|
 |
|
|
|
Frequently Asked Questions
- ICA client
- How can I change my domain password?
- Password Policy
- How to use Citrix Secure Gateway?
- How does printing work on WTS?
- How can I change my Citrix session resolution?
- Error "The Page cannot be displayed." or
Error "Cannot connect to the Citrix MetaFrame server." or
Error "Could not find specified Citrix MetaFrame server." or
Error "The Citrix SSL Relay name could not be resolved (SSL error 40)." or
Error "Citrix SSL server is not accepting connections."- Error "Unable to open ICA file" or
Error "ICA file not found"
Error "Could not write file to cache"- Error "Proxy not available" or
Error "Proxy detection failure: .PAC script HTTP download failed: Connect failure- Hotkeys
- SSL Error 59: The server sent a security certificate identifying ...
- SSL Error 61: You have not chosen to trust the issuer of the server's Certificate...
- Error "Certificate not yet valid" (SSL Error 68) or
Error "Certificate - Time - Check System Time" (SSL Error 70)"- Error "There is no Citrix SSL server configured on the specified address." or
Error "No route to specified subnet address"- When I click on the published application I only have the choice to save it.
- Logon to WTS: Window close without any error message
Error "Your terminal services temporary client license will expire..." - WARNING: Your home drive is already in use!
Same Hostnames on Training WTS- Java Client - Issues: SSL/TLS Error or similar (You have not chosen to trust)...
- Mac OS X - How to install the Citrix Online Plugin
- Mac OS X - How to use WTS
- Mac OS X or Linux with local Citrix Client Installation "SSL Error: You have not choosen to trust..."
- Lock Citrix Session
- Session terminates regularly (e.g. every 5 minutes)
- How to use WTS via Linux
- Citrix startup window doesn't get beyond "Negotiating Capabilities..."
- After the ICA session has opened it hangs immediately
ICA clientThe ICA client is from version 11.0 on named as Citrix XenApp Plugin for Hosted Apps.
Please make sure to keep the client already up to date. You can get the actual one from
the Download Center inside the myWTS portal.
How can I change my domain password?After logon, you get a collection of published applications.
At the right side, you have a set of small icons.
Click on the change domain password icon and you'll get a popup, where you can change your domain password.
Password PolicyIn accordance with SAP's Global IT strategy for continuously improving the overall security within the organization, we are introducing a new SAP_ALL password policy. The SAP_ALL password is in use everyday and enables "D", "I" and "C" users to logon to the network from their PC/Laptops. Improving the SAP_ALL password standard is a part of many security measures that SAP is currently in the process of rolling out globally.
The new password MUST comply with the new standard described as follows:
• Must be a least 8 characters long
• Must not be a dictionary word
• Must not contain your user name or any part of your full name
• Up to 5 previously used passwords will be remembered by the system. You will not be able to reuse them.
• Must not change password within a day after the last password change.
• Must contain a mixture of the following three classes:
• Latin uppercase letters A, B, C .......Z
• Latin lowercase letters a, b, c .......z
• Westernized Arabic numerals and/or extended characters: 0, 1, 2, 3 ......9 ? ! # ...
• Expire every 180 days after each change
How to use Citrix Secure Gateway?• Select the region where you want to connect to (AMERICAS, EMEA, APJ)
• Select the environment where you want to connect to (Office or Training)
• At the Log in page, you have to provide your username (SAP_ALL user), password (SAP_ALL password) and the SecurID passcode, then click the "log in"-Button.
• At the published application screen, you can see some published applications, just click on it and you'll be connected with the system. If you are searching for project server, see the projects folder. Click on "Up" or "Top" if you want to return to the main published application screen.
How does printing work on WTS?During your logon all your local installed printers are mapped automatically to the session.
In case of any problems, please read this WTS Printing Information carefully.
Due to the design, printing could take a while. Do not cancel your Citrix ICA connection while printing, otherwise printing will be cancelled too.
How can I change my Citrix session resolution?After logon, you get a collection of published applications.
At the top of the Published Application box, you have a set of small icons.
Click on the settings icon and you'll get the settings menu. Here you can select which resolution you want to use (changes only apply to new sessions, not to existing sessions).
