Citrix Director Infrastructure Monitoring - Storefront IIS Certificate Validity status: Not Configured
Article ID: CTX695462
Updated On:
Description
When you access Citrix Director and navigate to Infrastructure > Storefront; incorrect IIS Certificate Validity status is displayed.
All metrics are collected, the status is correct for other services.
The CDF Control trace captured on the Storefront server shows the error*
Trace module: CitrixInfraMonitor
Trace lines:
Error details:
Using domain authentication for connection info
Error in invoking GetPowershellMetrics command: System.Management.Automation. Remoting. PSRemotingTransportException:
Connecting to remote server localhost failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
at System.Management.Automation. Runspaces.AsyncResult. EndInvoke()
at System.Management.Automation. Runspaces. Internal. RunspacePoolInternal. EndOpen(IAsyncResult asyncResult)
at System.Management.Automation. Runspaces. Internal. RemoteRunspacePoolInternal.Open()
at System.Management.Automation. Runspaces. RunspacePool.Open()
at System.Management.Automation. RemoteRunspace.Open()
at DirectorAgentAPI.Services. PowerShellService. ExecuteRunSpace(IList'1 powershellbases, IPowerShellQuery powerShellQuery, Runspace runspace, Boolean isInternal)
at DirectorAgentAPI.Services. PowerShellService. GetPowershellMetrics(IList'1 powershellbases, IPowerShellQuery powerShellQuery, Dictionary 2 headers, Boolean isInternal)
PoSH metrics received from PoSH service:
'Attribute":"Thumbprints","Value":null,
"ErrorCode":500,
"ErrorMessage": "Exception in checking PowershellMetrics: Connecting to remote server localhost failed with the following error message : Access is denied.
For more information, see the about_Remote_Troubleshooting Help topic."}]|*The trace should be run for 5-10 minutes as the data collection occurs every 5 minutes.
Cause
Powershell runspace and access to the "Local Machine" Certificates Store require administrator privileges.
Non-administrator users can typically only view and manage certificates in the "Current User" store.
Resolution
If the IIS Certificate monitoring feature is required, the account configured for infrastructure monitoring should be added to the local administrators group on the Storefront Server.
Local Users and Groups > Groups > Administrators:
If there is another administrator account already available; you can update Infrastructure Monitoring credentials.
In Citrix Director; go to Settings > Connect Citrix Components > Manage
Select Storefront server and Edit
Update credentials:
Issue/Introduction
Infrastructure Monitoring displays incorrect status: Not Configured. There is a valid certificate configured on IIS and Store is configured for HTTPS.
The status can show the warning if there is an issue with the certificate or chain, if certificate expired or is not trusted anymore.
The issue can occur if CitrixInfraMonitor.exe process cannot query the Certificate.
Additional Information
Citrix CDF Control : https://support.citrix.com/external/article/CTX111961/citrix-cdfcontrol-tool.html
