While this article is specific to Microsoft Defender, it does give good recommendations as to how to configure any vendors A/V for a VDI environment.
Category: VDI
Explanation of what re-arming a Microsoft operating system is all about
Very good piece in one of the Citrix VDI in a box best practice articles at http://support.citrix.com/article/CTX134349.
VDI-in-a-Box 5.1 offers a new setting at the template level to reset the activation timer. Leaving this unchecked implies that the image’s activation clock is not rearmed during prepare. Checking the box implies that the image’s activation clock is rearmed during prepare, decrementing the activation count. If the image’s activation clock is rearmed more than 3 times before the image is activated by KMS (Microsoft activation Key Management Service), the image cannot be prepared because the /generalize will fail.
According to Microsoft: “Resetting the activation timer prevents the image’s grace period from expiring before the image is deployed. Running Sysprep.exe does not remove the installed product key, and administrators are not prompted for a new key during mini-setup… When building demo virtual machines (VMs) for internal use (e.g., building VMs for the organization’s sales department or to set up a temporary training environment), running the Slmgr.vbs script with the /rearm command-line option extends the grace period another 30 days, which in turn resets the activation timer but makes no other changes to the computer. The activation timer can be reset three times for computers running Windows 7 or Windows Server 2008 R2.”
Default URLs and Passwords for Citrix VDI in a Box
-
Management Console
- https://<vdiManagerIPAddress>/admin
- Account: vdiadmin/kaviza
- https://<vdiManagerIPAddress>/admin
-
VDI-in-a-Box appliance logon
- User: kvm/kaviza123
- User: root/kaviza123
- User: kvm/kaviza123
-
User logon from a web browser
- https://<vdiManagerIPAddress>
- User: <userid>/<password>
- https://<vdiManagerIPAddress>
-
User logon from the Java Client
- javaws http://<vdiManagerIPAddress>/dt/vdiclient.jnlp
- User: <userid>/<password>
- javaws http://<vdiManagerIPAddress>/dt/vdiclient.jnlp
-
User logon from mobile devices
- http://<vdiManagerIPAddress>/dt/PNAgent/config.xml
- User: <userid>/<password>
- http://<vdiManagerIPAddress>/dt/PNAgent/config.xml
-
Entries in CAG
- ACL: IP Addresses for VDI range for both ICA and Session reliability
- STA: vdiManagerIPAddress + path=/dt/sta
- Home Page: Java Client = http://vdiManagerIPAddress/dt/vdiclient.jnlp vdiManagerIPAddress + path=/dt/sta
- Home Page: PNAgent = http://vdiManagerIPAddress/dt/PNAgent/config.xml
- ACL: IP Addresses for VDI range for both ICA and Session reliability
Ports used by Citrix VDI in a Box
-
vdiManager <-> Hypervisor
- HTTP over SSL/TLS (HTTPS):443
- HTTP over SSL/TLS (HTTPS):443
-
vdiManager <-> Active Directory
- LDAP:389
- LDAP over SSL/TLS (LDAPS):636
- LDAP:389
-
Endpoint <-> vdiManager
- HTTP over SSL/TLS (HTTPS):443
- HTTP over SSL/TLS (HTTPS):443
-
Endpoint <-> Secure Remote Access (CAG VPX)
- HTTP over SSL/TLS (HTTPS):443
- HTTP over SSL/TLS (HTTPS):443
-
Desktop Receiver <-> Virtual Desktop
- ICA:1494 or 2598
- RDP:3389
- ICA:1494 or 2598
XenDesktop, Hyper-V and System Center Resources » ocb – Citrix Community
Want to know how to run XenDesktop under Hyper-V – full set up guide for evaluating this fantastic technology here
XenDesktop, Hyper-V and System Center Resources » ocb – Citrix Community.
Interested in VDI but think its too expensive for you ?
The head on over to the joint Microsoft and Citrix site and see how you can save a whopping 70% on the cost of implementing your first solution.
Read all about it at http://www.citrixandmicrosoft.com/. There’s even a training lab at https://cmg.vlabcenter.com/default.aspx?moduleid=281742e3-2613-42da-bd58-2c3578f039b4 that walks you through installing the whole solution.