CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Lab Manual
CWS-251 Implement Citrix DaaS on Microsoft
Azure
Version 1.0

1
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

PUBLISHED BY
Citrix Systems, Inc.
851 West Cypress Creek Road
Fort Lauderdale, Florida 33309 USA
http://www.citrix.com

Copyright © 2022 by Citrix Systems, Inc.

All rights reserved. Citrix, the Citrix logo are trademarks of Citrix Systems, Inc. and/or one or more of its
subsidiaries, and may be registered with the U.S. Patent and Trademark Office and in other countries. Citrix
Virtual Apps and Desktops, Citrix Cloud, Citrix Workspace, Citrix DaaS, and all other marks appearing
herein are the property of their respective owners.

Citrix Systems, Inc. (Citrix) makes no representations or warranties with respect to the content or use of
this publication. Citrix specifically disclaims any expressed or implied warranties, merchantability or fitness
for any particular purpose. Citrix reserves the right to make any changes in specifications and other
information contained in this publication without prior notice and without obligation to notify any person or
entity of such revisions or changes.

No part of the publication may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording or information storage and retrieval systems, for any
purpose other than the purchaser’s personal use, without express written permission of.

2
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Credits
Title Name
Architect/Project Manager Victor Hernandez
Infrastructure Product Manager Thiyagu Maruthachalam
Technical Solutions Developers Matthew Jones
Quality Assurance Bharath H
Publication Services Rahul Mohandas

At Citrix Education we strive to continuously improve the quality of our course and lab materials.
We are interested in your valuable feedback. Please participate in a brief online survey at the
end of the course.

3
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Contents
Credits ......................................................................................................................................................................... 3
Lab Manual Overview .............................................................................................................................................. 5
Lab Environment Overview .................................................................................................................................... 6
Lab Access ................................................................................................................................................................. 7
Module 2: Planing a Citrix DaaS Resource Location on Microsoft Azure.................................................. 9
Exercise 2-1: Create Citrix Cloud Account ......................................................................................................... 9
Exercise 2-2: Sign into Citrix Cloud Console and Setup Administrative Access......................................... 15
Exercise 2-3: Access Citrix DaaS ...................................................................................................................... 18
Module 3: Planning – Microsoft Azure Overview ........................................................................................... 22
Exercise 3-1: Connect to Microsoft Azure ........................................................................................................ 22
Exercise 3-2: Verify Resource Groups and Permissions on Microsoft Azure ............................................. 31
Exercise 3-3: Create Virtual Network on Azure ............................................................................................... 43
Exercise 3-4: Peer Networks on Azure ............................................................................................................. 53
Exercise 3-5: Create Storage Account .............................................................................................................. 58
Exercise 3-6: Create a new VM for Citrix Cloud Connector ........................................................................... 62
Exercise 3-7: Log on Using Azure PowerShell ................................................................................................ 71
Module 4: Planning - Deploying Citrix DaaS on Microsoft Azure............................................................... 75
Exercise 4-1: Deploy a Citrix Cloud Connector Using GUI ............................................................................ 76
Exercise 4-2: Deploy a Citrix Cloud Connector Using PowerShell ............................................................... 83
Exercise 4-3: Verify that Cloud Resource Locations are Aligned with Zones in Citrix DaaS ..................106
Exercise 4-4: Create a Host Connection from Manage Console using Pre-Created Service Principal.110
Exercise 4-5: Deploy Master Server VDA ....................................................................................................... 122
Exercise 4-6: Deploy Machines Using MCS to a Pre-Create Resource Group ........................................ 135
Exercise 4-7: Deploy Windows 11 using an ARM Template........................................................................ 150
Exercise 4-8: Install VDA Using PowerShell and Create a Manual Catalog ............................................. 156
Exercise 4-9: Create Delivery Groups and Assign Resources to Users .................................................... 181
Exercise 4-10: Configure Autoscale ................................................................................................................ 191
Module 5: Planning - Providing Access to End Users ................................................................................ 212
Exercise 5-1: Citrix DaaS Workspace Configuration..................................................................................... 212
Exercise 5-2: Deploy Citrix ADC on Azure ..................................................................................................... 227
Exercise 5-3: Import Citrix ADC Configuration ............................................................................................... 238
Module 6: Rolling Out a Citrix DaaS Deployment on Microsoft Azure.................................................... 251
Exercise 6-1: Logon to Citrix Workspace app and Launch Published App................................................ 251
Exercise 6-2: Logon to Citrix Workspace app and Launch Published Desktop ........................................ 264
Exercise 6-3: Switch Citrix Gateway Service to Citrix ADC to launch resources...................................... 270
Module 8: Optimize Citrix DaaS Deployments on Microsoft Azure ......................................................... 281
Exercise 8-1: Using Azure Price Calculator.................................................................................................... 281

4
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Lab Manual Overview

Lab Exercises:
The exercises in this Lab Manual were developed for use with the CWS-251
Implementing Citrix DaaS on Microsoft Azure course. The virtual machines in this lab
are running on Windows Server 2022 and Windows 11.

At the completion of these exercises, you will gain valuable hands-on experience in
installing, configuring, administering, and supporting Citrix Cloud, Citrix DaaS, and
Microsoft Azure.

Lab Scenario:
WW Labs is a technical company whose infrastructure topology is centrally located in
New York City, referenced as NYC in the company naming convention. The CTO has
asked you to investigate using Microsoft Azure as a hosting platform for applications
and desktops. The goal is to integrate with the Citrix DaaS platform and Citrix
Workspace for delivering resources to users in an efficient manner.

The Lead Citrix Architect has concluded that setting up a resource group inside of
Microsoft Azure and integrating with the Citrix Cloud should allow you to build a proof of
concept (POC). This will allow you to integrate Citrix DaaS with a public cloud
environment for the delivery of virtualized applications and desktops.

You are a Citrix Administrator on the WW Labs Citrix Administrator team and you have
been tasked to build out an environment in Citrix Cloud and Citrix DaaS to all for access
to applications and desktops hosted in Microsoft Azure. You will deploy resources on
Windows Server 2022 and provide desktops on Windows 11. This will allow users to
connect to the Citrix Workspace and access these resources using the ICA protocol.

5
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Lab Environment Overview

SERVER LIST

Virtual Machine IP Address Operating System Description

Name
AUE-ADC-001 10.0.0.12 Citrix ADC 13.1 Citrix Gateway for ICA Proxy
AUE-ADS-001 10.0.0.4 Server 2022 Domain Controller and DNS
AUE-CON-001 10.0.0.7 Server 2022 Citrix Cloud Connector
AUE-CON-002 DHCP Server 2022 Citrix Cloud Connector
AUE-JMP-001 10.0.0.8 Server 2022 Jumpstation in MS Azure
AUE-SRV-MST 10.0.0.6 Server 2022 Master Image for Server VDA
AUE-SRV-001 DHCP Server 2022 Server VDA
AUE-SRV-002 DHCP Server 2022 Server VDA
AUE-W11-001 DHCP Windows 11 Client VDA

CREDENTIALS LIST
User Name Password Description
Workspacelab\Ctxadmin Citrix@Pass! Domain administrator
Ctxadmin Citrix@Pass! Local (non-domain) user
Workspacelab\HR1 Citrix@Pass! HR user
Workspacelab\Engineer1 Citrix@Pass! Engineering user
Workspacelab\Marketing1 Citrix@Pass! Domain User
Ctxadmin Citrix@Pass! Citrix ADC Admin

6
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Lab Access
Once connected to the Jumpstation you will be using 3 different management consoles:
Remote Desktop Connection Manager, Azure Resource Manager, and Citrix Cloud
portal as shown in the example below.
The icon to start the Remote Desktop Connection Manager is named CWS-251.rdg and
is placed on the desktop of the Jumpstation.
You will primarily use Remote Desktop Connection Manager to log on and interact with
your virtual lab machines. You will primarily use the Azure console to configure and
deploy new resources and control your virtual machine’s power state.

Remote Desktop Connection Manager is pre-configured with the credentials required for
this lab.
To select the alternate credentials for a specific machine, right-click the machine and
select Connect server as, and then select the credentials you want to use from the
drop-down menu as shown in the example below:

7
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Module 2: Planing a Citrix DaaS Resource

Location on Microsoft Azure
Overview:
Getting access to and setting up the Customer Account inside of Citrix Cloud will allow
the Citrix Administrator to have access to the subscribed services. Citrix Cloud will allow
for the configuration of the different authentication methods as well as the resources
that are delivered.

This module also presents the Citrix DaaS and the Manage Console functionality. You
will use Citrix Cloud to access Citrix DaaS to see how the solution will integrate with the
Microsoft Azure environment.

Before you begin:

Estimated time to complete Module 2 lab exercises: 15 minutes

Exercise 2-1: Create Citrix Cloud Account

Scenario:
You are a Citrix Administrator for your company, WW Labs. Your CIO has received a
trial account for Citrix Cloud and he has tasked you with investigating how the Citrix
Cloud web page works and how the services can benefits WW Labs.

Step Action
1. Click the Google Chrome icon on the taskbar of Student Desktop (NYC-HYP-101).

2. Type https://citrix.cloud.com in the Address bar of Google Chrome.

Note: The URLs https://citrix.cloud.com and https://cloud.citrix.com can be used

interchangeably. Both URLs redirect to the Citrix Cloud sign-in page. Also, when you browse
using HTTP instead of HTTPS, you will be redirected to the secure site, which is
https://citrix.cloud.com.
3. Type your Citrix Cloud Credentials.

Enable the Remember me checkbox and click Sign In.

9
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The Citrix Cloud Credentials for your lab environment will be different from those
shown.
4. A dialog box will appear at the top-right of the webpage, asking Do you want Google Chrome
to save your password for this site? Click Never.

5. When prompted, you will need to use your registered authenticator app and provide the 6 digit
code. Then click Verify.

NOTE: Your verification code will be different than that shown above. The purpose of an
MFA/OTP code is to verify that you have the specific authenticator device required. These
codes will change frequently.

10
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. If a Sign in prompt appears, click No thanks to continue without signing into Chrome.

7. The first-time logon to a Citrix Cloud account requires you to accept the Terms of Service.
Select the checkbox I have read, understand, and agree to the Terms of Service and Click
Continue.

Note: Ignore this step if you do not receive this prompt.

8. If your MyCitrix account is tied to multiple customers or service offerings, select the specific
Customer account to manage that customer’s Citrix Cloud services offerings.

For this particular course, select the course starting with eduCWS-251C####

11
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: If your MyCitrix account is not tied to any Citrix Cloud services and this training is your
only entitlement, you’ll be taken directly to the Cloud Console and not given the choice of
Customer accounts to pick from.
9. On the Welcome to Citrix Cloud window, click X.

Note: Ignore this step if you do not receive this prompt.

10. Click X on the Select the help menu (?) and Getting Started Guide prompt located in the
upper right-hand corner.

12
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: You can review the Getting Started Guide at a later time by clicking the? button on the
upper right-hand corner and selecting Getting Started Guide.

NOTE: Ignore this step if you do not receive this prompt.

11. After signing in, the home page of Citrix Cloud shows Zero Library Offerings, One Resource
Location, Zero Domains, Zero Notifications, and Zero Open Tickets by default

Note:
Library Offerings: Published resources configured in a cloud service (for example, the
applications or desktops delivered by a Delivery Group in Citrix Virtual Apps and Desktops)
are assigned to Active Directory Users or Groups through Library Offerings.

Resource Locations: Customers use Resource Locations to define the places that contain
their resources. These resources are all within a defined communication/network boundary,
where access is available to them from the Citrix Cloud and to any other customer
infrastructure required to operate. Connection to the Citrix Cloud is via the Citrix Cloud
Connector.

Domains: These are the list of Active Directory domains that can communicate with Citrix
Cloud.

Notifications: Notifications provide information to administrators about issues that might be of

interest to them. These notifications showcase any new features in Citrix Cloud or alert you to
problems with your deployments. Notifications can come from any service within Citrix Cloud.

Open Tickets: This allows the customer to raise or track a support ticket with the Citrix Cloud
support team.
12. The two icons adjacent to the username are typically referenced as the Control Center.

13
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

The bell-shaped icon is the Notifications. The question mark icon is the Help menu.

13. The top-right area of the web page shows the MyCitrix Account Username and the Citrix
Customer ID.

Note: Each student/user will have a unique set of cloud credentials, so the screenshots
represented in this manual will not look identical to what you will see in the lab or production.
14. Refer to the middle of the home page for Citrix Cloud. My Services shows the services
currently subscribed to for this account/customer.

Currently, this account has Analytics, DaaS, ITSM Adapter, Secure Browser, Secure Private
Access, and Workspace Environment Management subscribed.

Key Takeaways:
• Citrix Cloud is the access method and main console for the various services that
are provided as a part of the Citrix Cloud

14
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

• It can be accessed using http://cloud.citrix.com or http://citrix.cloud.com.

• A valid MyCitrix account tied to an e-mail address and setup for Multi-Factor
Authentication is used to login and configure the Citrix Cloud and related
services.

Exercise 2-2: Sign into Citrix Cloud Console and Setup

Administrative Access
Scenario:
You are a Citrix Administrator for your company, WW Labs. You have been tasked with
investigating the options for integrating Citrix Cloud with WW Labs Active Directory. The
WW Labs enterprise administrator has explained to you that while Azure AD may be in
the plans for the future, during the POC, WW Labs’ on-premises Active Directory will be
used.

Step Action
1. At the top left of the Citrix Cloud page, click the Fly-out menu.

2. Select Identity and Access Management.

15
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. Select the Domains tab on the Identity and Access Management page.

4. Validate that the Domains tab has no domains listed and provides, the option to download a
Citrix Cloud Connector.

Note: A Citrix Cloud Connector is a Citrix component that is installed to facilitate the
administration and control of a Resource Location from Citrix Cloud. If this Citrix Cloud

16
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

account were integrated with a domain, then the domain name would be listed here along with
the name of the Citrix Cloud Connector machine(s).
5. Click the Authentication tab on the Identity and Access Management page.

6. Verify this account has no integration with Azure AD and administrators use a general sign-in
URL (https://citrix.cloud.com) to sign in.

7. Click Citrix on the top left to return to the homepage.

17
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• Various options exist for authentication to the citrix cloud such as Active
Directory, Azure AD, Okta, SAML, and others.
• The Citrix Identity authentication method allows for authentication to Citrix Cloud
using the MyCitrix Account.
• Domain can be added for authentication using Citrix Cloud Connectors.
Exercise 2-3: Access Citrix DaaS
Scenario:
Your Lead Citrix Architect has tasked you to investigate how the Citrix Cloud control
plane works as it regards to administering the solution. They are already familiar with
the on-premises version of Citrix Studio, so they are curious to know how the Citrix
DaaS administration console will look, how it is accessed, and how it is different than
what WW Labs is currently using.
Step Action
1. At the top left of the Citrix Cloud page, click the Fly-out menu.

