Citrix Presentation Server™ Client for Macintosh Administrator’s Guide Citrix Presentation Server™ Client for Macintosh, Version 10.
Copyright and Trademark Notice Use of the product documented in this guide is subject to your prior acceptance of the End User License Agreement. Copies of the End User License Agreement are included in the root directory of the Citrix Presentation Server CD-ROM and in the root directory of the Components CD-ROM. Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted.
C ONTENTS Contents Chapter 1 Before You Begin Who Should Use this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7 How to Use this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7 Accessing Product Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8 Chapter 2 Introducing the Citrix Presentation Server Client for Macintosh Overview . . . . . . . . . . . . . . . . .
Client for Macintosh Administrator’s Guide Creating a Basic Connection File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 To create a connection file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Identifying a Desktop or Application to Connect to . . . . . . . . . . . . . . . . . . . . . . . . 24 To configure a default master browser server for all connections. . . . . . . . . . .
Contents Chapter 6 5 Configuring the User Interface Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Window Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 To configure the default window properties . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 To specify the window properties for a particular connection . . . . . . . . . . . . .
Client for Macintosh Administrator’s Guide Connecting to a Server through a Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Using Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 Before You Begin Who Should Use this Guide This guide is for system administrators responsible for installing, configuring, deploying, and maintaining the Client for Macintosh.
Client for Macintosh Administrator’s Guide Topic Contents Configuring Connections to Servers and Applications Describes how to configure connection properties and device mappings for the client Running Applications, Accessing Desktops, Describes how to use connection files to and Working in Sessions open files in published applications and access remote server desktops Configuring the User Interface Describes how to customize the appearance and behavior of client sessions Improving Performance Gi
1 Before You Begin 9 Citrix Presentation Server, available from the Knowledge Center at http:// support.citrix.com. Note: To provide feedback about the documentation, go to http:// www.citrix.com and click Support > Knowledge Center > Product Documentation. To access the feedback form, click the Submit Documentation Feedback link.
Client for Macintosh Administrator’s Guide
2 Introducing the Citrix Presentation Server Client for Macintosh Overview When connected to a server, the Client for Macintosh provides features that make remote computing just like running applications on a local desktop. Topics covered in this section include: • The client architecture • Features of the Client for Macintosh You use the client to access remote servers and applications available on those servers, even those running on operating systems other than Macintosh OS X.
Client for Macintosh Administrator’s Guide Figure showing the Client for Macintosh’s place in a Citrix Presentation Server system Using the Client There are two ways of using the client to gain access to Presentation Server applications and content • You can use the Web Interface to connect through a standard Web browser, or, in the case of Citrix Web Interface for Microsoft Sharepoint, a standard SharePoint environment.
2 Introducing the Citrix Presentation Server Client for Macintosh 13 do is navigate to a certain page, enter their credentials if required, and click an icon in the list of available resources to start a session. • You can use the ICA Client Editor to configure a connection to a particular application, server, or group of servers. The ICA Client Editor saves this information as a connection file.
Client for Macintosh Administrator’s Guide Connection Features • Automatic reconnection. If the client disconnects from a server unexpectedly, it attempts to reconnect automatically. See “Reconnecting to Servers after a Disconnection” on page 40 for more information. • Multiple session support. Users can run multiple connections concurrently. • Alternate addresses when connecting to servers across firewalls.
2 Introducing the Citrix Presentation Server Client for Macintosh 15 Note: The client does not support cursor feedback. This means, for example, that if an administrator is controlling what is happening in the session window, the user might see a menu open, but the cursor on that user’s computer would not move to track the administrator’s mouse movement. • Printing.
Client for Macintosh Administrator’s Guide • Secure Sockets Layer (SSL) support. SSL provides server authentication, encryption of the data stream, and message integrity checks. See “Integrating the Client with the Secure Gateway or SSL Relay” on page 59. • Transport Layer Security encryption. As an alternative to Secure Sockets Layer (SSL) 3.0, the client also supports Transport Layer Security (TLS) 1.0. See “Configuring SSL/TLS” on page 60. • NDS support.
2 Introducing the Citrix Presentation Server Client for Macintosh 17 • SpeedScreen Latency Reduction. SpeedScreen Latency Reduction accelerates the display of text input on the client computer and provides visual feedback to show that input is being processed. See “Reducing Display Latency” on page 53. • Business recovery support. The client supports multiple server sites with different addresses for the same published application name. See “Configuring Business Recovery and Server Groups” on page 27.
