Tag Archives: Citrix Cloud Gateway

Configuring Citrix CloudGateway Express / Storefront services 1.1 for native SQL authentication.

One of my quibbles with Cloud Gateway is the database connection method. By default (and as per the edocs) CloudGateway Express will attempt to connect to the backed SQL database as the computer account on which Storefront services is running.

Citrix recommend you create a local user group on the SQL server and place the computer account in here… Wait.. what?

If you are running an SQL cluster, this will create a bit of a headache, as in a database failover event, the local group may not exist on the node onto which the cluster has failed to. Running into this event first hand, I decided to investigate how to change this connection string to an SQL account.

My first clue, came in the form of the Citrix edocs, with this document here, Citrix describe how to configure database failover for the store service. The connection string is stored in C:inetpubwwwrootCitrix<storename>web.config

Now that we know where the connection string lives, it should simply be a case of modifying this string to suit ourselves!

Open the above file, and search for “DazzleResources.DataSource

Paste in the below, replacing the string and modify the bolded items below:

<add name="DazzleResources.DataSource" connectionString="Integrated Security=SSPI;server=servernameinstance ; Database=cloudgateway ; user id=sa ;Password=Password;Trusted_Connection=False" providerName="System.Data.SqlClient" />

Once complete, restart the Receiver Storefront server. Then open the console again. You should now see the updated connection string (in clear text sadly) on the store:

Thats it!

Note: theres no reason you couldnt use an AD account for this either. But the plain text view of this string sucks to be honest.

Location of the Default.ica file and services changes in Citrix Storefront Services 1.1.

Just a quick friday post as I work through my list!

As quite a change  from Web Interface to Citrix CloudGateway Express, the Receiver for web (aka web service) now shares the same default ICA file as it’s store’s (aka pnagent services site) equivalent. Previously you could (& needed to) configure a web site and a services site for web based access and receiver access separately.

This is an interesting change, if you need the same configuration for both receiver users and web access you are set! much less work and configuration. But if you do wish to use two seperate configurations depending on whether the user is using the receiver or web access you now need two stores. Double configuration, but then that was the case before hand!

So with that in mind, you will find the ica file in the Store, not the web service. Below is a quick guide to find it.

browse to:


Where *(store) is the name you specified of the store.

and there’s the ICA file in all its glory.