2. Click the drop-down button on My Services and select DaaS.

18
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. On the Citrix DaaS home page, click the drop-down arrow next to Manage and select Full
Configuration.

4. Citrix will launch the new Manage-Full Console. This will be referred to as the Citrix DaaS
Manage console or just the Manage console.

19
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. In the left pane of the Manage console, click Zones.

6. On the Welcome page for Zones, click Close.

20
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. Validate that a generic Zone is created with the name My Resource Location and that no
items are tied to the specific zone.

Note: Zones are automatically created based on Resource Location with Citrix Cloud.
In contrast to an on-premises setup, zones contain Connector servers instead of Delivery
Controllers. In addition, the Citrix DaaS Manage console does not have a controllers node,
unlike Citrix Studio in an on-premises setup.

Key Takeaways:
• Citrix DaaS Manage console is a modified instance of the Citrix Studio MMC
Console, launched as a published application inside the browser using Citrix
HTML5 Workspace App.
• The Manage console does not have a Controllers node, Licensing node, or App-
V node in comparison to an on-premises Citrix Studio.
• Zone names in the Manage console are automatically aligned with the Resource
Locations names.

21
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Module 3: Planning – Microsoft Azure

Overview
Overview:
This module presents the basic components of Microsoft Azure. You will review the pre-
created Resource Groups in Azure and verify your permissions. Then you will create a
virtual network with an isolated subnet. Later you configure peering to allow
communication across these subnets. At this point, you create a storage account to
store the operating system disks.

Before you begin:

Estimated time to complete Module 3 lab exercises: 45 minutes

Exercise 3-1: Connect to Microsoft Azure

Scenario:
You are a Citrix administrator at WW Labs and your first task is to connect to the Azure
lab that has been provisioned for your POC. Your team lead has pre-created a lab that
includes everything you need to test Citrix Cloud, including a jumpstation in Azure to
allow you easy connection to all the VMs in the lab. Your first task will be to power up
the necessary VMs and connect to the jumpstation, which you will use for the rest of the
proof of concept (POC).

Step Action
1. Using a browser on your device, navigate to https://portal.azure.com.

2. Type in the Microsoft Azure Credentials provided to you for this course and click Next.

22
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. Enter the password provided and click Sign in.

4. When prompted to Stay signed in? click Yes.

5. Close any Welcome or Recommendations popups.

6. On the top-left, click the fly-out menu (three lines).

23
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. From the drop-down menu, select Virtual machines.

8. From the machines displayed, click on AUE-ADS-001.

24
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Click Start from the overview pane.

Note: It is necessary to start AUE-ADS-001 before the rest of the virtual machines because it
is acting as a DNS server. If other virtual machines are powered on before AUE-ADS-001
then DNS resolution might fail.
10. Wait for the virtual machine to start. You can review the Starting process for the virtual
machine from the Notifications pane at the top of the Azure menu bar.

11. Click Virtual machines from the breadcrumb trail

25
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Select the checkbox next to AUE-JMP-001 then click Start

13. On the confirmation pop-up to start the selected virtual machines, click Yes.

14. Wait a minute for the VM to start.

Click AUE-JMP-001,

26
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

15. From the overview menu at the top, click Connect and then select RDP.

16. Click Download RDP File to save the RDP connection file on your computer.

27
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Your browser will download the file. Open your downloads location and double-click the file
AUE-JMP-001.rdp

18. On the Remote Desktop Connection prompt, click Connect.

19. On the Windows Security prompt click More choices > Use a different account.

Log on with the following credentials:

• Username: ctxadmin
• Password: Citrix@Pass!

Click OK.

28
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Click Yes on the Certificate window prompt, and then wait for the Jumpstation (AUE-JMP-001)
log on to complete.

Note: You can check the box, “Don’t ask me again for connections to this computer” if you
wish.
21. From the taskbar at the bottom of the screen, click Chrome.

29
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

22. From the bookmark at the top of the page, select the Azure Resource Management
bookmark.

23. Enter your Microsoft Azure Credentials to Sign In.

24. After signing to Azure, you are presented the Dashboard.

Note: The white tiles on the dashboard represent the resources already deployed in your
subscription as a part of the base lab.

Note: Dashboard is a place where you can pin your resources or bring together the
performance charts for your Azure resources. You can create multiple dashboards or
customize the existing dashboard to suit your requirements.

30
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• A jumpstation has a public IP with RDP access enabled.
• A jumpstation allows RDP access to other VMs on private Azure networks.
• You can review the Starting process for any virtual machine from the
Notifications pane at the top of the Azure menu bar.

Exercise 3-2: Verify Resource Groups and Permissions on

Microsoft Azure
Scenario:
You are a Citrix administrator at WW Labs and you have been tasked with verifying the
Microsoft Azure Resource Groups deployed in the Azure datacenter. Your architect
informs you that while MCS can create Resource Groups automatically, this
functionality depends on the permissions given to the administrators and Service
Principals.

Step Action
1. Minimize the Microsoft Azure Dashboard. Switch to the Desktop of the Jumpstation (AUE-
JMP-001), right-click Student Config.txt file and select Edit with Notepad++.

Note: This document contains the names of the settings that are unique in each lab. Values
for these settings will be required throughout the lab exercises. We will collect all the
information and paste it into this file.
2. Maximize the Microsoft Azure Dashboard in your browser.

Click the fly-out menu in the top-left and select Azure Active Directory.

31
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. From the Azure Active Directory blade (menu on the left), select Custom domain names.

4. From the details on the right, look for domain name of your Azure account. This will be the
domain with the checkbox under Primary.

32
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Each Azure Active Directory (AD) instance is unique and each subscription in Azure
must belong to an Azure Active Directory. Multiple subscriptions can be part of a single Azure
Active Directory, however, a single subscription cannot be part of multiple Azure Active
Directories.
5. From Azure Active Directory blade, select Properties under the Manage section.

Locate and copy the Tenant ID on the center of the page.

6. Switch to Student Config.txt window and paste the Tenant ID next to AADID under Azure
Active Directory ID label.

7. Switch back to the Microsoft Azure Dashboard in your browser.

Click the fly-out menu from the top-left, and select All service.

33
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. Under the General section, select Subscriptions.

9. Click ctxedu.

10. Note the Subscription ID.

Copy the Subscription ID.

34
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

11. Switch to Student Config.txt window and paste your Subscription ID next to SubID under the
Subscription ID label.

Type your Subscription name against next to SubName under the Student Subscription
Name label.

12. Switch back to the Microsoft Azure Dashboard in Chrome browser.

Click the fly-out menu at the top-left and select Virtual networks.

13. Note the pre-created Virtual network.

Note the digits in the name, after AUE-VNT-#####. This will be used as your unique Student
Number.

35
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Some resources in Azure must have unique names per subscription or resource group.
Storage accounts must have a unique name because they are accessed through a URL link in
the format of https://uniquestoragename.blob.core.windows.net/blobname/vdiskname.vhd.
14. Switch to Student Config.txt window and type your unique student number next to
StudentID under the Student Unique Identifier label.

Note: This number will be used often. Step 13 was a good example of how this will be used in
the lab guide. Your network was AUE-VNT-####. This means you would substitute the ####
with the specific number you’ve identified for your specific lab. DO NOT use the number show
in the screenshots as they will not be tied to your specific lab system.
15. From the fly-out menu on the top-left, select Resource Groups

16. Note the Location the Resource Groups are in.

36
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Switch to Student Config.txt window and type the Resource Location next to Loc under the
Resource Location label.

18. Switch back to the Microsoft Azure Dashboard in the Chrome browser and click the
Resource group Student####-CWS251-Lab

Note: Resource groups can only be created by Azure administrators who have Owner
permissions on the entire subscription. Since this lab is part of a shared subscription, two
resource groups have been pre-created and your administrator account has been delegated
owner permissions within these resource groups.
19. From the blade on the left, click Access control (IAM).

37
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. From the main page that’s displayed, click the Role Assignments tab.

21. In the Search field, type Admin##### (where #### matches your studentID)

Note your account has Owner permissions on the Resource Group

38
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

22. Type Service#### App (where #### matches your studentID)

23. Notice your Enterprise Application has multiple roles assigned.

Click the Service####-cws251 link that has the Contributor role assigned.

39
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

24. From the blade on the left, click Properties.

25. In the Properties page for the Service#### application, locate and copy the Application ID
for the App.

40
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

26. Switch to Notepad++ and paste the Application ID next to Application ID under the
CitrixCustomConnection label.

27. Switch back to the Microsoft Azure Dashboard in Chrome.

From the bread-crumb menu on the top of the page, click Resource groups.

28. Select the second Resource group Student####-CWS251-RG.

41
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

29. Notice that this Resource group does not contain any resources.

Note: MCS can only support deploying Machine Catalogs into empty resource groups. If a
hosting connection is created with full scope permissions, then the MCS wizard can create the
Resource groups itself. When a hosting connection is created with a limited scope, the
Resource groups will need to be created manually and the service principal must have
minimum Contributor permissions on that Resource group.
30. Return to the Student Config.txt file in Notepad++.

Navigate to File > Save.

This will ensure that you will be able to open and reference these settings later on. The lab
guide will make reference to things like [Loc] or #### and it will be important to have these
settings handy for completing various tasks.

42
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• Any resource created in Azure Resource Manager must reside in a Resource
group
• Each environment will be different and it is important to know the specific settings
for networks, resource groups, services, and application IDs

Exercise 3-3: Create Virtual Network on Azure

Scenario:
You are a Citrix administrator at WW Labs and you have been tasked with creating a
virtual network for the VDA deployment. The network will be used in a later exercise for
deploying VDAs. The reason why your Citrix team lead wants to create a separate
network is to investigate how security measures can be implemented between the VDA
network and the Server network.

Step Action
1. From the Azure Resource Manager page opened in chrome, click the fly-out menu at the top
left of the page.

Click Virtual networks from the menu.

43
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

2. On the Virtual networks page, notice that a network already exists.

Click AUE-VNT-#### to inspect the existing network.

3. From the blade on the left, click Connected devices.

44
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. Observe that the existing machines in your Azure environment are using this network.

5. From the blade on the left, click Address space to verify the IP address range supported
within the network.

6. The existing Virtual network is using 10.0.0.0/16 as the address space, meaning that the first
usable address will be 10.0.0.1 and the last will be 10.0.255.254.

45
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. From the blade on the left, click Subnets to verify which individual subnets are defined within
the Virtual network.

8. A single class c (/24) subnet has been creating inside the Virtual network.

46
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Subnets reside inside Virtual networks; the subnet has to be within the address range of
the virtual network. A Virtual network can contain many subnets.
9. From the blade on the left, click DNS servers to verify the DNS configuration.

10. Take note of the list of DNS servers within the Azure environment.

Note: 10.0.0.4 is the domain controller within the lab base, having all the virtual machines use
this as the primary DNS ensures that domain functionalities work.
11. From the bread-crumb menu at the top of the page, click Virtual networks.

12. From the Virtual networks page click Create.

47
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

13. On the Create virtual network page, enter the following values:

• Resource Group: Student####-CWS251-Lab

• Name: AUE-VNT-VDA-#### (where #### is your StudentID)
• Region: [Resource location of your lab]

Click Next : IP Addresses

14. In the IP Addresses tab notice the default subnet that will be created.

Click Review + create

48
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

15. Wait for Validation passed notification on the summary page and click Create at the page.

49
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. Wait for the deployment to complete and monitor the progress in the Notifications Pane.

50
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The deployment of the virtual network takes approximately one minute. In case it takes
longer, try again using a different browser.
17. From the fly-out menu on the top-left, select Virtual networks.
18. Observe that a second virtual network has been created. You may need to click on Refresh.

Note: We have now created a virtual network for VDAs.

19. Click AUE-VNT-VDA-####.

20. From the blade on the left, click DNS servers.

51
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. From the main page, select Custom

22. Under IP Address, type 10.0.0.4.

23. After second box appears for another DNS Address, type 8.8.8.8.

24. When a third box appears, type 4.2.2.2 and then click Save at the bottom of the page.

52
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• A Virtual network can be created during the creation of a new VM in Azure, but it
is recommended to deploy networks separately as one of the first tasks in getting
your Azure subscription ready.
• Virtual networks are defined within each region and do not span multiple Azure
locations.
• When defining your Virtual network, you also define the subnet.
• Consider defining your Virtual network larger than the subnet to allow for adding
more subnets in the future.
• Design an IP strategy for Azure that does not re-use IP networks in your on-
premises network.
• You do not pay for private IP addresses in Azure, so don’t limit yourself.
• When defining a Hosting Connection in Citrix, an Azure Virtual network must be
present, and all VMs provisioned by MCS will subsequently be plugged into this
network.
• Networks are difficult to change after deployments, so get the design right before
deployment.

Exercise 3-4: Peer Networks on Azure

Scenario:
You are a Citrix administrator at WW Labs, your Citrix team lead has tasked you with
ensuring that the new VDA network has connectivity to the Server network. He suggests

53
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

to you, that you may need to configure peering between the two networks, to get traffic
to flow.

Step Action
1. From the bread-crumb menu at the top of the page, click Virtual networks.

2. Select AUE-VNT-#### from the list of available virtual networks.

3. From the AUE-VNT-#### blade, click the Peerings option under Settings.

4. From the menu at the top of the page, click Add.

54
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Specify the name VNT-VDA-Peering and scroll down.

6. Under Remote virtual network, type VNT-SRV-Peering in the Peering link name field.

7. Under Subscription, make sure your subscription name is selected.

Underneath Subscriptions, click the box for Virtual Network and select AUE-VNT-VDA-#####
(where ##### is your StudentID)

55
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. At the bottom of the page click Add.

9. Check for the peer network to be listed and the peering status as Connected. If needed, click
the Refresh button at the top of the page.

10. From the breadcrumb menu, select Virtual networks.

11. Select AUE-VNT-VDA-#### from the virtual networks pane.

56
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. From the AUE-VNT-VDA-#### pane, click Peerings option under Settings.

Check for the peer network VNT-SRV-Peering to be listed and the peering status as
Connected.

Now peering has been enabled on both virtual networks and resources within each virtual
network can communicate with each other.

Key Takeaways:
• Traffic can flow unhindered within a virtual network and the different subnets
defined in the Virtual network.
• When defining multiple independent networks in Azure, traffic will not
automatically flow between them. Network peerings can be used to link two
networks together and enable communications.
• The traffic between virtual machines in the peered virtual networks is routed
through the Microsoft backbone infrastructure, much like traffic is routed between
virtual machines in the same virtual network, through private IP addresses only.
• The reason for using separate Virtual networks rather than subnets within the
same network is security. Network Security Groups (firewall rules) can only be
deployed to Virtual networks, not subnets.