Client for Macintosh Administrator’s Guide
3 Deploying the Client for Macintosh Overview This section describes how to install and deploy the Client for Macintosh. Topics covered in this section include: • System requirements • Installing the client • Uninstalling the client System Requirements Users need equipment that meets these minimum requirements to run this release of the client: • Either an Intel-based Macintosh running Mac OS X Version 10.4 or later, or a PowerPC-based Macintosh running Mac OS X 10.
Client for Macintosh Administrator’s Guide Macintosh desktop. This can happen automatically after downloading the .zip file, if your browser is set up to do so. 2. Double-click the Citrix icon and follow the instructions. (After installation, you might also want to put the client and ICA Client Editor in your Dock so they are easily available.) Uninstalling the Client for Macintosh To uninstall the client, delete the folder containing the client and ICA Client Editor.
4 Configuring Connections to Servers and Applications Overview This section describes how to create and edit connections between the client and server.
Client for Macintosh Administrator’s Guide You can change the following aspects of the client connection: • The network protocol used to search for servers. See “Identifying a Desktop or Application to Connect to” on page 24. • The servers the client can connect to. See “Configuring Business Recovery and Server Groups” on page 27. • Client device mapping, which enables applications running on a server to access devices connected to the client.
4 Configuring Connections to Servers and Applications 23 Creating a Basic Connection File To create a connection file 1. In your client installation folder, open Citrix ICA Client Editor. The ICA Client Editor opens at the Network Connection pane. 2. To connect to a desktop, choose Server, or to connect to a published application, choose Published Application. 3.
Client for Macintosh Administrator’s Guide Identifying a Desktop or Application to Connect to You need to take the following two steps to find the desktop or application you want to use. 1. Identify a server that acts as the master browser. This server contains the list of available desktops and applications and their locations. 2. View the list and choose the desktop or application you want. The master browser then directs the client to the requested desktop or application.
4 Configuring Connections to Servers and Applications 25 only with servers running Presentation Server in interoperability mode. • 3. SSL/TLS+HTTPS. The client communicates with the server using the SSL/TLS protocol. This protocol is described in more detail in “Integrating the Client with the Secure Gateway or SSL Relay” on page 59. Click Add. You can specify groups of servers for each protocol. See “Configuring Business Recovery and Server Groups” on page 27. 4.
Client for Macintosh Administrator’s Guide • If the default is set up for normal connections (that is, not using SSL/ TLS), the Network Protocol > Use Default check box is selected and the list of protocols displays TCP/IP or TCP/IP+HTTP Choose the protocol you want to use to communicate with the server from the drop-down list. The options are: • TCP/IP. The client uses UDP (User DataGram Protocol) • TCP/IP+HTTP. The client uses the HTTP protocol • SSL/TLS+HTTPS.
4 Configuring Connections to Servers and Applications 27 Configuring Business Recovery and Server Groups Business recovery provides consistent connections to published applications in the event of a master browser server disruption. You can define up to three groups of servers: a primary and two backups. Each group can contain up to five servers.
Client for Macintosh Administrator’s Guide Mapping Client Devices The client supports client device mapping for connections to servers. Client device mapping allows a remote application running on the server to access devices attached to the local client. This section includes more information about: • Mapping client drives • Mapping client COM ports • Mapping client audio For information regarding mapping client printers, see “Printing” on page 39.
4 Configuring Connections to Servers and Applications 29 Write column, icons display each mapped drive that is enabled for use and what type of access users have to the drive. Items that are no longer available do not display a folder icon. Icons that include a question mark indicate that a drive mapping has “query” permissions. This is a security feature that means when any application tries to read from or write to the folder, a dialog box appears asking whether you want to allow or deny access.
Client for Macintosh Administrator’s Guide 2. From the Connection Properties tab, choose Turn Drive Mapping Off for this Server. 3. Click Save. To ensure that client drive mapping works with filenames containing accented characters (for example, é), set the client DOS code page to 1252. You can do this by changing a setting in the server registry. Caution: Using Registry Editor incorrectly can cause serious problems that require you to reinstall the operating system.
4 Configuring Connections to Servers and Applications 31 Macintosh serial ports do not provide all the control signal lines that are used by Windows applications. The DSR (Data Set Ready), DCD (Device Carrier Detect), RI (Ring Indicator), and RTS (Request To Send) lines are not provided. Windows applications that rely on these signals for hardware handshaking and flow control may not work.
