Configuring for high availability with shared storage
Citrix Provisioning servers are configured to access your shared-storage location, and supports various shared-storage configurations. The configuration steps for highly available storage in the network vary depending on shared-storage configurations.
Windows shared-storage configuration
When using a Windows shared storage location, service account credentials (user account name and password) must be a domain account that is configured on each Citrix Provisioning server. This method is used to access the Stream Service and the shared storage system.
Creating stream service account credentials on the domain controller
The stream service runs under the user account. When the stream service accesses a virtual disk stored locally on the server, the local user rights provide full access. However, when the database or virtual disk is on a remote storage device, the streaming server must use a domain account with rights to both the provisioning server and the remote storage location. An administrator must assign full control rights to the stream service account in order for it to read and write to the remote storage location.
An administrator creates service account credentials in Active Directory and assigns the credentials to the stream service on all Citrix Provisioning servers that participate in high availability. Alternatively, an existing domain user account can be given full control rights to the network share and be assigned to the Stream Service.
Consider the following when creating service account credentials:
- You must be logged on as an administrator or a member of the Administrator group to create a domain account.
- Clear the User must change password at next logon check box.
Assigning stream service account credentials manually
When running the Configuration Wizard on a provisioning server, you are prompted to enter an account name and password for the Stream Service to use. This account must have access permissions for any stores it is given access to, in addition to permissions in SQL Server for database access. If necessary, credentials can be assigned manually.
To assign the Service account credentials to the Stream Service:
- Open the Windows Control Panel.
- Go to Administrative Tools > Services.
- Double-click on the first Citrix Provisioning Stream Service name in the Services list.
- On the Log On tab, select This Account, then click Browse.
- Click Locations, select the domain node, then click OK.
- Type the name of the Stream Service user account, then click Check Names.
- Click OK to close the Select User dialog.
- On the Log On tab, enter and confirm the Stream Service account password, then click OK.
- After assigning the Service account credentials to the Stream Service, restart the Stream Service.
Configuring storage access
The stores that contain the vDisks must be shared, and the Service account credentials need to have access to remote storage for vDisks, with the appropriate permissions.
To share your virtual disk’s stores folders, and grant access permissions to your Service account credentials:
- In Windows Explorer, right-click on the folder that contains the database and virtual disk folders. For example, if the database and virtual disk files are stored in the default C:\Program Files\Citrix\Provisioning Services folder, right-click on that folder.
- Select Sharing and Security from the shortcut menu.
- Enable the Share this folder radio button, then optionally enter a share name, and comment.
- Click Permissions.
- If the Service account credentials user name does not appear in the Group or user names list, click Add. Enter the user name of the Service account credentials, and click Check Names to verify.
- Click OK.
- Select the service account credentials user name.
- Enable the Full Control check box (the Full Control check box and all additional check boxes are selected).
- Click Apply.
- Select the Security tab.
- If the Service account credentials user name does not appear in the Group or user names list, click Add. Enter the user name of the Service account credentials, then click Check Names to verify.
- Click OK.
- Select the Service account credentials as the user name.
- Enable the Full Control check box, then click Apply.
- Click OK.
SAN configuration
If you are storing the database and vDisks on a SAN, use local system accounts for the Stream Service. Unlike a Windows network share, creating special Service Account Credentials to guarantee access to your data is not necessary to guarantee access to your data.
Usually, a SAN configuration allows setting up as if the database and vDisks were stored locally on the Citrix Provisioning server.