System requirements

When planning your installation, Citrix recommends that you allow at least an additional 2 GB of RAM for StoreFront over and above the requirements of any other products installed on the server. The subscription store service requires a minimum of 5 MB disk space, plus approximately 8 MB for every 1000 application subscriptions. All other hardware specifications must meet the minimum requirements for the installed operating system.

Citrix has tested and provides support for StoreFront installations on the following platforms:

• Windows Server 2016 Datacenter and Standard editions
• Windows Server 2012 R2 Datacenter and Standard editions
• Windows Server 2012 Datacenter and Standard editions
• Windows Server 2008 R2 Service Pack 1 Enterprise and Standard editions

Upgrading the operating system version on a server running StoreFront is not supported. Citrix recommends that you install StoreFront on a new installation of the operating system. All the servers in a multiple server deployment must run the same operating system version with the same locale settings.

StoreFront server groups containing mixtures of operating system versions and locales are not supported. StoreFront server groups can contain a maximum of six servers. However, from a capacity perspective based on simulations, there is no advantage of server groups containing more than three servers. Ideally, all servers in a server group should reside in the same location (data center, availability zone), but server groups can span locations within the same region provided that links between servers in the group meet minimum latency criteria. See Scalability.

Microsoft Internet Information Services (IIS) and Microsoft .NET Framework are required on the server. If either of these prerequisites is installed but not enabled, the StoreFront installer enables them before installing the product. Windows PowerShell and Microsoft Management Console, which are both default components of Windows Server, must be installed on the web server before you can install StoreFront. The relative path to StoreFront in IIS must be the same on all the servers in a group.

The StoreFront installer will add the IIS features it requires. If you pre-install these features, below is the required list:

On all platforms:

• Web-Static-Content
• Web-Default-Doc
• Web-Http-Errors
• Web-Http-Redirect
• Web-Http-Logging
• Web-Mgmt-Console
• Web-Scripting-Tools
• Web-Windows-Auth
• Web-Basic-Auth
• Web-AppInit

On Windows Server 2008 R2:

• Web-Asp-Net
• As-Tcp-PortSharing

On Windows Server 2012 R2:

• Web-Asp-Net45
• Net-Wcf-Tcp-PortSharing45

On Windows Server 2016

• Web-Asp-Net45
• Net-Wcf-Tcp-PortSharing45

StoreFront uses the following ports for communications. Ensure your firewalls and other network devices permit access to these ports.

• TCP ports 80 and 443 are used for HTTP and HTTPS communications, respectively, and must be accessible from both inside and outside the corporate network.
• TCP port 808 is used for communications between StoreFront servers and must be accessible from inside the corporate network.
• A TCP port randomly selected from all unreserved ports is used for communications between the StoreFront servers in a server group. When you install StoreFront, a Windows Firewall rule is configured enabling access to the StoreFront executable. However, since the port is assigned randomly, you must ensure that any firewalls or other devices on your internal network do not block traffic to any of the unassigned TCP ports.
• TCP port 8008 is used by Citrix Receiver for HTML5, where enabled, for communications from local users on the internal network to the servers providing their desktops and applications.

StoreFront supports both pure IPv6 networks and dual-stack IPv4/IPv6 environments.

Infrastructure requirements

Citrix has tested and provides support for StoreFront when used with the following Citrix product versions.

Citrix server requirements

StoreFront stores aggregate desktops and applications from the following products.

• XenApp and XenDesktop 7.15
• XenApp and XenDesktop 7.14
• XenApp and XenDesktop 7.13
• XenApp and XenDesktop 7.12
• XenApp and XenDesktop 7.11
• XenApp and XenDesktop 7.9
• XenApp and XenDesktop 7.8
• XenApp and XenDesktop 7.7
• XenApp and XenDesktop 7.6
• XenApp and XenDesktop 7.5
• XenDesktop 7.1
• XenDesktop 7
• XenApp 6.5
• XenMobile 9.0 or App Controller 9.0

NetScaler Gateway requirements

The following versions of NetScaler Gateway can be used to provide access to StoreFront for users on public networks.

• Citrix Gateway 12.x
• NetScaler Gateway 12.0
• NetScaler Gateway 11.x
• NetScaler Gateway 10.5
• NetScaler Gateway 10.1
• Access Gateway 10 Build 69.4 (the version number is displayed at the top of the configuration utility)

Citrix Receiver for HTML5 requirements

If you plan to enable users to access desktops and applications using Citrix Receiver for HTML5 running on Receiver for Web sites, the following additional requirements apply.

For internal network connections, Citrix Receiver for HTML5 enables access to desktops and applications provided by the following products.