Client for Macintosh Administrator’s Guide Note: Client audio mapping is not available when you connect to computers running Presentation Server for UNIX. Three different audio quality settings are available. The higher the audio quality, the more bandwidth is required to transfer the audio data. Higher quality audio also uses more server CPU to process. You can set the audio quality or turn client audio mapping on or off on the server.
4 Configuring Connections to Servers and Applications 33 Opening a File in a Specific Application You can assign certain files and file types to specific applications so that the appropriate published application starts automatically when you open a file on your computer. For example, while working on files using a published Windows application on a client, you can work on PC files that you can save to the Macintosh hard disk.
Client for Macintosh Administrator’s Guide Configuring the Client Client Drive Mapping For file type association to work, a file must be within a folder that can be accessed through client drive mapping. For example, if client drive mapping is enabled for the C Drive, which is always mapped to the current user's Home directory, file type association will work for all files within the Home directory. For more information about drive mapping, see “Mapping Client Devices” on page 28.
4 Configuring Connections to Servers and Applications 35 8. Click OK to confirm. To remove or change the association, choose the association to make the Remove and Change buttons active and then click the relevant button. 9. Click Save to exit and confirm the association you have just set up. You can now open files in an associated application by dragging and dropping them onto the client.
Client for Macintosh Administrator’s Guide
5 Running Applications, Accessing Desktops, and Working in Sessions Overview This section describes how to use the client.
Client for Macintosh Administrator’s Guide • Open the client. From the File menu, choose Open Connection and choose the connection file you want to open. • Open the ICA Client Editor. From the File menu, choose Open and choose the connection file you want to open. On the Network Connection pane, click Connect. • If you configure file type association, you can start an ICA session by dragging the file onto the ICA Client Editor icon.
5 Running Applications, Accessing Desktops, and Working in Sessions 39 Printing You can access printers connected to client devices during an ICA session. When a server is configured to allow client printer mapping, applications running remotely on the server can print to any printer that can be used from locally running applications. For information about configuring printer mapping, see the Citrix Presentation Server Administrator’s Guide.
Client for Macintosh Administrator’s Guide Reconnecting to Servers after a Disconnection You can be disconnected from ICA sessions because of unreliable networks, highly variable network latency, or range limitations of wireless devices. With the automatic client reconnection feature, the client can detect unintended disconnections and automatically reconnect users to the affected sessions. When this feature is enabled on a machine running Presentation Server, you do not have to reconnect manually.
5 Running Applications, Accessing Desktops, and Working in Sessions 41 Making Keystrokes with Macintosh Keyboards Remote sessions recognize most Macintosh keyboard combinations for text input, such as Option-G to input the copyright symbol ©. However some keystrokes the user makes during a session do not appear on the remote application or desktop, and instead are interpreted by the Macintosh operating system.
Client for Macintosh Administrator’s Guide PC key Macintosh options CTRL+character key Command–character key (e.g. Command-C) Control–character key (e.g. Control-C) CTRL+special key Control–special key (e.g. Control-F4) Command–Control–special key (e.g.
5 Running Applications, Accessing Desktops, and Working in Sessions PC key Macintosh options INSERT Option-Escape I 43 Command-Help Choose Keyboard > Send Special Key > Insert NUM LOCK Clear Fn-6 PAGE DOWN Page Down Fn–Down Arrow PAGE UP Page Up Fn–Up Arrow SPACEBAR Option-Escape S Choose Keyboard > Send Special Key > Space TAB Option-Escape T Choose Keyboard > Send Special Key > Tab About Client Keyboard Support The client has two keyboard modes: Enhanced keyboard support, for extra option
Client for Macintosh Administrator’s Guide PC Key or action Macintosh options INSERT 0 (zero) on the numeric keypad; Num Lock must be off Option-Help DELETE Decimal point on the numeric keypad; Num Lock must be off Clear F1 to F9 Option 1 to 9 on numeric keypad Option-Escape 1 to 9 F10 Option 0 (zero) on numeric keypad Option-Escape 0 F11 Option minus sign on numeric keypad Option-Escape hyphen F12 Option plus sign on numeric keypad Option-Escape equal sign ALT+TAB Option-Tab (This can b
6 Configuring the User Interface Overview This section discusses the user interface settings you can configure to make connections work according to personal taste and to make them more efficient. It includes the following topics: • Window properties • Showing and hiding the Macintosh menu bar and Dock • Mapping audio and windows alert beeps • Hotkeys • Japanese hotkeys and other keyboard settings Window Properties You can change the maximum size and color depth of the session window.
