StoreFront 3.7 / 3.6 / 3.5 Tweaks

Last Modified: Sep 17, 2016 @ 6:49 am


Here is a collection of optional StoreFront configurations.

CRL Checking – Disable

When the StoreFront server checks certificate revocation for its locally signed files, a delay can occur before the StoreFront logon page is displayed.

  1. Run the following PowerShell commands:
    Add-PSSnapin Citrix.DeliveryServices.Framework.Commands
    Set-DSAssemblyVerification $false
  2. Another potential tweak to speed up StoreFront is to disable NetBIOS. Right-click the Start Menu and click Network Connections.
  3. Right-click the NIC and click Properties.
  4. Highlight Internet Protocol Version 4 and click Properties.
  5. Click Advanced.
  6. On the WINS tab, change the selection to Disable NetBIOS over TCP/IP and click OK twice and Close once.
  7. Repeat on the other StoreFront servers.

Note: According to Microsoft, it is no longer necessary to configure generatePublisherEvidence in C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet.config.

Receiver Shortcuts

You can use StoreFront to control placement of shortcuts on Receiver machines.

  1. Run Notepad elevated (as administrator).
  2. Edit the file C:\inetpub\wwwroot\Citrix\Roaming\web.config.
  3. Search for <account id. Find the Store name in the name attribute.
  4. Scroll down to the first <properties> section located under <annotatedServices>.
  5. See Using StoreFront account settings to customize app shortcut locations at for a list of properties. Add the properties as detailed at The properties should be added after the clear tag.
  6. Note: if subscriptions are enabled in StoreFront then only Favorites are added to the Start Menu and Desktop. If subscriptions are disabled then all applications are placed on the Start Menu or Desktop.
  7. Close and save the file.
  8. Then Propagate Changes.

PNAgent Authentication

Single Sign-on

From Configure authentication for XenApp Services URLs at XenApp Services URLs support explicit, domain pass-through, and pass-through with smart card authentication. Explicit authentication is enabled by default. You can change the authentication method, but only one authentication method can be configured for each XenApp Services URL. To enable multiple authentication methods, create separate stores, each with a XenApp Services URL, for each authentication method. To change the authentication method for a XenApp Services URL, you run a Windows PowerShell script.

  1. On the primary StoreFront server in your deployment, use an account with local administrator permissions to start Windows PowerShell.
  2. At a command prompt, type the following command to configure the user authentication method for users accessing the store through the XenApp Services URL.
    & "C:\Program Files\Citrix\Receiver StoreFront\Scripts\EnablePnaForStore.ps1" –SiteId 1 -ResourcesVirtualPath /Citrix/Store –LogonMethod sson
  3. Propagate changes.

Remember my password

If you leave PNAgent authentication set to Prompt, you can enable the Remember my password box by doing the following:

  1. Run Notepad as Administrator and edit the file C:\inetpub\wwwroot\Citrix\Store\Views\PnaConfig\Config.aspx.
  2. Near line 74 is EnableSavePassword. Change it to true.
  3. When PNAgent connects, there should now be a Remember my password checkbox.

Hide Applications

You can hide all icons of a particular type (Applications, Desktops, Documents). Or you can hide icons with a specific keyword.

Go to Stores > MyStore > Configure Store Settings > Advanced Settings and look for the Filter options.

Filter resources by type lets you hide all Applications or all Desktops. If you are running Receiver inside a published desktop, then you probably don’t want desktop icons to be delivered by Receiver. In that case, create a new Store and filter the Desktop icons. Then only the application icons will be delivered.

Filter resources by excluded keywords lets you filter published icons that match a custom keyword.

Once the ExcludeKeyword has been defined, add the keyword to a published application description and that application will no longer display in Receiver. This works for both Receiver for Web and Receiver Self-Service (non-browser).

Desktop Autolaunch

By default, if only a single desktop is published to the user, Receiver for Web will auto-launch it. You can change this behavior by going to Stores > MyStore > Manage Receiver for Web Sites > Configure > Client Interface Settings and uncheck the box next to Auto launch desktop.