• XenApp and XenDesktop 7.15
• XenApp and XenDesktop 7.14
• XenApp and XenDesktop 7.13
• XenApp and XenDesktop 7.12
• XenApp and XenDesktop 7.11
• XenApp and XenDesktop 7.9
• XenApp and XenDesktop 7.8
• XenApp and XenDesktop 7.7
• XenApp and XenDesktop 7.6
• XenApp and XenDesktop 7.5
• XenDesktop 7.1
• XenDesktop 7
• XenApp 6.5 Feature Pack 2
• XenApp 6.5 Feature Pack 1 for Windows Server 2008 R2 (requires Hotfix XA650R01W2K8R2X64051, which is available at http://support.citrix.com/article/CTX135757)

For remote users outside the corporate network, Citrix Receiver for HTML5 enables access to desktops and applications through the following versions of NetScaler Gateway.

• Citrix Gateway 12.x
• NetScaler Gateway 12.0
• NetScaler Gateway 11.x
• NetScaler Gateway 10.1
• Access Gateway 10 Build 71.6014 (the version number is displayed at the top of the configuration utility)

For users connecting through NetScaler Gateway, Citrix Receiver for HTML5 enables access to desktops and applications provided by the following products.

• XenApp and XenDesktop 7.15
• XenApp and XenDesktop 7.14
• XenApp and XenDesktop 7.13
• XenApp and XenDesktop 7.12
• XenApp and XenDesktop 7.11
• XenApp and XenDesktop 7.9
• XenApp and XenDesktop 7.8
• XenApp and XenDesktop 7.7
• XenApp and XenDesktop 7.6
• XenApp and XenDesktop 7.5
• XenDesktop 7.1
• XenDesktop 7
• XenApp 6.5

User device requirements

StoreFront provides a number of different options for users to access their desktops and applications. Citrix Receiver users can either access stores through Citrix Receiver or use a web browser to log on to a Citrix Receiver for Web site for the store. For users who cannot install Citrix Receiver, but have an HTML5-compatible web browser, you can provide access to desktops and applications directly within the web browser by enabling Citrix Receiver for HTML5 on your Citrix Receiver for Web site.

Users with non-domain-joined desktop appliances access their desktops through their web browsers, which are configured to access Desktop Appliance sites. In the case of domain-joined desktop appliances and repurposed PCs running the Citrix Desktop Lock, along with older Citrix clients that cannot be upgraded, users must connect through the XenApp Services URL for the store.

If you plan to deliver offline applications to users, the Offline Plug-in is required in addition to Citrix Receiver for Windows. If you want to deliver Microsoft Application Virtualization (App-V) sequences to users, a supported version of the Microsoft Application Virtualization Desktop Client is also required. For more information, see Managing Streamed Applications. Users cannot access offline applications or App-V sequences through Citrix Receiver for Web sites.

It is assumed that all user devices meet the minimum hardware requirements for the installed operating system.

Requirements for Citrix Receiver-enabled stores

The following Citrix Receiver versions can be used to access StoreFront stores from both internal network connections and through NetScaler Gateway. Connections through NetScaler Gateway can be made using both the NetScaler Gateway Plug-in and/or clientless access. Citrix Receiver for Windows 4.3 is the minimum version required to receive the full StoreFront unified Citrix Receiver experience. See Support for the unified Citrix Receiver experience.

• Citrix Receiver for Chrome 2.x
• Citrix Receiver for HTML5 2.x
• Citrix Receiver for Mac 12.x
• Citrix Receiver for Windows 4.x
• Citrix Receiver for Linux 13.x

Requirements for access to stores through Citrix Receiver for Web sites

To access Citrix Receiver for Web sites from both internal network connections and through Citrix Gateway, use latest version of the following browsers:

On Windows

• Internet Explorer 11
• MS Edge (based on Chromium)*
• Google Chrome
• Mozilla Firefox

* Microsoft Edge (based on Chromium) is supported on Windows 10 only.

Note:

Citrix support is dependent on the official Microsoft support/extended support for the underlying OS and browser versions running on those OSs.

On Mac

• Safari
• Google Chrome
• Mozilla Firefox

On Linux

• Google Chrome
• Mozilla Firefox

Connections through Citrix Gateway can be made using the Citrix Gateway plug-in, ICA proxy or clientless VPN (cVPN). Additionally, specific versions of Citrix Gateway are required to enable connections from outside the corporate network. For more information, see Infrastructure requirements.

Requirements for access to desktops and applications through Receiver for HTML5

The following operating systems and web browsers are recommended for users to access desktops and applications using Receiver for HTML5 running on Receiver for Web sites. Both internal network connections and connections through NetScaler Gateway are supported. However, for connections from the internal network, Receiver for HTML5 only enables access to resources provided by specific products. Additionally, specific versions of NetScaler Gateway are required to enable connections from outside the corporate network. For more information, see Infrastructure requirements.

