Infrastructure Monitoring - Storefront monitoring: ICA Certificate Validity and ICA Certificate Chain Validity Warning

book

Article ID: CTX695720

calendar_today

Updated On:

Description

Service Status displays warning for ICA Certificate and Certificate Chain Validity:


image.png

The Status is showing green for all other services and OS Metrics are displayed correctly.


image.png

The certificate is valid on the Storefront server, there are no certificate warnings when users try to access Storefront URL, This warning message is expected because the ICA File Signing is disabled by default on the Store.

image.png

 

Cause

ICA File Signing is by default disabled on the Store.

Resolution

To get rid of the warning message on ICA Certificate Validity and ICA Certificate Chain Validity, we must enable ICA file Signing and tag to the Certificate thumbprint used under Storefront server for ICA file signing.

$storeService = Get-STFStoreService

Set-STFStoreService $storeService -IcaFileSigning $true -IcaFileSigningCertificateThumbprint [certificatethumbprint]

Issue/Introduction

Infrastructure Monitoring - Storefront monitoring: ICA Certificate Validity and ICA Certificate Chain Validity Warning

Additional Information

ICA File Signing: https://docs.citrix.com/en-us/storefront/current-release/secure/ica-file-signing.html

CWA ICA File Signing : https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/security#ica-file-signing

 

These article and solution applies to the scenario where the customer would like to see service status for ICA Certificate Validity and ICA Certificate Chain Validity when Infrastructure monitoring displays warning.