Error "The Page cannot be displayed." or
Error "Cannot connect to the Citrix MetaFrame server." or
Error "Could not find specified Citrix MetaFrame server." or
Error "The Citrix SSL Relay name could not be resolved (SSL error 40)." or
Error "Citrix SSL server is not accepting connections."This might be a problem with the DNS resolution or DNS forwarding of your local environment. Please add the following lines to you local hosts file (administrative rights necessary). This file can be found in your windows directory in the folder \system32\drivers\etc\
# CSG Global Settings and Region EMEA
155.56.66.30 mywts.sap.com
155.56.66.37 csglb01.sap-ag.de
155.56.66.38 csglb02.sap-ag.de
155.56.66.68 csglb03.sap-ag.de
# CSG for Region AMERICAS
204.154.71.83 phlcsg.sap.com
204.154.71.84 phlnfuse.sap.com
204.154.71.87 phlnfuseoffice.sap.com
# CSG for Region APJ
169.145.194.12 sgweb01.sap.com
169.145.194.14 sgweb02.sap.com
169.145.194.13 sggwy01.sap.com
169.145.194.41 sgsincsg08.sap.com.sg
# CSG for IDES Mobile
155.56.56.40 idesmobilecsg.sap.com
# CSG for South Africa
196.26.166.132 zajnbm01.sap-ag.de
196.26.166.133 zajnbcsg.sap-ag.de
# CSG for Palo Alto
207.105.30.34 mywtspal.sap.com
207.105.30.33 uspalcsg.sap.com
Error "Unable to open ICA file" or
Error "ICA file not found"
Error "Could not write file to cache"Open the Internet Explorer options via the tools menu and select General tab. In the Temporary Internet files section, please click on "Delete Files..." and "Delete Cookies...", check "Delete all offline content" and click OK. You may have to restart the Internet Explorer before it works.
Error "Proxy not available" or
Error "Proxy detection failure: .PAC script HTTP download failed: Connect failureOpen the Internet Explorer options via the tools menu and select the Connections tab, click "LAN Settings..." and check if you have configuered the correct proxy settings which is needed for your environment. In some environments it is necessary to disable the "Automatically detect settings". Please check this in all of your installed Internet Browsers, even if you only use Internet Explorer.
HotkeysDetermines how the mapping of certain Windows key combinations (e.g. [ALT]+[TAB] or [Ctrl]+[Shift]+[F5] in R/3) are used when
connecting to ICA sessions.
To change the feature, please click on the Application icon "Customizing the user interface"
Then click on the link "Connection Preferences"
Now you can do the settings as follows
- When Local is set, the key combinations apply to the local desktop
- When Remote is set, the key combinations apply to the ICA Session when the Sessionwindow has the keyboard focus
- When FullScreenOnly is set, the key combinations apply to the ICA Session in full screen mode
The default value is FullScreenOnly.
Citrix client full screen toggle (Shift+F2) is only working in the combination Hotkeys=Local and Resolution=Full Screen.
SSL Error 59: The server sent a security certificate identifying ...Please Upgrade your Operating System to the latest Service Pack and hotfixes this Problem should only affect Windows 2000 machines.
SSL Error 61: You have not chosen to trust the issuer of the server's Certificate...Please go to the Download Center and click the link 'TC Trust Center Class 2 CA' and 'TC TrustCenter SSL CA I' to get the Certificate...
Select Open...
and click on "Install Certificate..."
In the upcoming wizard please click on Next -> Next -> Finish to install the certificate.
To import the Certificates into Firefox just click the link in the Download Center.
In the Download Certificate dialog, please check the box "Trust this CA to identify web sites." and click OK.
Error "Certificate not yet valid" (SSL Error 68) or
Error "Certificate - Time - Check System Time" (SSL Error 70)"Check your local System time and date.
Error "There is no Citrix SSL server configured on the specified address." or
Error "No route to specified subnet address"If you are using an SAP device with an standard image, please go to: IE -> Tools -> Internet Options -> Connections -> LAN Settings... and disable "bypass proxy server for local addresses".
please also remove proxy exceptions, when on customer side!
This setting may be reenabled when you work within SAP network.