57
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Exercise 3-5: Create Storage Account

Scenario:
You are a Citrix administrator at WW Labs, your Citrix team lead has tasked you to
create a Storage Account to support the VDA deployments. He explained to you that
although MCS could create the Storage Accounts automatically, he wants these to be
pre-created to align with the pre-determined naming convention. He also informs you
that because Storage Accounts must have a unique naming scheme, you should add
the 4 last letters of the Azure Subscription ID to the end of the Storage Account name.

Step Action
1. From the fly-out menu on the left, click Storage Accounts.

2. Click the Create button.

3. Under Project details, make sure your subscription is selected.

For the resources group, select the Student####-CWS251-Lab

58
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. In the Instance details section enter the Storage account name as cws251storage#####
(where ##### is your StudentID)

Select Performance: Standard.

Select Reduncancy: Locally-redundant storage (LRS)

Click Next : Advanced.

Note: The name of the storage account has to be unique across Azure for every account. We
use the StudentID to ensure the name is unique across all Azure subscriptions. Furthermore,
the name cannot contain special characters or capital letters.
5. Under the Security section, uncheck Require secure transfer for REST API operations.

At the bottom of the page, click Review + Create.

59
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. Review the summary of the configuration and then click Create at the bottom of the screen.

60
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. Monitor the progress in the Notification pane and wait for the deployment to complete:

61
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. From the fly-out menu on the left, click Storage Accounts.

9. Validate that the storage cws251storage#### has been created.

Key Takeaways:
• Storage Accounts must have unique names and registers a Fully Qualified
Domain Name, such as xyz.core.windows.net.
• Storage Accounts must belong to a Region and a Resource Group.
• Premium is recommended for Citrix deployments but is also more costly than
standard storage.
• Locally redundant storage is fine for Citrix deployments with stateless MCS
created VMs.
• If deploying VDAs using Azure Managed disks, Storage Accounts will not be
used.

Exercise 3-6: Create a new VM for Citrix Cloud Connector

Scenario:
The Lead Architect has learned that when deploying an environment for Citrix Cloud, at
least two Citrix Cloud Connectors should be deployed to provide for redundancy. The
POC that has been setup in Microsoft Azure only contains one such virtual machine.
Your task is to use the Azure Resource Manager to deploy a fresh virtual machine that
can later be used as a Citrix Cloud Connector.

Step Action

62
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

1. From the fly-out menu on the left, click Virtual machines.

2. From the menu at the top of the page, click Create to add a virtual machine.

Select Azure virtual machine.

3. On the Create a virtual machine page on the Basics tab, locate the Project details section.

Verify that your subscription is listed in the Subscription field.

In the Resource Group drop down, select Student####-CWS251-Lab.

63
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. Under Instance details, in the Virtual machine name text box, type AUE-CON-002.

In the Region text box, select your [Loc].

5. In the click the Image box and select See all images.

6. From the Marketplace page, click Select on the Windows Server tile.

64
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. From the list of options, select Widows Server 2022 Datacenter – x64 Gen 1.

8. When returned to the Create a virtual machine page, located the Size drop-down box.

Select Standard_DS1_v2 – 1 vcpu, 3.5GiB memory.

65
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Monthly pricing may change from what is shown, the be name and specs should be
available.
9. In the Administrator account section, type ctxadmin as the Username.

In the Password and Confirm Password fields, type Citrix@Pass!

For the public inbound ports, select None.

At the bottom of the page, click Next : Disks.

10. In the Create a virtual machine page, on the Disks page, locate the OS disk type drop-
down box.

Click to select Standard HDD.

66
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Click Next : Networking >.

11. In the Create a virtual machine screen on the Networking page enter the following
information.

• Virtual network: AUE-VNT-####

• Subnet: AUE-SNT-####
• Public IP: None
• NIC network security group: Basic
• Public inbound ports: None
• Accelerated networking: Off [Uncheck]

Click Next : Management >.

67
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: At the time of writing this manual, the Azure portal may show a prompt saying
“unsaved edits will be discarded” even though you are following the steps and the changes
are saved.
12. In the Create a virtual machine screen on the Management page enter the following
information.

• Boot diagnostics: Disable

• Uncheck or Disable Enable OS guest diagnostics
• Uncheck or Disable System assigned managed identity
• Uncheck or Disable Enable auto-shutdown

68
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Click Next : Advanced >.

13. In the Create a virtual machine screen on the Advanced page click Next : Tags > to skip
installing any extensions.
14. In the Create a virtual machine screen on the Tags page click Next : Review + create > to
skip configuring any tags.
15. Verify the validation is passed on the summary page.

Click Create at the bottom of the page.

16. Machine deployment will take five minutes.

69
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: If you receive a deployment failure during the process, it may be because Azure fails to
shut down the VM after deployment. Shut down the VM manually and proceed with the next
exercise.
17. When deployment is complete, click Go to Resource.

Key Takeaways:
• When creating virtual machines in Azure, several options are available when
selecting the OS and sizing.
• Network selection will determine which IP addresses are assigned to a virtual
machine and if the machine receives a public IP.

70
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

• If only private IP addresses are used, then a bastion host or a jumpstation with a
public IP should be used to connect to the newly created virtual machine.

Exercise 3-7: Log on Using Azure PowerShell

Scenario:
You are a Citrix administrator at WW Labs, your Citrix team lead has tasked you to save
your authentication information in a JSON file which can be later used in PowerShell
Sessions for automation purposes.

Step Action
1. Minimize the Microsoft Azure Dashboard and from the jumpstation (AUE-JMP-001), click the
Windows PowerShell ISE icon in the taskbar.

Note: The Jumpstation or Jump box, is the AUE-JMP-001 virtual machine that the RDP
connection to was downloaded in Module 1 exercises. This is the machine this lab will use
primarily to access the components of the lab. If the connection is lost, relaunch the locally
saved RDP file.
2. Install the Azure PowerShell package by running the following command:

Install-Module -Name Az -Scope CurrentUser -Repository PSGallery -Force

Press Enter to run begin the installation.

Note: The installation process may take up to 5 minutes to complete. Wait for all of the
packages to install before proceeding.
3. Type Import-Module AZ and press Enter and wait for the command to complete. This might
also take several minutes to complete and the PowerShell window will not give any indication
of things happening until the command is completed.

4. From the PowerShell ISE window, in the menu bar, click File > New.

A new Untitled1.ps1 opens.

71
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Type Connect-AzAccount in the script section and press F5 to execute.

6. If presented with IE ESC warnings, click Add for the live.microsoftonline.com domain, add it to
the trusted zone. Then close the pop-up and run the previous command again by pressing F5.
7. On the sign-in page, type the admin username as Admin####-cws251@citrixedulabs.com
and click Next.

8. Type the password (provided by the CCI) and click Sign in.

72
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Observe the output from the command. It should show the account, subscription, and
TenantID.

10. Copy and paste the following commands in the script section of PowerShell ISE:

$path = “C:\LabResources\logon.json”
Save-AzContext -Path $path –Force

11. Highlight the above lines and click F8 to execute.

73
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. The resulting output should look as shown below in the screenshot.

13. Click X to close the PowerShell ISE window.

14. When prompted to save the untitled1.ps1 file, click No.

15. Click the Windows PowerShell ISE icon in the taskbar to start a new session.

Note: We close and reopen the PowerShell ISE window to clear the user sign in context.
16. Copy and paste the following commands in the script section of PowerShell ISE:

$path = “C:\LabResources\logon.json”
Import-AzContext -Path $path

17. Highlight the above lines and click F8 to execute.

18. Observe the resulting output as shown below in the screenshot.

74
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

19. Verify the user Admin####-cws2150@citrixedulabs.com logs into the Azure [SubName]
subscription successfully.

[SubName] was noted in exercise 2-2, step 11. It denotes the subscription name where your
lab resources are running.

20. Click X to close the PowerShell ISE window.

21. When prompted to save the untitled1.ps1 file, click No.

Key Takeaways:
• Add-AzAccount invokes a GUI window for user Authentication.
• Save-AzContext saves the current authentication information for use in other
PowerShell sessions.
• Import-AzContext loads Azure authentication information from a file.

Module 4: Planning - Deploying Citrix DaaS

on Microsoft Azure
Overview:
This module presents MCS provisioning using Citrix Virtual Apps and Desktops in the
Citrix Cloud; we will create a Master Server VDA and a Machine Catalog via GUI. Then
we will create a Desktop VDA using ARM templates and Microsoft Custom Script
Extensions; later add it to a Machine Catalog. Finally, these VDAs will be added to their
respective Delivery Groups and assigned to users using the Citrix Cloud Library feature.

75
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Before you begin:

Estimated time to complete Module 4 lab exercises: 140 minutes

Exercise 4-1: Deploy a Citrix Cloud Connector Using GUI

Scenario:
You are a Citrix administrator at WW Labs, your Citrix team lead has tasked you to
deploy the Citrix Cloud Connector on an existing domain-joined Virtual Machine with
Windows Server 2022 Operating System.

Step Action
1. Return to the desktop of AUE-JMP-001.

Return to Azure Resource Manager.

2. From the Home page (or the left menu) select Virtual machines

3. Select AUE-CON-001 and then click Start and Yes. Wait for the VM to show as running
before proceeding to Step 4. You may need to hit Refresh.

4. Minimize your browser.

Open the Remote Desktop Connection Manager

5. Right-click AUE-CON-001 and select Connect Server to connect via RDP.

76
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. If prompted for a password for ctxadmin, use Citrix@Pass!.

7. Click the Chrome icon on the taskbar of AUE-CON-001.

8. Type https://citrix.cloud.com in the address bar of Chrome and press Enter.

9. Type your Citrix Cloud Credentials, then click Sign In

10. If prompted to Save password, click Never.

11. When prompted, you will need to use your registered authenticator app and provide the 6-digit
code. Then click Verify.

77
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. If your account is associated with multiple customers, select the account specific to this
course.

13. If prompted, check the box I have read, understand and agree to the Terms of Service and
click Continue.

14. Click Edit or Add New under Resource Locations

15. Click Add a Resource Location

78
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. Select the ellipsis to the right and click Rename

17. Type WWLabs Azure Resource Location and click Save.

18. Click the Cloud Conectors tile.

19. Click Download

79
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Once the file has downloaded, click the tile for cwcconnector.exe in the bottom-left corner of
the Chrome browser.

21. After the brief connectivity test, click Sign in and Install

22. When prompted, enter your MyCitrix credentials and click Sign In.

80
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. When prompted, use your authenticator app to input the 6-digit code and click Verify.

81
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

24. At the Choose a Customer page, ensure you select the account created for this training.

Refer to your email invitation to confirm if in doubt.

Click Install.

25. Wait for the installation to complete and the Service Connectivity Testing to begin.

Note: The Service Connectivity Testing may take 3-4 minutes to complete. The cloud
connector software may also update itself during this process.
26. Once the Connectivity Test completes, click Close

82
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

27. Return to Chrome. Note the Cloud Connector is now detected. You may need to Refresh.

Note: Notice the warning sign to install another Citrix Cloud Connector server to ensure high
availability. It is a best practice but not mandatory to have multiple Cloud Connector servers
and all features of Citrix Cloud can be used with a single connector as well.
28. Log off the desktop of AUE-CON-001

Key Takeaways:
• The Citrix Cloud Connector can be downloaded directly from Citrix Cloud.
• It is Leading Practice that the Citrix Cloud Connector be downloaded immediately
before each install as the software is updated frequently.
• You have just deployed a single Citrix Cloud Connector in a region. For
redundancy, it is considered a best practice to install a minimum of two Citrix
Cloud Connectors per region.

Exercise 4-2: Deploy a Citrix Cloud Connector Using

PowerShell
Scenario:
You are a Citrix administrator at WW Labs, your Citrix team lead has tasked you to use
Microsoft Custom Script Extensions for Azure VMs to domain join a machine and test a
PowerShell script that installs Citrix Cloud Connector software.

Step Action
1. Switch to Azure Portal in the Chrome browser on the jumpstation (AUE-JMP-001).
2. On the fly-out menu from the top-left, select Storage accounts.

83
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. In the Storage Accounts, select cws251storagexxxx(StudentID).

4. On the Storage account blade, select Containers under Data storage.

5. From the ribbon at the top of the page, click + Container.

84
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. In the name box, type scriptcontainer.

Set the public access level as Private (no anonymous access).

Click Create at the bottom.

7. After the completion click the scriptcontainer link.

85
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. On the Overview tab, click the Upload button at the top of the page.

9. On the pop-out on the right for the Upload blob, click the folder icon.

10. Browse to C:\LabResources and select JoinDomain.ps1 and click Open.

86
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

11. On the Upload blob pop-out, click upload.

12. From the fly-out menu on the top-left, select Virtual machines.

87
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

13. Select the checkbox for AUE-CON-002

14. From the menu at the top of the page, click Start.

15. On the confirmation pop-up, click Yes.

88
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. Wait for the command to execute and for AUE-CON-002 to power on (usually 1-2 minutes).
17. Once the virtual machine is running, click on the link for AUE-CON-002.

18. On the AUE-CON-002 virtual machine blade, click Extensions + applications under
Settings.

19. On the Extensions + applications page, click Add.

89
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. In the Install an Extension page, scroll down and select Custom Script Extension.

21. Scroll to the bottom of the page and click Next.

Note: A Custom Script Extension from Microsoft allows you to upload any script file which
gets executed within the virtual machine.
22. Click Browse on the Configure Custom Script Extensions Extension page.

90
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. Click on the storage cws251storage##### and then click on scriptcontainer from the pop-
out.

24. Select JoinDomain.ps1 and click Select at the bottom.

25. In the arguments, type: azr.workspacelab.com AZR\ctxadmin Citrix@Pass!

91
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

26. At the bottom of the page, click Review + create.

27. Click Create at the bottom of the page.

28. Monitor the notifications window for the progress and wait for the deployment to complete.

92
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: This script takes approximately five minutes to execute. To refresh the status of the
deployment, click the Overview tab, and then select the Extensions tab again. Validate that
status of the extension shows Provisioning Succeeded.

Note: Deployment will fail unless the AUE-CON-002.machine is powered on before

completing this step.
29. Wait for the deployment is complete message before proceeding.

Note: During development, it was seen that the Notifications pane wrongly reports the status
of Extension deployment. Even when provisioning has succeeded, the notification does not
change to Deployment successful. You can ignore this and proceed to the next step if
provisioning has succeeded.
30. From the Fly-out menu, click Virtual Machines.

31. From the list of virtual machines, click on AUE-CON-002.

93
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

32. On the right pane, look under Networking and locate the Private IP Address of the virtual
machines. Highlight this address and press CTRL + C to copy to clipboard.

33. Return to the Remote Desktop Connection Manager on the Jumpstation (AUD-JUM-001).

From the menu, navigate to Edit > Add Server.

34. On the Add Server window, place the cursor in the Server name text box and press CTRL +
V to paste the IP address of the server.

In the Display name text box, type AUE-CON-002.