Client for Macintosh Administrator’s Guide The maximum window size is determined by the server. • 4. Choose the window color depth to display. Click Save. To specify the window properties for a particular connection 1. In the ICA Client Editor, open the connection file you want to edit. 2. From the Window tab, clear Use Default and enter your own settings: 3.
6 Configuring the User Interface 47 To display the menu bar and Dock only when the mouse is at the edge of the screen. Do one of the following: • In the ICA Client Editor, choose Default Settings > Connection Properties > Windows and Sounds and choose the Display the Macintosh Dock and menu bar automatically. • Use the standard Macintosh method from the Apple menu by choosing Dock > Dock Preferences > Automatically hide and show the Dock.
Client for Macintosh Administrator’s Guide • Option-Tab (to cycle through open applications—equivalent to ALT+TAB on PC) • Option-Shift-Tab (to cycle through open applications in reverse order— equivalent to ALT+SHIFT+TAB on PC) • Latency reduction hotkey (to override the selected SpeedScreen mode—see “Reducing Display Latency” on page 53 for more information) To change the default hotkeys 1. Do one of the following: • From the ICA Client Editor Options menu, choose Default Settings.
6 Configuring the User Interface This key combination Has this effect Control-Shift-L Katakana input mode Control-Shift–Semi-colon Half-width alphanumeric input mode 49 There may be a conflict if the remote application uses the same hotkeys as one of the hotkeys listed above. Note: When you connect to a Japanese server, you may experience difficulty generating Japanese keystrokes using the keyboard. You can use the on-screen buttons of the Input Method Editor (IME) using the mouse.
Client for Macintosh Administrator’s Guide Solving Japanese Keyboard Problems If you are using IME version 2000 or later, the Kanji Bango hotkey and the Caps Lock key may not work with the default settings. If you are using SpeedScreen (Local Text Echo) and your server has two or more input locales, you may experience a problem with 106 key Japanese keyboards with US keyboard layout. See “Reducing Display Latency” on page 53.
7 Improving Performance Overview This section describes ways you can improve the performance of the client including: • Compressing data • Caching images • Reducing display latency It also gives tips for improving performance over low-bandwidth connections. Compressing Data Data compression reduces the amount of data that needs to be transferred over the connection but requires additional processor resources to compress and decompress the data.
Client for Macintosh Administrator’s Guide Important: Although you can configure default disk cache settings, disk caching does not happen unless you turn it on for a particular connection file. Note: In addition, the client uses SpeedScreen Browser Acceleration, a feature that also improves performance when you display Web pages containing .jpeg and .gif images in Microsoft Internet Explorer. SpeedScreen Browser Acceleration operates automatically and requires no configuration.
7 Improving Performance 53 Reducing Display Latency Over high latency connections, you might experience significant delays between the time when you type text at the keyboard and when it is displayed on the screen. Similarly, there may be a delay between clicking a mouse button and the screen displaying any visible feedback. This can result in you retyping text or making several unnecessary mouse clicks. The client’s SpeedScreen Latency Reduction feature lessens the impact on display of high latency.
Client for Macintosh Administrator’s Guide Note: You can override the selected SpeedScreen mode for the current session by using the Latency Reduction hotkey. See “Configuring Hotkeys” on page 47 for details. Improving Performance Over a Low-Bandwidth Connection If you have a low-bandwidth connection, such as a modem, there are a number of changes that you can make to improve performance: • Change your client configuration.
7 Improving Performance 55 • Reduce the window size. Change the window size to the minimum size you can comfortably use. See “Window Properties” on page 45. • Turn client audio mapping off. If you do not need sound, turn client audio mapping off. See “Mapping Client Audio” on page 31. Changing the Way You Use the Client ICA technology is highly optimized and typically does not have high CPU and bandwidth requirements.
Client for Macintosh Administrator’s Guide
8 Integrating the Client with Security Solutions Overview This section describes how you can integrate the client with a range of security technologies, including proxy servers, firewalls, and Secure Sockets Layer/ Transport Layer Security (SSL/TLS) based systems. This section assumes you have a working knowledge of these technologies.
