Chat now with support
Chat with Support

Foglight for Citrix XenDesktop and XenApp 6.0.0 - User Guide

Getting started Setting up data collection agents Monitoring the performance of your XenDesktop environment

Managing Certificates for NetScaler Agent

Back up custom JRE certificates before upgrading Agent Manager

When upgrading external Agent Manager, if the new Agent Manager uses a higher version JRE than the old Agent Manager, the JRE TrustStore (caserts) in the old Agent Manager will be replaced by the new TrustStore from the higher version JRE. This will cause all the custom certificates imported to the old JRE TrustStore by customers get lost after the Agent Manager upgrade.

To keep the custom certificates, you need to back up the old JRE TrustStore before upgrading external Agent Manager, by following below steps:
1
Verify if the new Agent Manager uses a higher version JRE than the old Agent Manager.
2
If yes, copy the file <fglam_home>/jre/<current_jre_version>/jre/lib/security/cacerts to a local directory before upgrading Agent Manager.
3
After Agent Manager is upgraded, replace the cacert TrustStore with the copied cacert TrustStore and restart Agent Manager.

As for the embedded Agent Manager, it uses the same JRE as the Management Server. If there are custom JRE certificates stored in JRE TrustStore and a higher JRE version is used, back up the JRE cacert TrustStore used by the Management Server before upgrading Management Server.

* 
NOTE: If the new JRE TrustStore has different entries than the old JRE TrustStore, there is a risk that these entries would get lost after replacing with the old JRE TrustStore.

Below is a list of JRE versions used by Agent Manager on various platforms in this release.

Platform
JRE Version
windows-x86_64
1.8.0.222
linux-x86_64
1.8.0.222
windows-ia32
1.8.0.181
linux-ia32
1.8.0.181
solaris-sparc64
1.8.0.181
solaris-x86_64
1.8.0.181
aix-powerpc64
1.8.0.537
hpux-ia64
1.8.0.18
Manage certificates for NetScaler agent in FIPS-compliant and non-FIPS mode
Add a certificate
•
To add a certificate for an embedded FglAM, use the keytool command in FMS JRE located in <foglight>/jre/bin
keytool -import -trustcacerts -alias <alias> -file <Path To>/public_certificate.cer -keystore <foglight>/jre/lib/security/cacerts -storepass changeit
•
To add a certificate for an external FglAM, use the keytool command in FglAM JRE located in <fglam>/jre/bin
keytool -import -trustcacerts -alias <alias> -file <Path To>/public_certificate.cer -keystore <fglam>/jre/lib/security/cacerts -storepass changeit

 

•
Validate the certificate and ensure the following:
•
It is not expired.
•
It is an X.509 format.
•
FglAM requires the Base64 format. To verify if the certificate file is encoded with Base64, open the certificate with a notepad and the certificate should be similar to the following example:
-----BEGIN CERTIFICATE-----
XXXXXXXX=
-----END CERTIFICATE-----
* 
NOTE: If the certificate is not Base64 format, use openssl command to convert the certificate file into a Base64 file. Use either of the following commands depending on the source form:
openssl x509 -inform DER -in xxx.cer -out xxx.crt
or
openssl x509 -inform PEM -in xxx.cer -out xxx.crt
•
The alias is required and is used in the list and delete operations to refer to the certificate. It can be anything.
List installed certificates
•
Embedded FglAM:
keytool -list -keystore <foglight>/jre/lib/security/cacerts -storepass changeit
•
External FglAM:
keytool -list -keystore <fglam>/jre/lib/security/cacerts -storepass changeit

Print out a list of certificates and the aliases that refer to them.

Refer to the example output below:

Keystore type: jks
Keystore provider: SUN
 
Your keystore contains 149 entries
 
securetrustca [jdk], Dec 1, 2017, trustedCertEntry,
Certificate fingerprint (SHA1): 87:82:C6:C3:04:35:3B:CF:D2:96:92:D2:59:3E:7D:44:D9:34:FF:11
Delete a certificate

Remove a certificate referred to by an alias.

