A20 Lesson 8 Enabling IMA Encryption in XenApp 6.5

The standard courses from Citrix will talk about IMA encryption and the ctxkeytool.exe program to enable it, but other than this brief mention you are left on your own. In this video we take you through the steps to enable IMA encryption.

1. Copy the file [XenApp-install-DVD]:supportctxkeytool.exe and the folder [XenApp-install-DVD]:supportresource to a target directory on each XenApp server. The target directory could be something like c:Citrix as we use in the video. The directory, once created and populated, would look similar this this:

   c:Citrixctxkeytool.exe
   c:Citrixresource

2. Once the first server into the farm is installed and rebooted configure IMA encryption
3. c:citrixctxkeytool.exe generate NewFarmkey
4. c:citrixctxkeytool.exe load NewFarmkey
5. c:citrixctxkeytool.exe newkey
6. c:citrixctxkeytool.exe query
7. copy c:citrixNewFarmKey to each XenApp server and complete the configuration of each new XenApp server but DON’T reboot
8. On each XenApp server once they have joined the farm but before their reboot
9. c:citrixctxkeytool.exe load NewFarmkey

With this done you have enabled IMA encryption and encrypted the credentials used for the accessing the farm database and configuration logging databases.