This article describes how to enable users to add non-secure (HTTP instead of HTTPS) stores using Receiver.

Instructions

By default Citrix Workspace app and Citrix Receiver 3.1 and later only allows users to connec to stores over HTTPS, not HTTP. If you try to add an HTTP store you get an error:

 The following procedure describes how to bypass this limitation in order to use HTTP in test environments.

Note: Citrix strongly recommends using HTTPS in production environments.

Caution! Refer to the Disclaimer at the end of this article before using Registry Editor.

To allow HTTP stores, complete the following steps:

1. Click Start and enter regedit

2. Navigate to:

• • For 64-bit Windows client machines:

• For 32-bit Windows client machines:

HKEY_LOCAL_MACHINE\SOFTWARE \Citrix\Dazzle

3. set AllowAddStore value to A.
4. Navigate to:
   • For 64-bit Windows client machines:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\AuthManager
   • For 32-bit Windows client machines:
     HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\AuthManager
5. Create a new String value with name ConnectionSecurityMode and value Any.

6. Exit and restart Receiver.

AllowAddStore - determines whether a user can add HTTPS stores. It can take values N, S or A:

• N: Prevents users from adding or removing any stores.

• S: Allows users to add and remove secure stores only (HTTPS).

• A: Allows users to add and remove both secure (HTTPS) and non-secure (HTTP) stores.

• By default it is blank which has the same effect as S.

Setting AllowAddStore to allow HTTP stores is not sufficient; you must also set ConnectionSecurityMode to allow Citrix Workspace app to connect to the store.

You can also configure AllowAddStore at installation time, see https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/install.html#configure-store.

ConnectionSecurityMode - determines whether Citrix Workspace app can connect to non-secure (HTTP) stores. It takes values:

• Any - allow connections to HTTP stores
• Anything else - does not allow connections to HTTP stores

If you have connected to the store using the deprecated XenApp Services URL (also known as PNAgent URL), may find that users are unable to save passwords while connected over HTTP. You can control this behaviour using the AllowSavePwd registry value. AllowSavePwd can be set to N, S or A. The default is the value specified from the PNAgent server at run time. It specifies whether users can save credentials for stores locally on their computer and applies only to stores using the PNAgent protocol.

• N: Prevents users from saving their passwords.

• S: Allows users to save their passwords for secure stores only (HTTPS).

• A: Allows users to save their passwords for secure (HTTPS) and non-secure (HTTP) stores.