•
Embedded FglAM:
keytool -delete -alias <alias> -keystore <foglight>/jre/lib/security/cacerts -storepass changeit
•
External FglAM:
keytool -delete -alias <alias> -keystore <fglam>/jre/lib/security/cacerts -storepass changeit
A full example for managing certificate for NetScaler agent
•
Embedded FglAM:
C:\Quest\Foglight\jre\bin> .\keytool.exe -import -trustcacerts -alias fveqaca -file "C:\caca.cer" -keystore C:\Quest\Foglight\jre\lib\security\cacerts -storepass changeit
Owner: CN=CA, DC=ca, DC=local
Issuer: CN=CA, DC=ca, DC=local
Serial number: xxxxxxxxxxx
Valid from: Mon Jun 15 10:56:05 CST 2015 until: Mon Sep 23 14:58:03 CST 2047
Certificate fingerprints:
MD5: xxxx
SHA1: xxxx
SHA256: xxxx
.....
Trust this certificate? [no]: yes
Certificate was added to keystore
•
External FglAM:
C:\Quest\FglAM\jre\bin> .\keytool.exe -import -trustcacerts -alias fveqaca -file "C:\caca.cer" -keystore C:\Quest\FglAM\jre\lib\security\cacerts -storepass changeit
Owner: CN=CA, DC=ca, DC=local
Issuer: CN=CA, DC=ca, DC=local
Serial number: xxxxxxxxxxx
Valid from: Mon Jun 15 10:56:05 CST 2015 until: Mon Sep 23 14:58:03 CST 2047
Certificate fingerprints:
MD5: xxxx
SHA1: xxxx
SHA256: xxxx
.....
Trust this certificate? [no]: yes
Certificate was added to keystore

 

Monitoring the performance of your XenDesktop environment

When you deploy Foglight for Citrix XenDesktop and XenApp and set up the monitoring agents for data collection, the XenDesktop Environment dashboard enables you to review the performance of your environment at a glance. use this dashboard to ensure consistent application performance, by drilling down for details about individual components, to look for the indicators of performance degradation, such as high CPU load or network utilization.

A typical XenDesktop® environment contains a set of servers, delivery groups, desktops, and applications. You can view the overall state of these components on the XenDesktop Environment dashboard. To access this dashboard, under Dashboards, click XenDesktop.

Figure 12. XenDesktop Environment dashboard

•
Exploring the XenDesktop Environment dashboard
•
Activating Foglight for Citrix XenDesktop and XenApp licenses
•
Investigating the performance of XenDesktop infrastructure components
•
Monitoring Desktops
•
Monitoring Applications
•
Monitoring Sessions
•
Monitoring Users
•
Monitoring Delivery Groups
•
Monitoring vSphere resources
•
Viewing object dependencies
•
Reviewing Frequently Asked Questions
•
Generating reports
Exploring the XenDesktop Environment dashboard

The XenDesktop Environment dashboard provides a set of tabs, each displaying a different aspect of your monitored system.

Figure 13. XenDesktop Environment tabs

•
Monitoring: Use this tab to review data specific to the main components of your monitored environment such as servers, delivery groups, desktops, applications, sessions, or vSphere resources. When you navigate to the XenDesktop Environment dashboard for the first time, the Monitoring tab appears open. This tab provides an overall summary of your monitored environment. It is described in this section.
•
Reports: Use this tab to run and schedule Foglight for Citrix XenDesktop and XenApp reports. For more information, see Generating reports.
•
FAQts: Use this tab to review the answers to common questions about your monitored systems. For more information, see Reviewing Frequently Asked Questions.
•
Administration: Use this tab to discover XenDesktop® hosts, and to manage XenDesktop Agent instances. For more information, see Setting up data collection agents .
•
Getting Started: Use this tab to activate, purchase, or renew your Foglight license. For more information, see Activating Foglight for Citrix XenDesktop and XenApp licenses.
Selecting monitored objects

A set of tiles along the top of the Monitoring tab gives you a quick overview of the monitored objects: servers, delivery groups, desktops, applications, sessions, and vSphere® resources. Each tile represents a collection of a specific object type, shows the object count, and the count of objects in each alarm state (Normal, Warning, Critical, and Fatal).

Figure 14. Tiles representing monitored objects

The Quick View appearing immediately below the tiles allows you to select a specific instance of the tile selection. From here, you can drill down on a desired object instance, and review the related monitoring metrics.

Figure 15. Drilling down on object in Quick View

Observing alarms

If any alarms are generated against certain types of monitored objects, they appear on the Monitoring tab, along the bottom of the summary view on the right. Drill down on an alarm to find out what triggered it, and to take steps to investigate further.