Click Add.

94
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

35. Press CTRL + S to save the connections of the Remote Desktop Connection Manager for
future use.
36. Using the Remote Desktop Connection Manager on the Jumpstation (AUE-JMP-001), connect
to AUE-CON-002.

To log on to AUE-CON-002, right-click this machine and choose Connect server.

Note: The following credentials are used to make the connection: user name:
WORKSPACELAB\Ctxadmin with Citrix@Pass! as the password.

Note: Click Yes on the Remote Desktop Connection Identity Verification screen.
37. Validate that the BGinfo reflects the logon domain as azr

Note: BGinfo is applied via a domain policy and this proves that the machine has successfully
joined the domain via a custom script extension. Also, note that the Server manager did not
auto-Start which has been disabled via group policies.
38. From the task bar, open the file explorer.

39. Navigate to \\AUE-CON-001\c$\Users\ctxadmin.azr\Downloads.

Right-click the cwcconnector.exe file and select Copy.

95
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

40. From the menu on the left, click on This PC. Then double-click Windows (C:).

Right-click under the folders and select Paste.

41. Verify that the cwcconnector.exe file is now present in C:\ of the AUE-CON-002 virtual
machine.

96
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

42. Return to the Chrome web browser on the jumpstation (AUE-JUP-001).

In chrome, open a new tab and navigate to https://citrix.cloud.com.

43. Type your Citrix Cloud Credentials, then click Sign In

44. When prompted, you will need to use your registered authenticator app and provide the 6-digit
code. Then click Verify.

97
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

45. If your account is associated with multiple customers, select the account specific to this
course.

46. Click the fly-out menu on the top-left of Citrix Cloud page.

47. From the fly-out menu, select Identity and Access Management.

98
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Identity and Access Management defines the accounts used for the administration of
Citrix Cloud Services. It also defines the domains to which the resources are published.
48. From the Identity and Access Management page, click the API Access tab.

Note: Secure clients can be used to authenticate the Citrix Cloud APIs and manage the cloud
services. This enables us to create fully automated scripts and scheduled tasks.
49. Type Remote-SDK in the Name your Secure Client box and click Create Client.

Note: A secure client is similar to a service account and is typically used for automation.
50. Once the ID and Secret have been created successfully, click Download.

99
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: A file secureclient.csv is downloaded on AUE-JMP-001. The ID and secret contained

within the secureclient.csv must be kept safe. These two attributes are sufficient to gain full
access to a cloud service instance, so these must be stored safely.
51. The download should appear in the lower-left corner of chrome. Click the arrow next to
secureclient.csv and select Show in folder.

52. Right-click the secureclient.csv file and select Open with and then select Notepad.

100
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

53. Verify the three important entries stored within the secureclient.csv file.

Name: Name assigned at the time of creating a secure client.

Id: This is the unique ID associated with the name of a secure client.

Client Secret: This secret is used along with Client ID to authenticate with Citrix Cloud via
PowerShell SDK.

54. Switch back to the Chrome browser connected to your Citrix Cloud Account to gather the final
piece of information needed for authentication.

Click Close on the ID and Secret have been created successfully pop-up.

101
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

55. On the API Access page, locate the Customer ID. Highlight this item and press CTRL + C top
copy the value to the clipboard.

56. Return to the open Notepad file with for the secureclient.csv.

Press Enter twice to create some separation and type Customer ID: and then press CTRL +
V to paste the contents from the clipboard.

57. Return to the Edge browser to gather the resource ID needed for deploying the cloud
connector to the proper location.

Click the Fly-out menu at the top-left of the page and then select Resource Locations.

102
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

58. Under the Resource Location for WWLabs Azure Resoruce Location, click the ID button.

59. Highlight the ID that is displayed and press CTRL + C to copy to the clipboard.

60. Return to the open Notepad file with for the secureclient.csv.

Press Enter twice to create some separation and type Resource Location: and then press
CTRL + V to paste the contents from the clipboard.

You now have all the information required to do a silent install of Citrix Cloud Connector via
PowerShell.

61. Return to the Remote Desktop Connection Manager and the connection to AUE-CON-002.

From the taskbar on AUE-CON-002, click Start and then click PowerShell ISE.

103
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

62. Using the additional parameters gathered in the notepad document, install Citrix Cloud
Connector using the following command line switches in PowerShell ISE on AUE-CON-002:

C:\CWCConnector.exe /q /Customer:"Customer ID" /ClientId:"Unique"

/clientSecret:"Unique" /ResourceLocationId:"Unique" /AcceptTermsOfService:true

Replace the values in red with the values from notepad. Make sure to leave the quotation-
marks in place as shown below.

Press Enter.

Note: The Customer property is the Customer ID that was found on the API Access page. The
ClientID and clientSecret were the properties in the secureserver.csv file.

Note: If the command is correct, the installation of Citrix Cloud Connector takes approximately
3 minutes. There is no feedback in the PowerShell window if the installation parameters are
correct or when the installation is complete.
63. Once the command is executed successfully, right-click the Start menu and select Apps and
Features.

Verify that the Citrix Cloud Connector is successfully installed.

64. Close out of the Apps and Features window.

104
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

65. Return to the Chrome browser on the jumpstation that is connected to your Citrix Cloud
account.

Click on the Cloud Connectors tile.

Note: The number shown may not be accurate until all cloud connectors have registered and
updated.
66. On the Connectors page, click Refresh All.

67. Verify that two cloud connectors now exist: aue-con-001 and aue-con-002.

Note: It may take up to 5 minutes for the state of aue-con-002 to be presented. After the
installation of the software, the cloud connector will perform an update. During this time, it will
take itself off line and restart processes.

Key Takeaways:
• Microsoft Custom Script Extensions are useful for post-deployment configuration,
software installation, or any other configuration/management task.
• Only the most recent version of the Citrix Cloud Connector software should be
installed

105
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Exercise 4-3: Verify that Cloud Resource Locations are

Aligned with Zones in Citrix DaaS
Scenario:
Your lead Citrix Architect has tasked you to ensure that the Citrix Daas Manage console
understands which region is tied to which Cloud Connector. He instructs you to validate
that Zones in Citrix DaaS automatically map to Resource Locations in Citrix Cloud.

Step Action
1. Using the Chrome browser on the Jumpstation AUE-JMP-001), connect to Citrix Cloud at
https://citrix.cloud.com

Note: If the browser was closed, then restart Chrome browser from the taskbar on the
Jumpstation, browse to https://citrix.cloud.com and Sign in. Now select the Citrix Virtual
Apps and Desktops from the Fly-out menu on the left. Select Full Configuration option from
the Manage tab.
2. At the top left of the Citrix Cloud page, click the Fly-out menu.

3. Click the drop-down button on My Services and select DaaS.

4. On the Citrix DaaS home page, click the drop-down arrow next to Manage and select Full
Configuration.

106
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Citrix will launch the new Manage-Full Console. This will be referred to as the Citrix DaaS
Manage console or just the Manage console.

6. In the left pane of the Manage console, click Zones.

107
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. On the Welcome page for Zones, click Close.

8. Validate that both Cloud Connector servers are listed in WWLabs Azure Resource Location.

108
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Zones are automatically created based on Resource Location with Citrix Cloud.
In contrast to an on-premises setup, zones contain Connector servers instead of Delivery
Controllers. In addition, the Citrix DaaS Manage console does not have a controllers node,
unlike Citrix Studio in an on-premises setup.
9. Select the WWLabs Azure Resource Location zone.

10. From the menu above the zones and connectors, click Edit Zone.

11. In the Edit Zone dialog box, type the name of the Azure location established earlier in exercise
2-2. [Loc].

Click Save.

Note: The [Loc] variable was noted in module 2, exercise 2-2, and is used to denote the
location of your Lab Resources. Refer to studentconfig.txt file to see the value of [Loc]
variable.
12. Verify the description appears at the bottom of the Zones page.

109
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• Zones in Citrix Cloud function like zones in on-prem deployments.
• The difference between zones in an on-premises compared to Citrix Cloud
infrastructure is that Citrix Cloud Connectors are assigned to zones in the Citrix
Cloud and Delivery Controllers are used in an on-prem deployment.
• Zone names in the Manage console are automatically aligned with the Resource
Locations names.

Exercise 4-4: Create a Host Connection from Manage

Console using Pre-Created Service Principal
Scenario:
The WW Labs Lead Citrix Architect has provided you a limited administrator and a pre-
created Service Principal in the shared Azure Subscription. The Administrator and
Service Principal has been delegated the necessary permissions on the resource
groups and components. Your task is to create a hosting connection in Citrix DaaS that
connects to Azure and allows MCS to deploy and control VMs in the pre-created
resource group, using the pre-created Service Principal.
Hosting connections can be created in two ways, one way is called Subscription Scope
Service Principal and the other is referred to as Limited Scope Service Principal.
Creating a hosting connection with subscription scope permissions is the simplest way
because you sign in from the Manage Console to Azure with an account that has owner
permissions on the entire subscription, and then allow Citrix DaaS to create all the
objects it needs for the connection and future Machine Catalogs.
Consider using a Subscription Scope Service Principal if:
• You want the simplest management experience.
• You want the Manage Console to be able to create resource groups in Azure.
• Your Azure subscription is dedicated to a single Citrix DaaS deployment.
• You are doing a proof of concept Citrix DaaS installation.

110
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

• Your Citrix DaaS administrator has contributor access to Azure subscription

scope.

Step Action
1. Switch to the Azure Portal tab in Chrome browser of the jumpstation (AUE-JMP-001).
2. From the Azure Resoure Portal tab, click the fly-out menu in the top left and select Resource
Group.

3. Click Student####-CWS251-Lab resource group.

4. From the left, click Access control (IAM) > Roles Assignments and then click Role
assignments.

111
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Verify that your service account (Service####) has Contributor permissions on the resource
group.

6. Using the Chrome browser on the Jumpstation (AUE-JMP-001), confirm you are still
connected to Citrix Cloud in a sperate browser tab.

Note: If the browser was closed, then restart Internet Explorer from the taskbar on the
Jumpstation, browse to https://citrix.cloud.com and Sign in. Now select the Citrix Virtual Apps
and Desktops from the Fly-out menu on the left. Select Full Configuration option from the
Manage tab.
7. Click the fly-out menu in the top-left.

8. From the fly-out menu, select My Services > DaaS.

112
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. On the Welcome page, click the Manage button at the top to open the Manage-Full console.

10. From the left navigation menu of the Manage Console, click Hosting.

11. In the main section of the page, click Add Connection and Resources.

113
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. On Add Connection and Resources screen, enter the following as it relates to your Azure
environment.

• Zone name: WWLabs Azure Resource Location

• Connection type: Microsoft Azure
• Azure environment: Azure Global
• Create virtual machine using: Citrix provisioning tools (Machine Creation Services
or Citrix Provisioning)

Click Next to continue with the wizard.

114
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Citrix Virtual Apps and Desktops equally support all of the following:
• Citrix Hypervisor
• Microsoft System Center Virtual Machine Manager.
• VMware vSphere
• CloudPlatform
• Microsoft Azure
• Google Cloud Platform
• Amazon EC2
13. Switch to Student Config text file on the Jumpstation (AUE-JMP-001) and copy the
subscription ID.

14. Switch back to Citrix Cloud portal tab in the web browser.
15. Paste the Subscription ID in the Subscription ID field and type the Connection name as
Azure[Loc].

Click Use existing.

115
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The [Loc] variable was noted in module 2, exercise 2-2, and is used to denote the
location of your Lab Resources. Refer to the studentconfig.txt file to see the value of the [Loc]
variable.
Note: If using an account with the subscription-wide Contributor role, you could select "create
new" here.
16. Enter the following information in the Existing Service Principal Details window:

• Subscription ID: (inherited from previous page)

• Active Directory ID: Copy from Student Config.txt(AADID)
• Application ID: Copy from Student Config.txt(Under CitrixCustomConnection)
• Application Secret: C!tr!xP@ss
• Secret Expiration date: Select a date a week away

Click Save.

116
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: In a production environment, the ? next to Secret expiration date will infrom you of
where to look in Azure for the actual date associate with the secret password’s expiration.
17. On the Add Connections and Resources page, click Next.

117
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

18. Select the Region to be [Loc] and click Next.

118
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The [Loc] variable was noted in module 1, exercise 1-2, and is used to denote the
location of your Lab Resources. Refer to the studentconfig.txt file to see the value of [Loc]
variable.
19. Type [Loc] VDA Network in the name of these resources field.
Select Virtual network AUE-VNT-#### (Resource group: Student####-CWS251-Lab)

Click Next.

119
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The drop-down box under Virtual network does NOT auto-populate with your virtual
network. It shows all networks within the subscription. You MUST select your spectific AUE-
VNT-#### or you will experience problems when you use MCS to create VMs.
20. Click Next for the Scopes Window
21. On the Summary page, verify that the configuration information is correct.

Click Finish.

120
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

22. Verify that the hosting connection was successfully created.

Key Takeaways:
• When using a pre-created Service Principal with contributor access limited to an
existing resource group, MCS cannot create additional resource groups.
• The resource groups must be pre-created and the service principal must have at
least contributor permissions on these resource groups.
• Subscription wide scopes are the easiest way of integrating Citrix MCS with
Microsoft Azure.
• Type in the credentials of a subscription owner when creating the Hosting
Connection in Citrix DaaS, and the wizard will generate Service Principals in
Azure on your behalf.
• The Service Principal generated will have Contributor permissions on the entire
subscription.
• Select Subscription Wide Scope when:
o You want the simplest management experience.
o You want Citrix DaaS to be able to create resource groups automatically.
o Your Azure subscription is dedicated to a single Citrix DaaS.
121
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

o You are doing a proof of concept Citrix Virtual Apps and Desktops
installation.
o Your Citrix Virtual Apps and Desktops administrator has contributor
access to Azure subscription scope.

Exercise 4-5: Deploy Master Server VDA

Scenario:
You are a Citrix administrator at WW Labs. Your Citrix team lead has already deployed
a Server 2022 Virtual Machine in Azure, to become the Master VDA. Your task is to
prepare the VM to host user resources by setting the parameters that meet the WW
Labs' requirements and by installing the Virtual Delivery Agent.

Step Action
1. Switch to the Azure Portal tab in the Chrome browser of the jumpstation (AUE-JMP-001).
2. On the left side menu, select Virtual machines.

3. Click AUE-SRV-MST.

122
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. Click Start from the overview pane

Wait for the virtual machine to start.

Note: Starting this VM from the deallocated state can take up to 5 minutes.
5. Using the Remote Desktop Connection manager, connect to AUE-SRV-MST

To log on to AUE-SRV-MST, right-click this machine and choose Connect server.

Note: The following credentials are used to make the connection: user name: AZR\ctxadmin
with Citrix@Pass! as the password.
6. Right-click Start and click System.

