Configuration of CtxFASUserCertTest

This test monitors the user certificates managed by Citrix FAS, tracks the usage of these certificates, and reports the count of users who were issued certificates. The test also reports the number of expired certificates, with detailed diagnosis throwing light on which certificates expired and when.

The default parameters associated with this test are as follows:

• The TEST PERIOD list box helps the user to decide how often this test needs to be executed. By default, this is set to 5 minutes.

• In the HOST text box, specify the IP address of the host for which this test is to be configured.

• In the PORT text box, specifyt the port at which the specified host listens.

• The detailed diagnosis of the Total_Users measure, if enabled, provides detailed information regarding all certificates that Citrix FAS issued to users. In a typical Citrix environment, the Citrix FAS could be managing certificates for hundreds or even thousands of users. In such environments, the detailed metrics of the Total_Users measure, if collected, may put considerable strain on the eG database. This is why, by default, eG Enterprise DOES NOT provide detailed metrics for the Total_Users measure. Accordingly, the SHOW TOTAL USER DD flag is set to No. However, if you have a well-sized, well-tuned eG database, then you can set this flag to Yes, and enable the collection of detailed diagnostics for the Total Users measure.

• To make diagnosis more efficient and accurate, the eG Enterprise suite embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option against DETAILED DIAGNOSIS. To disable the capability, click on the Off option.

  The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability

  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

• If multiple components of the same component type are awaiting configuration, then an APPLY TO OTHER COMPONENTS check box will appear in this page. Clicking on this check box will allow you to apply the configuration to all/selected components of that type.

• Once the necessary values have been provided, clicking on the UPDATE button will register the changes made.

When changing the configuration for specific servers, a “*” beside the text box corresponding to the parameter signifies that these values have to be manually configured by the user. The parameter values that require to be configured will typically be prefixed with a “$” or contain a series of “*”. A value of “none” in the parameter value indicates that the corresponding parameter value can be changed if required.