Citrix (Terminal services) UserID Deployment

ipohlschneider — Wed, 27 Nov 2024 21:04:57 GMT

Hello everyone,
I would like to deploy UserID Terminalservices Agent in a Citrix environment.
There are approx 30 servers deployed from the same Master Image.
I have TA successfully running on dedicated (non-Citrix) Terminalservers with Certificates generated by a PKI-root within the firewalls. Each TS has its own cert signed by that Root with the DNS-attribute (SAN) set to the FQDN of the TA server.
This works fine.

For the Citrix Environment I would have to generate a cert with all the FQDNs in the SAN certificate (as the certificate needs to be included in the Master-Image TA-Installation) & configure each active Terminalserver VM as a Terminal Services Agent in the UID-config of the firewall.

But the UI only allows for 5 DNS-SAN entries to be added.

Is there any way I can tackle the problem?

AFAIK the DNS name is relevant so I cannot simply put in a generic thing there right?

Grateful for any help as this currently hinders my ability to move polcies to User-Based due to identification in citrix-TS missing

Thanks

topic Citrix (Terminal services) UserID Deployment in Next-Generation Firewall Discussions

Citrix (Terminal services) UserID Deployment