Figure 16. Drilling down on alarm

For complete information about alarms in Foglight™ for Citrix XenDesktop and XenApp, see the Foglight for Citrix XenDesktop and XenApp User Guide.

Activating Foglight for Citrix XenDesktop and XenApp licenses

Foglight for Citrix XenDesktop and XenApp is license-protected. When you install it for the first time, it comes with a 40-day trial license. You can activate it using the Getting Started tab. You can also use this tab to purchase or renew your Foglight for Citrix XenDesktop and XenApp license when your existing trial or commercial license expires. For more information, see the Foglight for Citrix XenDesktop and XenApp Release Notes.

Figure 17. Getting Started tab

Investigating the performance of XenDesktop infrastructure components

A typical XenDesktop® infrastructure consists the following high-level components:

•
XenDesktop Site represents your monitored XenDesktop environment, consisting of Delivery Controllers, virtual desktops that they distribute to end-users, and other associated components.
•
Delivery Controllers distribute virtual desktops to end-users, manage user access, and optimize connections.
•
License servers allow Citrix® licenses to be shared among application components.
•
StoreFronts represent services that provide users with access to applications and desktops.

You can monitor the performance of these components when you select the XenDesktop Infrastructure tile on the XenDesktop Environment dashboard.

The information appearing in the XenDesktop Infrastructure Quick View can help you discover potential resource-level issues such as spikes in session trends, and to reallocate resources where they are most needed.

Figure 18. XenDesktop Infrastructure Quick View

To explore XenDesktop Sites, Delivery Controllers, and License Servers:
1
On the navigation panel, under Dashboards, click XenDesktop Environment.
2
On the XenDesktop Environment dashboard, on the Monitoring tab, click the XenDesktop Infrastructure tile.
3
In the XenDesktop Infrastructure Quick View, in the XenDesktop Infrastructure view on the left, click Site Overview.
The XenDesktop Infrastructure Quick View refreshes, showing the Summary - XenDesktop Site view on the right.
This view displays general information about the monitored XenDesktop site and shows the high-level performance trends in session counts, logon duration, machine and connection failures, and so on. For more information, see Exploring XenDesktop sites.
4
In the left pane, select a License Server, Delivery Controller, or Storefront.
The XenDesktop Infrastructure Quick View refreshes, showing the summary information about the selected component on the right.
•
When the Application tile on left is selected this view shows the list of services running on the selected License Server or Delivery Controller, and displays any alarms associated with it.
•
When you select Guest, the view shows the usage of system resources on the machine on which the selected License Server or Delivery Controller is running.
For more information, see Investigating the use of License Server, Delivery Controller, and Storefront resources.
5
Explore a License Server, Controller, or Storefront in more detail. In the top-right corner of the view, click Explore.
The display area refreshes.
The resulting view helps you understand the state of the resources of the host on which the License Server, Controller, or Storefront is running, if that host is already monitored with Foglight™ for Infrastructure. You can observe how the existing resource levels affect your monitored system as a whole. Along with displaying the system, network, CPU, memory, disk usage metrics, and any related alarms, this intuitive dashboard connects these visual elements with a series of graphical flows that illustrate how quickly the hosts transmits and processes data in real time. For example, you can review the rates of incoming and outgoing data and how they affect your network resources.
For more information, see Exploring individual License Servers and Controllers.
 
* 
TIP: To return to the XenDesktop Environment dashboard, use the bread crumb trail in the top-left corner.
6
If you want to view the relationship your monitored XenDesktop site has with other components in your integrated environment, in the top-right corner, click View Dependency.
The display area refreshes, showing two tabs. Use the information appearing on these dependency maps to better understand the dependencies between the related components, and to look for any signs that may indicate potential performance degradation:
•
Delivery Group View: A Delivery Group specifies which users can access Desktops or Applications based on their user type. This tab illustrates the relationships between main components associated with the Delivery Groups that belong to the selected XenDesktop site, including any Delivery Groups, Desktops, and Applications provided by the Delivery Groups.
•
Infrastructure View: This tab illustrates the relationships between main infrastructure elements components associated with the Delivery Groups that belong to the selected XenDesktop site, such as the NetScaler Gateway, StoreFront Server, Delivery Controller, Domain Controller Database, and the License Server.
For more information about dependency maps, see Viewing object dependencies .
 
* 
TIP: To return to the XenDesktop Environment dashboard, use the bread crumb trail in the top-left corner.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating