Hi, We are setting up Nfuse 1.7

[lostexchange]

Hi,

We are setting up Nfuse 1.7 on Citrix Xp and CSG. We thought we'd use MS Certificate Server instead of Citrix Ticketing Authority but are starting to have second thoughts. We need SSL. We are not getting SSL Relay Service in MS Admin Tools\Services and we cannot configure the SSL Relay tool in Citrix as we cannot find the Keystore.
Any help would be appreciated.
Thanks

 

[chjinmind]

Hi!
From what I read and understand it seems you need to clear up the picture on how the CSG work together with STA and MS CA's and the mode of CSG.

You can use the CSG without a STA (Secure Ticket Authority), then you use the CSG in Relay mode. Normal mode is when you do a full installation with STA.
This can be done with a local CA (MS perhaps)

My tip to you is to look at the overview picure of the communication of CSG i normal mode (god overview in CSG admin doc or the "Best practises for securing CSG, found in Citrix knowledgebase) and sort out all the machines/requirement and certificates you need to get this puppy going. After that start to puzzle it all together with firewalls, proxys etc. if your company uses it.

Good luck!