Verify that the machine is joined to the azr.workspacelab.com domain.

Click X to close the System Window.

123
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: This machine will be used as a Master to create a Machine Catalog. To ensure that all
machines in this Machine Catalog join the domain, we have to ensure that this Master is
joined to the domain.
7. Open File Explorer from the Windows Taskbar or Start menu.

8. Under the Devices and drives, doube-click Windows (C:).

9. Right-click VDAServerSetup_2203.exe and select Run as administrator. It can take a

minute for the Install scree to appear.

10. Verify that Create a master MCS image is selected and click Next.

124
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Master is a term used to reference a machine that will be used as a base to create other
machines nearly identical to the Master. You will be tasked to use this Master machine in a
future exercise for this type of machine creation.
11. On the Core Components page, the Virtual Delivery Agent is marked as (Required). Select
Citrix Workspace app.

Click Next to continue the Virtual Delivery Agent installation wizard.

125
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Clear any additional components.

Click Next.

126
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

13. Configure the Virtual Delivery Agent to register with the Cloud Connectors deployed in a
previous exercise.

On the Delivery Controller page, under Configuration, confirm the drop-down menu is set to
Do it manually.

• In the Controller address field, enter AUE-CON-001.azr.workspacelab.com

Note: We are pointing US-based master image to the Citrix Cloud Connector server in the US
region. The location of Citrix Cloud Connectors and VDAs is an important design
consideration for larger deployments.

• Click Test Connection. If the test is successful, as indicated by a green checkmark to

the right of the Controller address field, click Add.

Note: If this server cannot be contacted, check the DNS using the command line. DNS
servers should be configured as 10.0.0.4, 8.8.8.8, and 4.2.2.2. In case they differ, reboot this
VM for DNS settings to re-apply.

• Repeat the steps and add AUE-CON-002.azr.workspacelab.com as an additional

Citrix Cloud Connector.

Click Next to continue the Virtual Delivery Agent installation wizard.

127
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: This Citrix Cloud Connector address step in the Virtual Delivery Agent (VDA) installation
wizard saves the Connector address into the registry of the Master that we are installing the
VDA software on. This is important because as mentioned above, all machines created from
this Master will be nearly identical, which means all machines will have the same registry entry
that can be used by the VDA to register with and find the XA/XD Site.
14. On the Features page, enable all the features:

• Use Windows Remote Assistance

• Use Real-Time Audio Transport for audio
• Use Screen Sharing
• Is this VDA installed on a VM in the Cloud?

Click Next to continue the Virtual Delivery Agent installation wizard.

128
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

15. On the Firewall page, verify Automatically option is selected for configuring the firewall rules.

Click Next.

129
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. On Summary page, review and confirm the configurations.

Click Install. The installation will take several minutes.

130
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Click Close on the Citrix Virtual Apps and Desktops dialog box informing that a restart is
required for the installation to continue.

The AUE-SRV-MST machine will reboot and then will continue with the installation of the
VDA. Ensure that each time you log in after a reboot, that you use the same credentials that
were used to perform this installation.

To log on to AUE-SRV-MST, use the Remote Desktop Connection Manager and right-click
this machine, choose Connect server.

Note: The following credentials are used to make the connection: user name:
WORKSPACELAB\ctxadmin with Citrix@Pass! as the password.
18. Wait for the installation to resume.

A second reboot may be prompted. Allow the reboot and reconnect to AUE-SRV-MST to
allow the installation to complete.
19. On the Diagnostics screen, Uncheck Collect diagnostic information and click Next.

131
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Verify that the prerequisites, core components, and post-install items are completed
successfully.

Ensure that Restart machine option is enabled (default) and click Finish.

132
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. After AUE-SRV-MST has finished rebooting, use the Remote Desktop Connection Manager,
and connect to AUE-SRV-MST.

To log on to AUE-SRV-MST, right-click this machine and choose Connect server.

Note: The following credentials are used to make the connection: user name:
WORKSPACELAB\Ctxadmin with Citrix@Pass! as the password.
22. If prompted by the Citrix Workspace app to add an account, click Close.

133
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. Verify the expected Virtual Delivery Agent (VDA) software and the version that was installed.

Right-click Start and select Apps and Features.

24. Once verified, close the Apps and Features window.

25. Switch to the Microsoft Azure portal on the jumpstation (AUE-JMP-001) and click the Fly-out
menu, and select Virtual machines.

134
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

26. Select AUE-SRV-MST Virtual Machine and click Stop from the virtual machine blade. Click
Yes to confirm.

Key Takeaways:
• The Server OS VDA installation allows for two different installation methods: create
a master image or enable connections to a server machine. Create a master image
that will install the VDA in a “sysprepped” state. Enable connections to a server
machine is used when no image management is required.
• The Server OS VDA installation adds the required Remote Desktop Services
Session Host role and other dependencies automatically.
• The installation of the VDA component is required for all machines that will be used
to deliver applications or desktops to end-users.
• The wizard-based installation of the Server OS VDA components, on an Azure
Based Server VM, follows the same steps as Server OS VDA on-premises
installation

Exercise 4-6: Deploy Machines Using MCS to a Pre-

Create Resource Group
Scenario:
You are a Citrix Administrator at WW Labs. The Citrix lead has tasked you to use the
Citrix DaaS Manage Console to create a machine catalog using the Master VDA that
you have previously created in the Azure datacenter.

Step Action

135
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

1. Switch back to Chrome on the Jumpstation (AUE-JMP-001) and select the Citrix Cloud tab
showing the Manage Console..

Note: In a previous exercise, you had opened the Manage Console using the Full
Configuration option in Citrix DaaS.

Note: If the browser was closed, then restart Chrome from the taskbar on Jumpstation and
browse to https://citrix.cloud.com and Sign in.
2. Select DaaS from the Fly-out menu on the top-left.

3. Click Manage to open the Manage Console.

4. From the menu on the left, click Machine Catalogs.

136
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. In the main section, click Create Machine Catalog.

6. On the Introduction page, click Next to continue the Machine Catalog Setup wizard.

137
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Machine Catalogs are collections of physical or virtual machines that you assign to
users. You create Catalogs from Master Images or physical machines in your environment.
The Master Image or physical machine that you use to create a Catalog must have a Virtual
Delivery Agent installed. Also, ensure that the operating system is up-to-date and that
applications are installed.
7. On the Operating System page, verify that Multi-Session OS is selected and click Next.

138
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: When selecting an operating system for the Machine Catalog we have three options:

• Multi-session OS: The multi-session OS Machine Catalog provides hosted shared

desktops for a large-scale deployment of standardized Windows multi-session OS or
Linux OS machines.
• Single-session OS: The single-session OS machine Catalog provides VDI desktops
ideal for a variety of different users.
Remote PC Access: The Remote PC Access Machine Catalog provides users with remote
access to their physical office desktops, allowing them to work at any time.
8. On the Machine Management page, verify that the following two options are selected:

• Machines that are power managed (for example, virtual machines or blade PCs)
• Citrix Machine Creation Services (MCS)
o Resources: [Loc] VDA Network (Zone: WWLabs Azure Resource
Location)

Click Next to continue the Machine Catalog creation wizard.

139
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Indicate which tool you will use to deploy machines:

• Citrix Machine Creation Services (MCS) – Uses a master image or template to create
and manage virtual machines.
o MCS is not available for physical machines.
o Machine catalogs in cloud environments use MCS.
• Citrix Provisioning (PVS) – Manages target devices as a device collection. A Citrix
Provisioning vDisk imaged from a master target device delivers desktops and
applications.
Another service or technology – A tool that manages machines already in the data center.
Citrix recommends you use Microsoft System Center Configuration Manager or another third-
party application to ensure that the machines in the catalog are consistent.
9. On the Master Image page, click Select an image.

140
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

10. On the Select an image page, locate and click the arrow next to Student####-CWS251-Lab.

Then select AUE-SRV-MST and click Done.

141
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

11. Confirm if the master image is turned Off.

Click Close.

Note: If the VM (AUE-SRV-MST) is not turned off, then switch to the Azure portal and
shutdown the virtual machine.
12. Set the minimum functional level for this catalog: 2106 (or later)

Click Next to continue the Machine Catalog creation wizard.

Note: If snapshots existed for the machine, we could select a specific snapshot to be used for
the master. Since there are no snapshots, the resultant process of this wizard will create one
automatically.

142
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

A base VHD could also be used by navigating to the blob container structure when selecting
the master image: Resource Location > Storage Account Name > Storage Blob Name >
Name of the VHD.
13. Select Standard HDD for the storage type.

Select Use my Windows Server License for license usage.

Click Next.

Note: Premium Storage is recommended for most Virtual Apps and Desktop workloads.
However, do NOT select Premium storage at this point because it is not available in the Azure
account used for these labs.
14. Review the default settings on the virtual machines page. Confirm or set the following
settings.

• Number of Virtual machines: 1

• Select a machine size: Standard_D1_v2

Click Next.

143
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Selecting any VM size other than Standard_D1_v2 will cause the deployment to fail
because of policy restrictions within the Azure subscription.
15. On the NICs page, verify the AUE-SNT-#### is selected for the network.

Click Next.

144
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. On the Disk Settings page, accept the defaults and click Next.

145
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. On the Resource Groups page, select Use existing resource groups to provision
machines.

Check the box next to Student####-CWS251-RG and click Next.

Note: A single resource group can only be used for one machine catalog and MCS can only
deploy to an empty resource group.
18. On the Machine Identities, verify On-premises Active Directory is selected in Identity type.

Verify the Create New Active Directory accounts radio button is selected.

In the drop-down next to Domain for the Active Directory location for computer accounts,
make sure azr.workspacelab.com is selected.

146
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

19. Scroll down the page the view the OU structure for the selected domain.

Navigate to Citrix > Azure > VDA

Select Servers_CitrixCloudSite from within the VDA OU.

Note: The Servers OU is the WW Labs' location designated for machines running the Virtual
Delivery Agent (VDA) that are used to host user server OS apps and desktop resources.

147
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Scroll to the bottom of the page and in the Account naming scheme, enter AUE-SRV-###

Verify that 0-9 is selected from the drop-down menu to the right of the naming scheme.

Click Next to continue the Machine Catalog creation wizard.

Note: If this wizard was being used to create machines on an existing naming convention,
then the resultant machines from this Machine Creation Services (MCS) process would
increment to the next numerical sequence numbers available.
21. On the Domain Credentials page, click Enter Credentials.

22. Type the credentials of the domain ctxadmin.

• User name: AZR\ctxadmin

• Password: Citrix@Pass!

Click OK, and then click Next on the Domain Credentials page.

148
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. On the Scopes page, eave the default setting and Click Next.
24. On the Workspace Environment Management page, leave the default settings and click
Next.
25. On the Summary page, review the configuration, scroll to the bottom of the page, and enter
the following information:

• Machine Catalog name: AUE-CAT-SRV-MCS

• Machine Catalog description for Administrators: Windows 2022 MCS

Click Finish.

149
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Clicking Finish begins the Machine Creation Services (MCS) process in which a
combination of the parameters specified in this Machine Catalog creation wizard and the
parameters of the Virtual Apps and Desktops Site are used to create complete virtual
machines from the Master machine specified earlier in the said wizard. Each virtual machine
created is built into a Machine Catalog, visible from the Manage Console.
26. Citrix Machine Creation Service will begin by copying the master image.

Click Hide progress to let the machine creation work in the background and continue to the
next exercise.

Note: Machine creation will take up to 30 minutes. You can proceed to the next exercise.

Key Takeaways:
• Machine Catalogs group machines together that are similar in function, purpose,
and capabilities.
• Citrix Machine Creation Services (MCS) uses a master image to automate the
creation of identical virtual machines.
• When selecting an Azure Master VM or VHD, please ensure that the master
virtual machine is not running.
• MCS will automatically create resource groups by default if the hosting
connection is using a full scope service principle.
• MCS can deploy machines to existing resource groups if the service principal
does not have subscription-wide permissions.
• The container structure when selecting an Unmanaged Azure VHD is Resource
Location > Storage Account Name > Storage Blob Name > Name of the VHD.

Exercise 4-7: Deploy Windows 11 using an ARM Template

Scenario:
You are a Citrix Administrator at WW Labs. The Citrix lead has tasked you to deploy a
Windows 11 machine using an ARM template. He instructs you to use managed
Premium Azure Storage for this VM.
Step Action
1. Switch back to the Azure tab in Chrome browser and click the fly-out menu on the top-left.

150
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Select Create a resource.

2. In the search bar for new resources type template and press Enter.

3. From the search results select Template deployment from Microsoft.

151
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. Click Create on the Template deployment page.

5. On the Custom deployment page, click Build your own template in the editor.

152
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. On the Edit template page, click the Load file option

7. Browse to c:\LabResources, select Win11_ManagedDisk.json and click Open.

8. Click anywhere in the script pane and then press Ctrl+H to find and replace it.

Replace 0033 with ####, where #### is the student unique identifier.

153
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Click the replace-all icon.

10. Click Save at the bottom of the page.

11. Fill in the following parameters for the custom template:

Basics:
• Subscription: [SubName]
• Resource group: Student####-CWS251-Lab
• Location: [Loc]
• Virtual Machine Name: AUE-W11-001
• Virtual Machine Size: Standard_F4s_v2
• Admin Username: ctxadmin
• Virtual Network Name: AUE-VNT-####
• Network Interface Name: AUE-NIF-####-####
• Admin Password: Citrix@Pass! (Prefilled)
• Subnet Name: AUE-SNT-####

154
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Currently Windows 10 and Windows 11 deployments on D1 / Ds1 instances face

performance issues. Microsoft recommends selecting an instance size with a minimum of 4
vCPUs.
12. At the bottom of the Custom deployment page, click Review+Create. Let the validation pass.

13. Click the Create button.

155
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Windows 11 deployment takes about 5 minutes to complete.

14. Click on the Notifications icon, to view the current status of the deployment.

Note: Wait for the deployment to complete before moving on to the next exercise.

Key Takeaways:
• ARM Templates are a way to declare the objects you want, the types, names,
and properties in a JSON file.
• Windows 11 is now available as a VM in non-MSDN subscriptions.

Exercise 4-8: Install VDA Using PowerShell and Create a

Manual Catalog
Scenario:
You are a Citrix Administrator at WW Labs. The Citrix lead has tasked you to use the
Manage console to create a machine catalog for Windows 11 using the manual VM
deployed in Azure.
Step Action
1. Switch to the Azure Portal on Internet Explorer of the Jumpstation (AUE-JMP-001). On the left
side menu, select Virtual machines.

156
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

2. Click AUE-W11-001.

3. From the Properties section, locate the Private IP for AUE-W11-001.

Highlight the Private IP and press CTRL + C.

4. If not already open, launch the Remote Desktop Connection Manager from the taskbar.

5. From the menu bar at the top, click Edit > Add Server.

6. In the Server name box, press CTRL + V to paste the IP address copied from step 3.

157
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

In the Display Name, type AUE-W11-001

Click Add.

