf\httpd.conf</p> <p>You will need to scroll down about half way through the file to the &#60;VirtualHost&#62; section.</p> <span style="color:#777"> . . . &#8594; Read More: <a href="http://www.michaelcolson.com/2008/11/14/citrix-password-manager-with-non-domain-user/">Citrix Password Manager with Non Domain User</a></span>]]></description>
			<content:encoded><![CDATA[<p>If you have a user who is not a member of the &#8216;Domain Users&#8217; group and still requires access to Citrix Password Manager there is a simple workaround.</p>
<p><span id="more-157"></span></p>
<p>Open the XTE service configuration file:<br />
C:\Program Files\Common Files\Citrix\XTE\conf\httpd.conf</p>
<p>You will need to scroll down about half way through the file to the &lt;VirtualHost&gt; section.</p>
<p>Now you will just need to add a line for your user or group:</p>
<p>require user &#8220;contoso.com\\bsmith&#8221;</p>
<p>require group &#8220;contoso.com\\PM Users&#8221;</p>
<p>Save the file and restart the XTE service.  Your user should now be able to use the Password Manager console as well as the Password Manager plugin.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.michaelcolson.com/2008/11/14/citrix-password-manager-with-non-domain-user/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.462 seconds -->

