This issue is caused by StoreFront servers being unable to resolve the FAS server's hostname.Īfter logging on to a VDA using FAS, the VDA will crash exactly 10 hours after the initial logon. The StoreFront server shows event ID 28 "Could not contact any Federated Authentication Servers". With FAS and SAML authentication configured, launching an application or desktop results in error "Cannot start app". Remove "Domain Computers" from the permissions list of each template. Retry Step 3.Ī lot of pending requests appear on your certificate authority server for certificates using the "Citrix_RegistrationAuthority_ManualAuthorization" and "Citrix_RegistrationAuthority" templates.
Citrix authenticator app download install#
You should install FAS on dedicated servers.Īfter clicking on Start on Step 3 "Authorize this Service" from the FAS Configuration console you receive a "Status: Failed to Issue certificate: Code 2" error and the Certificate Authority server reports that the request was "Denied by Policy Module".Įdit the "Citrix_RegistrationAuthority_ManualAuthorization" certificate template and change the "Validity period" to 2 days and the "Renewal period" to 1 days. This happens when you install an older version of FAS on a server which already holds a newer StoreFront role. When installing FAS you receive a "Installation of MSI File 'FederatedAuthenticationService_圆4.msi' failed with 'InstallFailure' (1603)". If you have created a new FAS User Rule, check the User Rule configured within FAS has been pushed out to StoreFront servers via Group Policy. Event ID 28 is logged on the StoreFront servers which states "An unknown error occurred interacting with the Federated Authentication Service". One or more errors occurred".ĭo not use CNAME or A records pointing to a name different than the FQDN of the FAS server.Īpplication launches fail with "Cannot start app". When launching the Citrix FAS Configuration console, upon selecting a FAS server and clicking OK you receive error "Error connecting to servername. Event Viewer on StoreFront contains events with message "Error: Error 102".Īdd the StoreFront, FAS and VDA servers from one domain to the other domain's "Windows Authorization Access Group". Users from one domain cannot obtain a FAS user certificate from another domain. This is recommended after a change to the Certificate Auhtority server that FAS is pointed towards.
On StoreFront Event ID 28 is logged and on the FAS server Event ID 123 is logged.ĭeauthorise the FAS service using the FAS configuration console and then authorise the FAS service again. You must manually run three commands to rectify.Īn application launch results in a failure with error "Cannot Start App" after enabling FAS. WireShark traces show the FAS server throwing an error "nca_s_fault_access_denied".ĭCOM security settings for the Issuing Certificate Service had not been updated.
Citrix authenticator app download manual#
The Citrix FAS manual authorisation request does not reach the Certificate Authority server. Applicable Product Versions Affected (if known)
0 kommentar(er)