7. Press CTRL + S to save the Remote Desktop config so you can connect to this VM the next
time you open the Remote Desktop Connection Manager.
8. Minimize the Remote Desktop Connection Manager and return to the Chrome browser with
the Azure Resource Manager.
9. You should still be on the page for the AUE-W11-001 Virtual Machine.

From the blade on the left, select Extensions + applications under Settings.

158
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

10. On the Extensions tab, click Add.

11. In the pane on the left, under Install an Extension, scroll down and select Custom Script
Extension by Microsoft Corp.

Click Next.

12. On the Configure Custom Script Extension page, click Browse next to Script file.

159
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

13. On the Storage accounts page, select the cws251storage#### container.

14. On the Containers page, click on scriptcontainer.

15. On the scriptcontainer page, click the JoinDomain.ps1 script and then click Select.

160
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. On the Configure Custom Script Extension page, verify JoinDomain.ps1 shows as the script
file.

In the Arguments box, type azr.workspacelab.com AZR\ctxadmin Citrix@Pass!

Click Review + Create.

17. Verify that the script passes validation.

161
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Click Create.

Note: This script may take several minutes to deploy.

18. Wait until you receive notification that your deployment is complete.

19. From the fly-out menu on the top-left, select Storge accounts.

20. From the Storage accounts page, select cws251storage####.

162
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. From the Storage account page, click Containers under Data Storage from the blade on the
left.

22. On the Containers page, click scriptcontainer.

23. From the menu at the top of the page, click Upload.

163
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

24. In the Upload blob pop-out, click the folder icon next to Select a file.

25. Click SimpleVDAInstall.ps1 from the C:\LabResources directory and click Open.

26. On the Upload blob, click Upload.

164
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

27. After the upload is complete, close the Upload blob pop-out.
28. From the fly-out menu on the top-left, select Virtual machines.

29. Click AUE-W11-001.

30. From the blade on the left, select Extensions + applications under Settings.

165
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

31. On the Extensions + applications page, click the CustomScriptExtension that currently
exists from when you joined the VM to the domain.

32. On the CustomScriptExtension pop-out, click Uninstall.

166
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

33. Wait for the notification that the CustomScriptExtension has been uninstalled. Click Refresh
to verify it no longer shows.

34. On the Extensions tab, click Add.

35. In the pane on the left, under Install an Extension, scroll down and select Custom Script
Extension by Microsoft Corp.

Click Next.

167
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

36. On the Configure Custom Script Extension page, click Browse next to Script file.

37. On the Storage accounts page, select the cws251storage#### container.

38. On the Containers page, click on scriptcontainer.

168
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

39. On the scriptcontainer page, click the SimpleVDAInstall.ps1 script and then click Select.

40. On the Configure Custom Script Extension page, verify that SimpleVDAInstall.ps1 is selected
as the Script file.

Click Review + create.

169
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

41. Verify that the script passes validation and then click Create.

170
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The deployment and installation of the VDA may take 4-6 minutes. The script will
download the VDA software and install the VDA for Remote PC Access without any
interaction from the user. It will then initiate a reboot.
42. Wait for the notification that the deployment is complete.

43. Return to the Remote Desktop Connection Manager.

Right-click the node for AUE-W11-011 and select Connect Server As.

171
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

44. Verify that the User name is ctxadmin and the domain is azr.workspaclab.com.

Click Connect.

45. If presented with the certificate warning, click Yes.

46. Verify that you are able to login successfully. This may take a few minutes as this is the first-
time login for the domain account.

Also verify the background eventually changes to the Citrix Education background and BGInfo
are displayed.

172
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

47. Right-click Start and select Apps and Features to confirm the VDA is installed.

173
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

48. Scroll down the list of applications and find Citrix Virtual Apps and Desktops 2203 LTSR.

Close out of Apps and Features.

49. To log off, right-click Start > choose Shut down or sign out > and click Sign out.

50. Switch to back to Chrome and the Microsoft Azure portal tab. From the fly-out menu select
Virtual machines.

174
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

51. Select the AUE-W11-001 Virtual Machine and click Stop from the virtual machine blade.

52. Click Yes to confirm.

Wait for AUE-W11-001 to stop before continuing to the next step.

53. Switch back to Chrome on the Jumpstation (AUE-JMP-001) and open to the Citrix Cloud tab
showing the Manage Console..

Note: In a previous exercise, you had opened the Manage Console using the Full
Configuration option on Citrix DaaS welcome page.

Note: If the browser was closed, then restart Chrome from the taskbar on and browse to
https://citrix.cloud.com and Sign in. Now select the Citrix DaaS from the Fly-out menu on the
left. Select the Full Configuration option from the Manage tab.
54. Using Manage Console, click Machine Catalogs from the menu on the left. In the middle
pane, click Create Machine Catalog.

175
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

55. On the Introduction page, click Next to continue the Machine Catalog Setup wizard.

Note: Machine Catalogs are collections of physical or virtual machines that you assign to
users. You create Catalogs from Master Images or physical machines in your environment.
The Master Image or physical machine that you use to create a Catalog must have a Virtual
Delivery Agent installed. Also, ensure that the operating system is up-to-date and that
applications are installed.
56. On the Operating System page, select Single-session OS and click Next.

176
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: When selecting an operating system for the Machine Catalog we have three options:

• Multi-session OS: The multi-session OS Machine Catalog provides hosted shared

desktops for a large-scale deployment of standardized Windows multi-session OS or
Linux OS machines.
• Single-session OS: The single-session OS machine Catalog provides VDI desktops
ideal for a variety of different users.
Remote PC Access: The Remote PC Access Machine Catalog provides users with remote
access to their physical office desktops, allowing them to work at any time.
57. On the Machine Management, select Machines that are power managed (for example,
virtual machines or blade PCs) at the top of the page, and select Other service or
technology under the Deploy machines using section.

Click Next.

177
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: By using Another service on technology in this step, we will be able to compare the disk
structure of MCS-created machines with manually created machines in later exercises.
58. On the Desktop Experience page, select I want users to connect to a new (random)
desktop each time they log on the radio button.

Click Next.

59. On the Virtual Machines page, click the Add Machines button.

178
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

60. Browse to Azure[Loc] > [Loc] > vm > AUE-W11-001.

Check the checkbox next to AUE-W11-001.

Click OK to add the VM.

61. In the text box under Computer AD account next to AUE-W11-001, type azr\AUE-W11-001$.

In the minimum functional level for this catalog, Select 2106 (or newer) from the drop-down
box.

Click Next.

179
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

62. Leave the default settings on the Scopes page and click Next.
63. Leave the default settings on the WEM page and click Next.
64. On the VDA Upgrade page, don’t select anything and click Next.
65. On the Summary page, type AUE-CAT-DTP-MAN as the Machine Catalog name.

Type Windows 11 Desktops as the Machine Catalog description.

Click Finish to complete the Machine Catalog Wizard.

180
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

66. Verify that you now have two Machine Catalogs created.

Key Takeaways:
• Microsoft Custom Script Extensions can be used for VDA installation.
• When the script is running, you will only see a 'transitioning' extension status
from the Azure portal or CLI
• Scripts deployed using Custom Script Extensions should not require any user
input.

Exercise 4-9: Create Delivery Groups and Assign

Resources to Users
Scenario:
You are a Citrix Administrator at WW Labs. Your Citrix Team lead has tasked you to
investigate how applications and desktops are published in Citrix Cloud. Your task is to

181
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

create a Delivery Group and select two applications to be published. You will then
assign the published resources to users using the Citrix Cloud website.

Step Action
1. Browse to the Manage console and click Delivery Groups from the menu on the left.

On the middle pane, click Create Delivery Group.

Note: If the browser was closed, then from the Jumpstation open a browser and navigate to
https://citrix.cloud.com and Sign in. Now select the Citrix Virtual Apps and Desktops from the
Fly-out menu on the left. Select Full Configuration option from the Manage tab.
2. On the Introduction page, click Next to continue the Delivery Group creation wizard.

182
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Delivery Groups are collections of desktops and applications that are created from
Machine Catalogs. Create Delivery Groups for specific teams, departments, or types of users,
and base them on either a desktop or a server operating system. Make sure you have enough
machines available in a suitable Catalog to create the Delivery Groups you need.
3. On the Machines page, select AUE-CAT-SRV-MCS.

Confirm the option Choose the number of machines for this Delivery Group: is set to 1 in the
box.

Click Next to continue with the Delivery Group creation wizard.

183
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

4. On the Users page, select Leave user management to Citrix Cloud. This makes the
Delivery Group available as a Library offering you can assign to users.

Click Next to continue with Delivery Group creation.

5. On the Applications page, click Add and select From start menu.

The wizard will begin the process of discovering applications found on AUE-SRV-001

184
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The applications can take a while to populate because the AUE-SRV-001 machine is
being created and powered on in Azure. Once powered on, the VDA will register with the
Connector and send a list of installed applications to publish.
6. Switch to the Virtual machines node under the Azure tab in Chrome browser to monitor the
creation and power operation of the VM.

Once the VM changes state to Running, switch back to the Citrix DaaS tab and continue. You
may need to click Refresh a few times.

7. Click the checkbox next to each of the following applications to select them.

• Paint
• WordPad

Click OK.

185
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. Verify that Paint and WordPad were select as applications and click Next to continue with
Delivery Group creation.

Note: You can also add (create) applications manually, by providing the path to the
executable, working directory, any optional command-line arguments, and specifying a display
name visible to users in Workspace App and administrators in Citrix DaaS.
9. On the Scopes page, leave the defaults and click Next.
10. On the License Agreement page, leave the defaults and click Next.
11. On the Summary page, verify the previously configured information and enter the following:

• Delivery Group name: AUE-DG-SRV-MCS

• Display name: HR Desktop

Click Finish.

186
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Verify that a delivery group was created.

13. Click the Citrix logo at the top-left to return to the Citrix Cloud home page.

14. Validate that 2 Library Offerings are available.

15. Click View Library under the Library Offerings icon.

187
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. Observe that there are two offerings for the newly created delivery group; one for Applications
and one for Desktops.

17. Click the ellipsis (…) on the AUE-DG-SRV-MCS (Desktops) Library Offerings card and select
Manage Subscribers.

18. Once you have selected Manage Subscribers, you will be able to search for users or groups
within a chosen domain and assign them to the selected offerings.

Verify azr.workspacelab.com is selected as the domain.

Type HR in the Search for AD Group / User and select the HR group (yellow G) from the
search results.

188
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

19. Wait for the status to show Subscribed.

Click X to close the Manage Subscribers window.

Note: From here, you can also remove users or groups by either clicking on the trash icon or
bulk selecting many in one go.

20. Click the ellipsis (…) dots menu on AUE-DG-SRV-MCS (Applications) Library Offerings
card and select Manage Subscribers.

189
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. Type Auditors in the Search for AD Group / User and select the Auditors from the search
results.

22. Wait for the status to show Subscribed.

Click X to close the Manage Subscribers window.

Note: From here, you can also remove users or groups by either clicking on the trash icon or
bulk selecting many in one go.
23. Scroll up and click Citrix icon on the top-left to return to the home page.

190
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• Delivery Groups are typically created using the Manage Console.
• The Citrix DaaS offers a new way to manage user assignments to published
applications and desktops via the Library Offerings.
• Cloud DaaS and the Manage Console can still be used to assign users to
Delivery Groups.

Exercise 4-10: Configure Autoscale

Scenario:
Your CIO has determined that per-machine costs for running machines can be reduced
substantially by utilizing the capacity management scaling capabilities within Citrix
DaaS.

Your task is to implement and configure the Autoscale feature of Citrix DaaS for the
Azure site, taking into account the level of demand for sessions on specific machines.
You’ll need to add an additional server to the machine catalog and delivery group, then
configure and test the feature.
Step Action
1. Using the Google Chrome browser on the Student Desktop, confirm you are still connected
to the Citrix Cloud home page.

If you are on some other page of the cloud console, click Citrix icon to return to the Citrix
Cloud home page.

Note: In a previous exercise, you had logged into the Citrix Cloud console. If you closed
Google Chrome or signed out, Start the Google Chrome browser and type
https://citrix.cloud.com in the Address bar. Sign in using your cloud credentials.
2. In the middle pane under My Services, click Manage on the card for DaaS.

191
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. In the upper menu, click Manage to open the Manage Console.

4. From the menu on the left, select Machine Catalogs.

5. Right click AUE-CAT-SRV-MCS and select Add Machines.

192
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. On the Add Machines page, under Number of machines to add, select 1 and click Next.

7. Leave the defaults on the Machine Identities page and click Next.

8. On the Domain Credentials page, click Enter credentials.

193
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

On the Windows Security pop-up, enter the following

• User name: ctxadmin
• Password: Citrix@Pass!

Click OK.

Click Next on the Domain Credentials page.

9. Verify the summary and click Finish.

194
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

10. Wait for the machine to be created and verify that the Machine catalog contains 2 machines.

11. In the Manage Console navigation pane, select Delivery Groups.

195
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Right-click Delivery Group AUE-DG-SRV-MCS and then click Add Machines.

13. On the Add Machines page, verify that AUE-CAT-SRV-MCS is selected.

Verify that Choose the number of machines for this delivery group is set to 1.

Click Next.

196
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

14. On the summary page, click Finish.

15. Verify the delivery group now shows 2 machines.

16. Right-click Delivery Group AUE-DG-SRV-MCS and then click View Machines

197
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Under the Multi-session OS Machines tab confirm you see that AUE-SRV-001 and AUE-
SRV-002.

18. Verify that both machines are powered on and registered.

If either machine is powered off, right-click the entry for the machine and select Start.

Note: It may take a few minutes after the request to power on for the VM to power on and
then the VDA services to register with the cloud connector. If needed, refresh the console until
the desired results are shown.
19. In the Manage Console navigation pane, click Delivery Groups.

198
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Select the AUE-DG-SRV-MCS delivery group, click the ellipsis (…) next to More, and click
Manage Autoscale. Depending on screen size and whether you have your browser at full
screen, Manage Autoscale may be under the …More option or it may be on the same row as
+Add Machines and Delete

21. Click the checkbox for Enable Autoscale and set the Machine instance cost per hour to 1.

Click Save

199
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

22. Select the AUE-DG-SRV-MCS delivery group, click the ellipsis (…) next to More, and click
Manage Autoscale.

23. From the menu on the left, select Schedule and Peak Times.

200
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: After you enable Autoscale, the options on the page are enabled for further
configuration.
24. On the Schedule and Peak Times page, verify that the blue selection below the chart shows
peak hours are 7am to 7pm.

25. Next to Machines, click Edit.

26. Scroll down to verify that each half-hour from 7am to 7pm should have 1 Machine available.

Click Save.