• Browsers
  • Microsoft Edge Legacy
  • Internet Explorer 11 and 10 (HTTP connections only)
  • Safari 7
  • Safari 6
  • Google Chrome
  • Mozilla Firefox
• Operating systems
  • Windows RT
  • Windows 10 (32-bit and 64-bit editions)
  • Windows 8.1 (32-bit and 64-bit editions)
  • Windows 8 (32-bit and 64-bit editions)
  • Windows 7 Service Pack 1 (32-bit and 64-bit editions)
  • Windows Vista Service Pack 2 (32-bit and 64-bit editions)
  • Windows Embedded XP
  • Mac OS X 10.10 Yosemite
  • Mac OS X 10.9 Mavericks
  • Mac OS X 10.8 Mountain Lion
  • Mac OS X 10.7 Lion
  • Mac OS X 10.6 Snow Leopard
  • Google Chrome OS 48
  • Google Chrome OS 47
  • Ubuntu 12.04 (32-bit)

Requirements for access to stores through Desktop Appliance sites

The following Citrix Receiver, operating system, and web browser combinations are recommended for users to access Desktop Appliance sites from the internal network. Connections through NetScaler Gateway are not supported.

• Citrix Receiver for Windows 4.5, Citrix Receiver for Windows 4.4, Citrix Receiver for Windows 4.3, and Citrix Receiver for Windows 4.2.x, and Citrix Receiver for Windows 4.1
  • Windows 8.1 (32-bit and 64-bit editions)
    • Internet Explorer 11 (32-bit mode)
  • Windows 8 (32-bit and 64-bit editions)
    • Internet Explorer 10 (32-bit mode)
  • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
    • Internet Explorer 9 (32-bit mode)
    • Internet Explorer 8 (32-bit mode)
  • Windows Embedded XP
    • Internet Explorer 8 (32-bit mode)
• Citrix Receiver for Windows 4.0 or Citrix Receiver for Windows 3.4
  • Windows 8 (32-bit and 64-bit editions)
    • Internet Explorer 10 (32-bit mode)
  • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
    • Internet Explorer 9 (32-bit mode)
    • Internet Explorer 8 (32-bit mode)
  • Windows Embedded XP
    • Internet Explorer 8 (32-bit mode)
• Citrix Receiver for Windows Enterprise 3.4
  • Windows 7 Service Pack 1 (32-bit and 64-bit editions), Windows Embedded Standard 7 Service Pack 1, or Windows Thin PC
    • Internet Explorer 9 (32-bit mode)
    • Internet Explorer 8 (32-bit mode)
  • Windows Embedded XP
    • Internet Explorer 8 (32-bit mode)
• Citrix Receiver for Linux 12.1
  • Ubuntu 12.04 (32-bit)
    • Mozilla Firefox 27

Requirements for access to stores through XenApp Services URLs

All the versions of Citrix Receiver listed above can be used to access StoreFront stores with reduced functionality through XenApp Services URLs. In addition, you can use the older client that does not support other access methods - Citrix Receiver for Linux 12.0 (internal network connections only) - to access stores through XenApp Services URLs. Connections through NetScaler Gateway, where supported, can be made using both the NetScaler Gateway Plug-in and clientless access.

Smart card requirements

Requirement for using Citrix Receiver for Windows 4.X with smart cards

Citrix tests for compatibility with the U.S. Government Dept. Of Defense Common Access Card (CAC), U.S. National Institute of Standards and Technology Personal Identity Verification (NIST PIV) cards, and some USB smart card tokens. You can use contact card readers that comply with the USB Chip/Smart Card Interface Devices (CCID) specification and are classified by the German Zentraler Kreditausschuss (ZKA) as Class 1 smart card readers. ZKA Class 1 contact card readers require that users insert their smart cards into the reader. Other types of smart card readers, including Class 2 readers (which have keypads for entering PINs), contactless readers, and virtual smart cards based on Trusted Platform Module (TPM) chips, are not supported.

For Windows devices, smart card support is based on Microsoft Personal Computer/Smart Card (PC/SC) standard specifications. As a minimum requirement, smart cards and card readers must be supported by the operating system and have received Windows Hardware Certification.

For more information about Citrix-compatible smart cards and middleware, see Smart cards in the XenApp and XenDesktop documentation, and http://www.citrix.com/ready.

Requirements for using Desktop Appliance sites with smart cards

For users with desktop appliances and repurposed PCs running the Citrix Desktop Lock, Citrix Receiver for Windows Enterprise 3.4 is required for smart card authentication. On all other Windows devices, Citrix Receiver for Windows 4.1 can be used.

Requirements for authentication through NetScaler Gateway

The following versions of NetScaler Gateway can be used to provide access to StoreFront for users on public networks authenticating with smart cards.

• NetScaler Gateway 11.x
• NetScaler Gateway 10.5
• NetScaler Gateway 10.1
• Access Gateway 10 Build 69.4 (the version number is displayed at the top of the configuration utility)