Client for Macintosh Administrator’s Guide To configure a default SOCKS or Secure Proxy Server 1. Do one of the following: • From the ICA Client Editor Options menu, choose Default Settings. • Click Default Settings in the ICA Client Editor. 2. On the Making a Connection > Server Location pane, click Firewalls to open the Firewall Settings dialog box. 3. Choose the proxy type (or No Proxy for a direct connection.) 4.
8 Integrating the Client with Security Solutions 2. On the Making a Connection > Server Location pane, click Firewalls. 3. Choose Use Web browser proxy settings. 4. Click OK, then Save. 59 Integrating the Client with the Secure Gateway or SSL Relay You can integrate the client with the Citrix Secure Gateway or an SSL Relay service.
Client for Macintosh Administrator’s Guide • From the ICA Client Editor Options menu, choose Default Settings. • Click Default Settings in the ICA Client Editor. 2. On the Making a Connection > Server Location pane, click Firewalls to open the Firewalls Settings dialog box. 3. Type the fully qualified domain name of the Secure Gateway server and the port number, if not 443. 4. Click OK, then Save. To specify a Secure Gateway server (Relay mode) for a connection file 1.
8 Integrating the Client with Security Solutions 61 Presentation Server documentation and SSL Relay documentation for details. 2. Install the equivalent root certificate on the client. See “Configuring SSL/ TLS” on page 60. 3. Configure a connection, or all connections, to connect to the server using SSL/TLS. See “Configuring SSL/TLS” on page 60.
Client for Macintosh Administrator’s Guide To configure the default SSL/TLS settings 1. Do one of the following: • From the ICA Client Editor Options menu, choose Default Settings. • Click Default Settings in the ICA Client Editor. 2. On the Making a Connection > Server Location pane, at Network Protocol, choose SSL/TLS+HTTPS. The Address List changes to show available SSL/TLS-enabled servers. 3. If the address list does not include the server you want, click Add.
8 Integrating the Client with Security Solutions 63 To specify the alternate server address setting for a connection file 1. In the ICA Client Editor, open the connection file you want to edit. 2. From the Security tab, clear the Proxy > Use Default check box. 3. Click Firewall Settings. 4. Choose the Use alternate address for firewall connection check box and click OK. 5. Click Save. Using Encryption Encryption increases the security of your connection.
Client for Macintosh Administrator’s Guide
I NDEX Index A A4 paper 39 alert beep 47 alternate firewall address 62–63 application configuring connection to 24 running remote 37–39 specifying properties 38 application properties 38 Application tab 38 associating file extensions, see file type association audio, see client audio authentication 23 auto hide menu bar and Dock 46 auto proxy server detection configuring default setting 58 described 58 turning on/off 58 auto reconnect 40 auto-client proxy detection, see auto proxy server detection B band
Client for Macintosh Administrator’s Guide default settings auto proxy server detection 58 business recovery server group 27 disk caching 52 encryption 63 firewall alternate address 62–63 hotkeys 48 keyboard layout 49 keyboard type 49 mapping drives 28 Secure Gateway 60 Secure Proxy Server 58 SOCKS Proxy Server 58 SSL/TLS+HTTPS 62 window properties 45 windows alert beep 47 deploying the client 19 desktop, viewing remote server 37 devices, mapping 28 direct connection 58 disabling auto proxy server dete
Index K O Kana 50 Kanji Bango 50 Kanji key 49 Katakana 48 Kerberos 23 keyboard 41 Japanese 48–49 layout 49 type 49 keychain 61 keys 41 Kotoeri 49 opening files 37 L LAN 32, 51, 53 latency, see SpeedScreen Latency Reduction local clipboard integration 14 local text echo, see SpeedScreen Latency Reduction low-bandwidth connection 54 M mapping audio 31 client devices 28 client drive 28 client printer 39 COM port 31 folders 28 master browser 24–25, 27 menu bar 46 mouse 44 mouse click feedback, see SpeedSc
Client for Macintosh Administrator’s Guide SOCKS Proxy Server configuring default setting 58 specifying 58 sound, see client audio SpeedBrowse 16 SpeedScreen Latency Reduction described 53 disabling 53 local text echo 53 mouse click feedback 53 with low-bandwidth connection 54 SSL/TLS 16, 59 SSL/TLS+HTTPS 25–26 default settings 62 described 25–26 server location 24 starting ICA Client Editor 22 ICA session 37 system requirements 19 T TAPI 30 TCP/IP 24, 26 described 24, 26 server location 24 TCP/IP+HTT