201
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

27. From the menu on the left, select Load-Based Settings.

Enter the following configuration details:

• Capacity buffer (During peak times): 0%
• Capacity buffer (During off-peak times): 0%

Return to the General node from the menu on the left and make the following changes:
• Delay powering off machines by: 0 mins

Note: We have entered these values as 0 purely for test purposes.

We are setting capacity buffer values to 0 as we are testing with 2 VDA’s. If we keep buffer
then the second VDA won’t be turned off to cater buffer.

Delay powering off machine option is minimum number of minutes that must elapse after a
machine is powered on before Autoscale powers it off. Doing so keeps machines from “flip-
flopping” on and off during volatile session demands. By default, the power-off delay is 30
minutes. You can set it in a range of 0–60 minutes. We are keeping value 0 so that we don’t
have to wait for 30 minutes for changes to kick in.

Note: Hover your mouse over blue question marks to know more about the respective
options.
28. Click Save. A pop-up window will appear, click Yes.

202
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

29. Right-click Delivery Group AUE-DG-SRV-MCS and select View Machines.

30. Verify that one machine is powered off and the other one is in a powered on state in the
Manage Console.

Note: In step 18 we confirmed both machines were powered on & registered.

Note: It may take 3 – 5 minutes for the power state and registration state to get updated.

Note: Powered off machines will always show as unregistered

31. Click the Monitor option on the upper left-hand corner, then click Trends > Machine Usage.

203
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

32. On the Machine Usage page, select Multi-session OS Machines.

You can verify the number of machines powered on from the main graph. The Chart on the
right shows the savings provided by using Autoscale.

33. Return to the Manage Console and go to Delivery Groups.

Right-click Delivery Group AUE-DG-SRV-MCS, and then click Manage Autoscale.

34. Select Schedule and Peak Times, then Edit to adjust the number of machines needed
during peak hours.

204
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

35. Adjust the number Machines to 0 for all hours.

Click Save.

36. Click Save on the Manage Autoscale page.

A pop-up window will appear, click Yes.

37. Right-click Delivery Group AUE-DG-SRV-MCS and select View Machines.

205
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

38. Verify that both machines should be in powered off and unregistered state in the Manage
console.

Note: It may take a few moments for the machine to power off, so it may show “Turning Off”
until the shutdown process is complete. Click Refresh on the View Machines page as needed
to get the expected result.
39. From the menu on the left, click Delivery Groups.

Right-click Delivery Group NYC-DG-servers, and select Manage Autoscale.

40. Return the Autoscale settings to the default values:

206
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Getting Started with Autoscale

• Delay powering off machines by: 30 minutes

Click Schedule and Peal times

• 1 Machine available between 7am and 7pm

Click Load based Settings

• Capacity buffer (During peak times): 10%
• Capacity buffer (During off-peak times): 10%

Return to the General node from the menu on the left.

• Uncheck the box for Enable Autoscale.
• Click Yes on the confirmation pop-up

41. Click Save on the Manage Autoscale page.

42. Right-click on the AUE-DG-SRV-MCS delivery group and select View Machines.

43. Click on AUE-SRV-002 and click Remove from Delivery Group.

207
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

44. If you receive a confirmation page, click Yes.

45. From the menu on the left, click Machine Catalogs.

46. Right-click the AUE-CAT-SRV-MCS machine catalog and select View Machines.

208
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

47. Right-click AUE-SRV-002 and click Delete.

48. On the Delete Desktops pop-out, select Remove the virtual machines from the catalog and
delete the virtual machines.

Select Leave the accounts in the catalog and do not change them in Active Directory.

Click Next.

209
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

49. On the Summary page, click the checkbox next to I understand that deleting this machine
performs the following operations.

Click Delete.

210
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

50. When the delete process is complete, click the Citrix logo to return to the Citrix Cloud home
page.

Key Takeaways:
• Autoscale is a feature exclusive to the Citrix DaaS that provides a consistent,
high-performance solution to proactively power manage your machines. It
aims to balance costs and user experience. Autoscale incorporates the
deprecated Smart Scale technology into the Manage Console power
management solution.
• Autoscale enables proactive power management of all registered Server and
Desktop OS machines in a Delivery Group.

211
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Module 5: Planning - Providing Access to

End Users
Overview:
This module presents the role of Citrix Workspace and Citrix ADC in Citrix DaaS. You
will identify and administer both the Citrix Workspace and Citrix Gateway to enable
resource access using the Citrix Cloud Services. You will then deploy and configure an
Azure-hosted Citrix ADC appliance for remote access. By completing this module, you
will gain better insight into the differences between hosting these resources in Azure
and using the Citrix Cloud offerings.

Before you begin:

Estimated time to complete Module 5 lab exercises: 55 minutes

Exercise 5-1: Citrix DaaS Workspace Configuration

Scenario:

You have been tasked to ensure that the Citrix Workspace is enabled and to test the
user experience by authenticating and viewing available resources.

Step Action
1. Using the browser on the Jumpstation (AUE-JMP-001), confirm you are still connected to the
Citrix Cloud Homepage.

2. Click the Fly-out menu and click the Workspace Configuration button.

212
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. On the Access page, validate that external connectivity for WWLabs Azure Resource
Location is set to Gateway Service. This means that external users will connect through a
Citrix Hosted Citrix Gateway to access their applications and desktops.

4. Click the Authentication tab

213
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Select Active Directory

6. Check the box I understand the impact on the subscriber experience and click Confirm

214
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: It may be a few minutes for this change to take effect on the workspace.
7. On the Workspace Configuration home page, click Service Integrations tab.

8. Verify the DaaS is Enabled

Note: If the DaaS is disabled, click the ellipsis and select Enable then click OK.
9. Click the Access tab.

10. Locate the Workspace URL link. Highlight this URL and press CTRL + C to copy to clipboard.

Note: URL of the Citrix Workspace service follows the format: https://account.cloud.com.
11. On the Chrome web browser, click the three dots on the top-right of the window.

From the drop-down menu, select New Incognito windows.

215
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. In the address bar of the incognito browser, press CTRL + V and press Enter to paste the
URL for your specific Workspace environment and navigate to the page.

13. On the Workspace login page, use the following credentials to log on:

• User name: azr.workspacelab.com\Auditor1

• Password: Citrix@Pass!

Click Log On.

14. On the Welcome to Citrix Workspace screen, Use web browser.

216
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

15. The Citrix Workspace shows Recent Apps as the default view.

Note: The default landing page for Citrix Workspace may differ in your lab if new features
have been added by the Citrix Cloud Development team.
16. From the menu on the left, click Apps > All Apps.

217
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Verify that the Apps page displays Paint and WordPad for the Auditor1 user.

18. At the top-right of the Citrix Workspace page, click the A inside the circle and select Log Out.

Note: The letter displayed in the circle is the first initial of the user. In this case it’s A for
Auditor One.
19. Close out of the Incognito browser window and return to the Citrix Cloud browser tab.
20. On the Workspace Configuration page, click Customize.

218
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. In the Workspace Configuration / Customize page, scroll down to the Sign-in Appearance
section and hover over the Citrix Workspace logo.

When clicked, the logo will change to Drop the logo file or browse from a folder box.

22. Click the new link for Drop the logo file or browse from a folder.

23. Within the Choose File to the Upload window, navigate to C:\LabResources\Branding Files.

To select the Sign-in Appearance logo, double-click NSLogonbranding.png.

219
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

24. The WW Labs logo should now appear in the Sign-in Appearance section.

25. You will now modify the After Sign-in Appearance settings.

In the Workspace Configuration / Customize page, scroll down to the After Sign-in
Appearance section and hover over the Citrix Workspace logo.

When clicked, the logo will change to Drop the logo file or browse from a folder box.

Clicking the Drop the logo file or browse from a folder text will open the file explorer to
select a file to upload.

220
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

26. Within the Choose File to Upload window, navigate to C:\LabResources\Branding Files

To select the Sign-in Appearance logo, double-click NSLogonbranding.png

27. Scroll down to the Content Branding section and click the box below Banner Color.

221
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Type #ade5fa in the hex field, then click outside the color picker pop-up to close it.

28. Click the colored box below Accent Color and Type #1c75bc in the hex field, then click
outside the color picker pop-up to close it.

29. Scroll up to the top of the page, and click Update under Customize how subscribers will see
their workspace.

222
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: It may take a few minutes for the branding updates to appear when the webpage is
accessed.
30. From the menu at the top, click the Access tab.

31. Locate the Workspace URL link. Highlight this URL and press CTRL + C to copy to clipboard.

Note: URL of the Citrix Workspace service follows the format: https://account.cloud.com.
32. On the Chrome web browser, click the three dots on the top-right of the window.

From the drop-down menu, select New Incognito windows.

223
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

33. In the address bar of the incognito browser, press CTRL + V and press Enter to paste the
URL for your specific Workspace environment and navigate to the page.

34. View the recently customized Workspace Sign-In page.

Note: It may take up to 5 minutes for the changes in colors and logos to appear. If needed,
wait a few minutes and refresh the page.
35. Sign in to Citrix Workspace with:
• User name: azr.workspacelab.com\Auditor1
• Password: Citrix@Pass!

224
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Click Log On.

Note: If the customized WW labs logo does not appear, continue to refresh the website until
the logo appears.
36. Verify that the After Sign-in Appearance settings have been modified. Choose Use Web
Browser to continue

225
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: The default landing page for Citrix Workspace may differ in your lab if new features
have been added by the Citrix Cloud Development team.
37. At the top-right of the Citrix Workspace page, click the A inside the circle and select Log Out.

Note: The letter displayed in the circle is the first initial of the user. In this case it’s A for
Auditor One.
38. Close out of the Incognito browser tab to return to the Citrix Cloud browser tab.

Key Takeaways:

226
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

• The Workspace interface allows for customized branding very similar to the on-
premises StoreFront.
• Customizations to the Workspace appearance take effect immediately.
• Supported formats for graphics include JPEG, JPG, or PNG.

Exercise 5-2: Deploy Citrix ADC on Azure

Scenario:
You are a Citrix administrator at WW Labs. The Citrix lead is concerned with the limited
feature set of the Citrix ADC. The Citrix lead has decided it is best to deploy a Citrix
ADC in Azure. You have been tasked with deploying a Citrix ADC in an Azure
datacenter. To do so you will need to create a new Network Security Group in Azure.
However, you will use the previously configured Storage Account, Virtual Network, and
Subnet Azure resources.
Step Action
1. On the Jumpstation (AUE-JMP-001), switch to the browser tab running the Microsoft Azure
portal.
2. From the fly-out menu on the top-left of the Microsoft Azure page, click + Create a Resource

3. Type Citrix ADC in the Search the Marketplace field and press Enter.

4. Select the tile for Citrix ADC 13.1.

227
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. Click the drop-down list under Plan.

Select Citrix ADC 13.1 VPX Bring Your Own License.

228
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. Click Create.

7. On the plan confirmation page, click Yes, continue.

229
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. Enter the following information under the Basics tab:

• Subscription: [SubName] (ex: ctxedu)

• Resource group: Student####-CWS251-Lab
• Virtual Machine Name: AUE-ADC-001
• Region: [Loc] (ex. East US 2)
• Availability options: No infrastructure redundancy required
• Security type: Standard
• Image: Citrix ADC 13.1 VPX Bring Your Own License – Gen1
• Size: A2v2 Standard

230
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Scroll down the page and input the following:

• Authentication type: Password

• Username: ctxadmin
• Password: Citrix@Pass!
• Confirm password: Citrix@Pass!
• Public inbound ports: None

Click Next: Disks >.

10. Enter the following information under the Disks tab:

• OS disk type: Standard HDD (locally-redudant storage)

Click Next : Networking.

231
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

11. Enter the following information under the Networking tab:

Virtual Network: AUE-VNT-####

Subnet: AUE-SNT-#### (10.0.0.0/24)
Public IP: None
NIC network security group: Basic
Public inbound ports: None
Accelerated networking: Disable or Uncheck the box
Place this virtual machine behind an existing load balancing solution?: Disable or
Uncheck the box

Click Next : Management

232
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Enter the following information under the Management tab:

• Monitoring > Boot diagnostics: Disable

• Identity > System assigned managed identity: Disable or Uncheck the box
• Azure AD > Login with Azure AD (Preview): Disable or Uncheck the box
• Auto-Shutdown > Enable auto-shutdown: Disable or Uncheck the box
• Guest OS Updates > Patch Orchestration options: Image default

Click Next : Advanced.

233
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

13. On the Advanced screen, leave the defaults and click Next : Tags.
14. On the Tags screen, leave the defaults and click Next : Review + Create.
15. Wait for the Validation passed notification on the summary page.

16. In the Preferred contact fields, enter the following:

• Preferred e-mail address: Admin####@CWS251.onmicrosoft.com

• Preferred phone number: 1

Click Create.

234
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. Wait for the Citrix ADC deployment to complete.

Note: Citrix ADC deployment takes approximately 3-5 minutes.

18. When complete, click the fly-out menu from the top-left and select Virtual machines.

19. From the virtual machines page, select AUE-ADC-001.

20. Select Networking under Settings on the AUE-ADC-001 Virtual machine blade.

235
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

21. From the details in the Networking pane, select Network Interface: aue-adc-001xxx

22. Select IP configurations on the network interface under Settings on the blade to the left.

236
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. On the IP configurations page, click to select ipconfig1.

24. Set the Private IP address setting to Static.

Change the IP address to 10.0.0.12.

Click Save and wait for the save operation to complete. This can take 2-3 minutes and you
may see a Failed to Save message, but let it finish.

237
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

25. Click X to close the ipconfig1 blade.

Key Takeaways:
• The Citrix ADC VPX virtual appliance is available as an image in the Microsoft
Azure Marketplace.
• Virtual Citrix ADCs require 2 vCPU and at least 2GB memory to install. Please
choose the Azure Virtual Machine size accordingly.

Exercise 5-3: Import Citrix ADC Configuration

Scenario:

You are a Citrix administrator at WW Labs. The Citrix Lead has tasked you with
configuring an Azure deployed Citrix ADC appliance to handle the Gateway
functionality. To gain access to their resources, external users will need to connect to

238
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

the Citrix Gateway vServer IP. Your task is to configure the Citrix ADC that was
previously deployed in Azure. To do so you will need to assign IP addresses to the
Citrix ADC interfaces in the ARM.
Note: The Citrix ADC from Azure Marketplace is unconfigured when first deployed. In
this exercise, you will be provided with a Citrix ADC configuration backup file. You will
restore the backup file so that Citrix ADC can be set up quickly.
Step Action
1. Select IP configurations in Settings for the aue-adc-001xxx network interface.

2. Click + Add button to add a new IP configuration

3. Enter the following information:

• Name: ipconfig2

239
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

• Type: Secondary (default grayed-out)

• Private IP address setting: Allocation> Static
• IP address: 10.0.0.21
• Public IP address: Disassociate

Click OK.