When I click on the published application I only have the choice to save it.Open the Internet Explorer options via the tools menu and select the Advanced tab. Then uncheck "Do not save encrypted pages to disk" in the Security section and click OK. You may have to restart the Internet Explorer before it works.
Logon to WTS: Window close without any error message
Error "Your terminal services temporary client license will expire..." Please execute this fix.
WARNING: Your home drive is already in use!
Same Hostnames on Training WTSWhen you logon to the Training WTS you receive a WARNING! popup which says that your clientname is already logged on.
This happens when you image your training PCs and have a Citrix ICA Client installed which is lower than version 9.x.
You can resolve this problem in three ways (You must be an administrator of the PC to perform the changes):
1. Change the hostname on the PC to a different one. If already changed, please refer to step 2.
2. Check the registry on the client PC to match the entry
"HKEY_LOCAL_MACHINE\Software\Citrix\ICA Client\ClientName" to the Hostname of the PC or run this script.
3. Install the newest Citrix ICA Client from here
Make sure to uninstall the old client before.
Java Client - Issues: SSL/TLS Error or similar (You have not chosen to trust)...
• Other Operating Systems Or Sun JRE :
You’ll need to manually import the TC-trust certificate into Java JRE via the keytool command. (Admin account needed!)
HowTo manually import the certificate:
Where ‘c:\Program Files\Java\j2re1.4.2_01\’ is your JRE directory
this can be also /opt/blackdown-jre-1.4.2_x/ or similar on linux or unix.
#>cd “c:\Program Files\Java\j2re1.4.2_01\bin”
#>keytool -import -trustcacerts -alias myrootcert -file c:\bin\rootcert.cer –keystore c:\Program Files\Java\j2re1.4.2_01\lib\security\cacerts
The keystore parameter is mandatory!
Default password for the Sun Java keystore is "changeit".
Mac OS X - How to install the Citrix Online Pluginhttp://mywts.sap.com/download/Installing-CitrixOnlinePlugin.pdf
Mac OS X - How to use WTSPlease make sure you have the latest version of your Mac OS X distribution (Snow Leopard), the latest Version of the Safari or Mozilla browser and the latest version of the Citrix Online-Plugin installed. Then follow this instructions:
http://mywts.sap.com/download/Getting-MacOSX-work-with-CitrixOnlinePlugin.pdf
Mac OS X or Linux with local Citrix Client Installation "SSL Error: You have not choosen to trust..."http://mywts.sap.com/download/MacOSX-SSL-Error.pdf
Lock Citrix SessionIf your local logon is the same as the WTS logon, which is only possible using a SAP computer (e.g. in your office or your SAP Laptop):
If you want to lock your Citrix session, please lock the complete PC not just one application (the Citrix session itself), as only locking the Citrix session is NOT secure because of the Pass Through feature!
If your local logon is different from the WTS logon, e.g. at home or using a computer provided by the customer:
You should lock your WTS/Citrix session as others may be able to unlock the local computer.
You can lock the session via Start -> Windows Security... (or in the Classic Start Menu: Start -> Settings -> Windows Security...) -> "Lock Computer" or by the Hotkey combination [right Alt]+[Del] and then clicking on "Lock Computer".
Session terminates regularly (e.g. every 5 minutes)When you connect from a customer it can happen that your Citrix session is terminated on regular basis.
In this case, please ask your local IT to check the Firewall/Proxy settings if it is set to cut off internet connection regularly to prevent users from watching video streams or listening to webradio.
To have a stable Citrix session https (port 443) streaming must be possible.
How to use WTS via LinuxPlease make sure you have the latest version of your Linux distribution, the latest Version of the Mozilla browser and the latest version of the ICA Client installed. Then follow this instructions:
http://mywts.sap.com/download/WTSLinux.pdf
Citrix startup window doesn't get beyond "Negotiating Capabilities..."If you are running on Windows Vista or Windows 7 with User Account Control (UAC) enabled, please disable it, reboot your Computer and try connecting again.
After the ICA session has opened it hangs immediatelyThis happens when your local system has printers installed that are not compatible with the Citrix Universal printer driver.
To resolve this problem, please uninstall the local printers one by one starting with the most recently installed.
| |
| |
|
 |
|
|
|
|
|
