ADMX Viewer
FullArmor.Policies.8792664D_EBD1_45F9_815F_65014D0224E7• Machine

Configure SSL for the Citrix VDA

Download ADMX

Configure SSL for the Citrix VDA If you enable this policy setting, you can set options for assigning an SSL to the Citrix VDA. If you disable this policy than SSL assignment will be explicitly disabled. If you do not configure this policy, then the VDA SSL script will be skipped. Certificate Thumbprint: Enter the certificate thumbprint you want to be assigned to the VDA in this field. Thumbprints are in the following format: 9fe2c86fc2ca0fffe935d116e568010223fa9881 If you make this field blank the script will attempt to auto-assign a certificate. Auto-assignment is done via 2 methods: 1) If the DNS Names List (as found in Subject Alternative Name) has a matching computer name. 2) If a certificate has a Subject Name in the format: CN=$FQDN, Note the comma at the end of the Subject Name and "CN=" at the start. A computer with the name "W2016" and a domain of "contoso.com" would have the following name: CN=W2016.contoso.com," SSL Port: The port you want to assign the VDA SSL service (default = 443). Minimum SSL Version: The minimum SSL Version you want to allow for your certificate (default = TLS_1.0). SSL Cipher Suite: A predefined cipher suite for use with your certificate (default = ALL) See here for more information: https://support.citrix.com/article/CTX220062

Policy Details

Policy Name
POL_VDASSL
Registry Key
Software\Policies\Login Consultants\BISF
Value Name
LIC_BISF_POL_VDASSL
Supported On
At least Windows Vista
Available Languages
en-us

Configuration Elements

Minimum SSL Version

Type: enum

Allowed Values
  • TLS_1.0 TLS_1.0
  • TLS_1.1 TLS_1.1
  • TLS_1.2 TLS_1.2
  • SSL_3.0 SSL_3.0

SSL Cipher Suite

Type: enum

Allowed Values
  • ALL ALL
  • GOV GOV
  • COM COM

(Optional) Certificate Thumbprint:

Type: text

SSL Port:

Type: text

Default: 443