Note: Wait for the IP configuration to get applied. Monitor the progress from the notifications
pane. If the previous IP configuration implementation was in progress you might receive an
error.

Note: This IP will be used as a SNIP later.

4. Wait for the IP address changes to be saved.

5. Verify there are now two IP addresses assigned to AUE-ADC-001.

240
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. Again, click + Add button to add a new IP configuration

7. Enter the following information:

• Name: ipconfig3
• Type: Secondary
• Private IP address setting > Allocation: Static
• IP address: 10.0.0.22
• Public IP address: Disassociate

Click OK.

241
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Wait for the IP configuration to get applied. Monitor the progress from the notifications
pane. If the previous IP configuration implementation was in progress you might receive an
error.

Note: This IP will be assigned to a vServer for StoreFront load balancing.

8. Wait for the IP address to get added and then verify there are 3 IP addresses assigned to
AUE-ADC-001.

242
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Again, click + Add button to add a new IP configuration

10. Enter the following information:

• Name: ipconfig4
• Type: Secondary
• Private IP address setting > Allocation: Static
• IP address: 10.0.0.23
• Public IP address: Disassociate

Click OK.

243
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: Wait for the IP configuration to apply. Monitor the progress from the notifications pane.
If the previous IP configuration implementation was in progress, you might receive an error.

Note: This IP will be assigned to vServer for NetGateway IP.

244
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

11.

12. Take note of the IP address assigned to ipconfig1. This will be used in the following step to
access and configure the Citrix ADC.

13. On the Jumpstation (AUE-JMP-001), open a new tab in the Chrome browser and enter http://
followed by the IP address from the previous step and press Enter.

14. On the Citrix ADC login page enter the following:

Username: ctxadmin
Password: Citrix@Pass!

Click Log On.

15. On the Welcome wizard, scroll to the bottom of the page and click Continue.

245
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

16. From the menu on the left, navigate to System > Backup and Restore.

17. On the Welcome to Backup and Restore page, click Backup/Import.

18. On the Backup/Import Page, select Import.

246
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

19. Under File Name, click the box for Choose File.

20. In the File Browser pop-up, click Upload.

21. Navigate to C:\LabResources\ADC Files.

Click Backup.tgz and click Open.

22. In the File Browser window, select the radio button next to Backup.tgz and click Open.

247
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. On the Backup/Import page, verify Backup.tgz is selected and click Backup.

24. Once the Backup file is imported, select Backup.tgz and click the drop-down box for Select
Action.

Select Restore.

248
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

25. On the Restore pop-up, select the checkbox for Skip Backup and click Restore.

Note: Restored the configuration files with a backup file.

26. From the menu on the left, click System.

Then click Reboot from the menu on the top of the main pane.

249
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

27. Unselect Save configuration.

Select Warm reboot.

Click OK.

28. Wait for the countdown timer to finish the reboot process and then try to reach the
Management IP address of the Citrix ADC (http://10.0.0.12).

Type the user name and password to log on.

• User Name: ctxadmin

• Password: Citrix@Pass!

29. After you login, the Citrix ADC should take you to the Main page for the Azure configuration
instead of presenting you with the configuration wizard.

250
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• Use Azure ARM Portal to add additional IP addresses to existing network
interfaces.
• IP addresses added using the ARM portal can be Dynamic or Static.
• Use Static IPs when configuring a Citrix ADC appliance because a change in IP
address may cause some services to unusable or the appliance being
inaccessible.

Module 6: Rolling Out a Citrix DaaS

Deployment on Microsoft Azure
Overview:
This module presents the role of Citrix Workspace and Citrix ADC in Citrix DaaS. You
will identify both the Citrix Workspace and the Citrix Gateway service, as well as
deploying Citrix Workspace with an in-premises Citrix ADC, to understand the key
differences between hosting these resources on-premises and using the Citrix Cloud
offerings.

Before you begin:

Estimated time to complete Module 6 lab exercises: 25 minutes

Exercise 6-1: Logon to Citrix Workspace app and Launch

Published App
Scenario:
251
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

The Lead Citrix Architect at WW Labs is still deciding whether to use the Citrix
Workspace or to install an on-premises StoreFront solution for the production
deployment following this POC. They have tasked you to verify that the Citrix
Workspace is enabled and test the user experience.
Step Action
1. Using the Google Chrome browser on the jumpstation, confirm you are still connected to the
Citrix Cloud Homepage.

Note: If the browser was closed, then relaunch Google Chrome from the taskbar on Student
Desktop and browse to https://citrix.cloud.com and sign in.
2. At the top left of the Citrix Cloud page, click the Fly-out menu and select Workspace
Configuration.

Note: If prompted by the Welcome to Workspace Configuration pop-up window, click X to

close the window.
3. Locate the Workspace URL link. Highlight this URL and press CTRL + C to copy to clipboard.

252
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: URL of the Citrix Workspace service follows the format: https://account.cloud.com.
4. On the Chrome web browser, click the three dots on the top-right of the window.

From the drop-down menu, select New Incognito windows.

5. In the address bar of the incognito browser, press CTRL + V and press Enter to paste the
URL for your specific Workspace environment and navigate to the page.

6. Sign in to Citrix Workspace with:

• User name: azr.workspacelab.com\Auditor1
• Password: Citrix@Pass!

Click Log On.

253
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. On the Welcome to Citrix Workspace page, click Detect Workspace.

8. Select the checkbox for I agree with the Citrix license agreement and click Download.

254
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

9. Wait for the file to download. When complete click on the CitrixWorkspaceApp.exe file in the
lower-left corner of the Chrome browser.

Note: The installer may take a few minutes to launch. Be patient before continuing.
10. When prompted with the Welcome to Citrix Workspace installer, click Start.

11. On the License Agreement page, click the check box next to I accept the license agreement
and click Install.

255
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Wait for the installer to check the prerequisites and then install the Citrix Workspace app.

Note: The install may take 2-3 minutes.

13. When the installation is completed, click Finish.

256
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

14. Return to the Citrix Workspace in the browser and click Continue.

15. When prompted to open the Citrix Workspace Launcher, click Open Citrix Workspace
Launcher.

16. After a few moments, you should be presented with the Citrix Workspace. If previous apps or
desktops had been launched, they would show up in the recent sections.

From the menu on the left, navigate to Apps > All Apps.

257
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. From the Apps page, click Paint.

18. When prompted to open the Citrix Workspace Launcher, click Open Citrix Workspace
Launcher.

Note: It may take a few minutes for this pop-up to appear. The virtual machine in Azure has to
power on and register with Citrix Cloud, then the ICA file can be presented to the client.
19. Verify the Citrix Workspace app begins the process of setting up the ICA connection to the
environment.

258
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

20. Once launched, you should see the paint application has opened and you can interact with it
like a locally installed application.

21. In the lower-right corner of the task bar, click the up-arrow to display additional icons.

22. Right-click the Citrix Workspace app icon and click Connection Center.

259
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. Verify Paint is running in AUE-SRV-001 and click Properties.

24. Observe you are connected using 256-bit encryption. This is the result of using Citrix Gateway
Service in the Citrix Cloud to connect to AUE-SRV-001.

260
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

25. Close out of the Client Connection Status by clicking OK.

26. Close out of the Citrix Workspace Connection Center by clicking Close.
27. Switch back to the Citrix Cloud site tab, click the Fly-out menu, and select My Services >
DaaS.

28. Select the Full Configuration option from the Manage drop-down menu or click on Manage
to open Citrix Cloud Console.

29. From the menu on the left, click Search.

261
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

30. Click the Sessions tab within the search view.

31. Verify that Auditor1 has an active session on AUE-SRV-001.

32. Select the active Auditor1 session and view its details.

262
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

33. Verity that the Connected Through IP address is the IP for either AUE-CON-001 or AUE-
CON-002. (Most importantly, this IP address is NOT 10.0.0.21).

34. You have verified that user sessions are connecting through the Cloud Connectors.

Note: The Connected Via: IP address in your lab may vary.

35. Switch back and close out of paint by clicking the X in the upper-right corner and then clicking
Don’t Save on the dialog box.
36. At the top-right of the Citrix Workspace page, click the A inside the circle and select Log Out.

263
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

37. Close out of the Incognito browser window.

Key Takeaways:
• Citrix Workspace provides an access mechanism for authentication of users and
enumeration of resources
• Connections made via the Workspace portal will use the Citrix Cloud Connectors
• Custom branding can be applied to provide logos and color schemes for users.

Exercise 6-2: Logon to Citrix Workspace app and Launch

Published Desktop
Scenario:
The Citrix lead has asked you to test out the functionality of the native Citrix Workspace
app. You’ve also been asked to verify that users can launch a full desktop instead of
just applications.

Step Action
1. Using the Google Chrome browser on the jumpstation, confirm you are still connected to the
Citrix Cloud Homepage.

Note: If the browser was closed, then relaunch Google Chrome from the taskbar on Student
Desktop and browse to https://citrix.cloud.com and sign in.
2. At the top left of the Citrix Cloud page, click the Fly-out menu and select Workspace
Configuration.

264
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: If prompted by the Welcome to Workspace Configuration pop-up window, click X to

close the window.
3. Locate the Workspace URL link. Highlight this URL and press CTRL + C to copy to clipboard.

Note: URL of the Citrix Workspace service follows the format: https://account.cloud.com.
4. In the lower-right corner of the task bar, click the up-arrow to display additional icons.

5. Right-click the Citrix Workspace app icon and click Open.

265
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. The Citrix Workspace app will open and prompt for a Store URL or e-mail address.

7. Click in the box for the URL and press CTRL + V to paste in the Workspace URL.

Click Continue.

266
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

8. When prompted with the authentication page type the following:

• User name: azr.workspacelab.com\HR1

• Password: cc

Click Log On.

9. When prompted for additional permissions, click Allow.

267
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

10. Click the X to close out of any pop-ups.

11. Note that the HR user has a desktop published to them instead of Applications.

Click HR Desktop.

268
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. After a few moments, the desktop viewer should open for HR1 and you are presented with a
desktop hosted on Windows Server 2022.

13. Play around with the desktop. When finished, right-click Start and then select Shut down or
sign out. Select Sign out.

14. When returned to the Workspace App, click the H in the circle in the top-right.

From the drop-down menu, select Logout.

269
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

15. Close out of the Workspace App by clicking the X in the top-right.

Key Takeaways:
• Citrix Workspace platform enables IT admins to manage all their applications,
desktops, and data from a single source
• Citrix Workspace app is used to establish ICA/HDX connections from clients
devices to hosted apps and desktops
• Branding inside of Citrix StoreFront or Citrix Workspace is seen in the Citrix
Workspace app to provide a customized and familiar interface for users.

Exercise 6-3: Switch Citrix Gateway Service to Citrix ADC

to launch resources
Scenario:
Your Lead Citrix Architect has now tasked you with verifying that connections made via
the on-premises Citrix ADC are successful and that active sessions can be verified.
You are tasked with configuring the Azure-hosted Citrix ADC as a Gateway for the
Azure Resource Location within the Citrix Cloud interface.

Step Action
1. Using the Google Chrome browser on the jumpstation, confirm you are still connected to the
Citrix Cloud Homepage.

Note: If the browser was closed, then relaunch Google Chrome from the taskbar on Student
Desktop and browse to https://citrix.cloud.com and Sign in.
2. At the top left of the Citrix Cloud page, click the Fly-out menu and select Resource
Locations.

270
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

3. On the Resource Locations page, click the + Gateway button in the WWLabs Azure Resource
Location.

4. In the Configure Connectivity window, select the option Traditional Gateway.

271
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

5. In the Traditional Gateway window, enter gateway.azr.workspacelab.com in the External

FQDN box.

Click Add.

272
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

6. Verify the address you just entered shows under Existing Citrix Gateway.

Click Save

273
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

7. At the top left of the Citrix Cloud page, click the Fly-out menu and select Workspace
Configuration.

8. Right-click the Workspace URL and select Open link in incognito window.

9. On the Workspace login page use the following credentials to log on:

• User name: azr.workspacelab.com\Auditor1

• Password: Citrix@Pass!

Click Log On.

274
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

10. When prompted, click Detect Workspace.

11. On the pop-up for Open Citrix Workspace Launcer, click Open Citrix Workspace Launcher.

275
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

12. Start the Paint application by clicking on the Paint Icon.

13. When prompted again for the Open Citrix Workspace Launcer, click Open Citrix Workspace
Launcher.

14. Verify that the Paint application launches.

276
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Do not close the Paint application.

15. Switch back to the Citrix Cloud site, click the Fly-out menu, and select My Services > DaaS

16. From the options at the top of the page, click Manage to open the Manage Console.

277
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

17. From the menu on the left, click Search.

18. Click the Sessions tab within the search view to view the active session.

Note: If the Sessions tab is showing information from an earlier session, in the right-hand
Actions pane, click Refresh.
19. Click on the active session and view the details of Auditor1’s active session in the lower pane.

278
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Note: A subnet IP address (SNIP) is a Citrix ADC owned IP address that is used by Citrix
ADC to communicate with the servers.
20. Verify that the Connected Via: IP address is 10.0.0.21. The 10.0.0.21 IP address is the
subnet IP address (SNIP) of the AUE-ADC-001 Citrix ADC.

21. Switch to the Paint application and click X to close the application.
22. At the top-right of the Citrix Workspace page, click the A inside the circle and select Log Out.

279
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

23. Close out of the Incognito browser window.

24. Return to the browser window for Citrix Cloud. At the top left of the Citrix Cloud page, click the
Fly-out menu and select Resource Locations.

25. On the Resource Locations page, click the 1 Gateway button in the WWLabs Azure Resource
Location.

26. On the gateway.azr.workspacelab.com:443 card, click three dots and select Remove.

Note: If the ellipsis (three dots) don’t render on the Gateway page, hover over the location
where they should be and the mouse cursor should change when it finds the correct spot to
click to get the drop-down menu.
27. Are you sure you want to remove this Gateway? prompt, click Yes.

280
CWS-251-1I Implement Citrix DaaS on Microsoft Azure Citrix Education, 2022

Key Takeaways:
• HDX sessions established through Citrix Gateway will show the SNIP (Subnet IP
Address) of the Citrix Gateway instance in the session’s Details screen.
• Using an on-premises or local Citrix Gateway provides the benefit of users
connecting directly from their client device to the datacenter where the VDA
resources is hosted.

Module 8: Optimize Citrix DaaS

Deployments on Microsoft Azure
Overview:
This module presents considerations for hosting resource locations in a public cloud.
The exercises in this module will help you to calculate the expected costs of public
cloud deployment.

Before you begin:

Estimated time to complete Module 8 lab exercises: 20 minutes

Exercise 8-1: Using Azure Price Calculator

Scenario:
In this exercise, the Azure Price Calculator is used to estimating the costs of a sample
deployment. Please refer to the Student Manual for more details; the lab environment is
not needed to complete the cost calculation.

281