Full Screen Desktop

Citrix CTX139762 How to Configure StoreFront to Start Published Desktops in Full Screen Mode: This article describes how to configure StoreFront to start published desktops in Full Screen Mode.

  1. Open the file C:\inetpub\wwwroot\Citrix\Store\App_Data\default.ica on the StoreFront server(s) with notepad (as Administrator)
  2. Add the line:
  3. In older versions of StoreFront, it should be true instead of On.
  4. Save the file.
  5. Open the command prompt (cmd) and run iisreset.

Autolaunch Application

See the script.js code posted by Michael Bednarek at

Store for Anonymous

If you intend to publish applications to anonymous users then you can create a StoreFront store that does not require authentication. Note: anonymous stores only work internally (no NetScaler Gateway).

  1. On the VDAs, create and configure anonymous accounts.
  2. In Citrix Studio, configure a Delivery Group to accept unauthenticated (anonymous) users.
  3. In the StoreFront Console, right-click Stores and click Create Store.
  4. In the Store Name and Access page, enter a new store name.
  5. Check the box next to Allow only unauthenticated users to access this store.
  6. Then click Next and finish the wizard like normal.
  7. Anonymous stores are hidden by default. When performing discovery in Receiver you’ll need to enter the full path to the store (e.g.

Workspace Control

Workspace Control reconnects user sessions. It can be disabled. Or configure various reconnection options.

Citrix Blog Post Workspace Control: When You DON’T Want to Roam details complete session reconnection configuration instructions for XenApp, Remote Desktop Services, StoreFront, and Receiver.

Receiver for Web

Go to Stores > MyStore > Manage Receiver for Web Sites > Configure > Workspace Control page.


Receiver Self-Service

Citrix Blog Post – How to Disable Workspace Control Reconnect: For Receiver for Windows, workspace control can be managed on client devices by modifying the registry. Please see this Knowledgebase Article for how to implement it. This can also be done for domain-joined client devices using Group Policy.

In StoreFront Console, go to Stores > MyStore > Configure Store Settings > Advanced Settings and there’s a setting for Allow session reconnect.


Treat Desktops as Applications

From Treating All Desktops as Applications at Citrix Blog Post What’s New in StoreFront 3.0: Desktops are treated differently from applications in StoreFront/Receivers. They are placed in a separate Desktop tab and in the case of Receiver for Web, they are not reconnected with workspace control. In some use cases, it is desirable to treat desktops as applications so that they are placed together with applications and get reconnected as part of workspace control. With StoreFront 2.x, you have to add the TreatAsApp keyword to all published desktops to achieve this effect. StoreFront 3.0 enables you to configure treating all desktops as applications at the store level without the need of adding the TreatAsApp keyword to all the published desktops. This is configurable using a PowerShell cmdlet.

& "C:\Program Files\Citrix\Receiver StoreFront\Scripts\ImportModules.ps1"

Set-EnhancedEnumerationOptions -siteId 1 -storeVirtualPath /Citrix/Store `
-treatDesktopsAsApps $true

Special Folder Redirection

From Configure special folder redirection at With Special Folder Redirection configured, users can map Windows special folders for the server to those on their local computers. Special folders refer to standard Windows folders, such as \Documents and \Desktop.

In StoreFront Console, go to Stores > Configure Store Settings > Advanced Settings and there’s an option for Allow special folder redirection.

Receiver Self-service – Disable “Remember My Password”

By default, when Receiver Self-Service connects internally to StoreFront, the user is able to check the box next to Remember my password. Note: When connecting through NetScaler Gateway, this checkbox is never available.

This can be disabled by making a change on the StoreFront server. This procedure is documented by John Ashman at Citrix Discussions and Prevent Citrix Receiver for Windows from caching passwords and usernames at

  1. Note that this procedure seems to prevent Receiver for iOS from adding accounts.
  2. On the StoreFront server, run a text editor elevated (as administrator).
  3. Open the file C:\inetpub\wwwroot\Citrix\StoreAuth\App_Data\Templates\UsernamePassword.tfrm.
  4. Go to line 20, which should start with @SaveCredential.
  5. To comment out the line, wrap it in @* and *@. Save the file when done.

  6. Now the Remember My Password checkbox is gone.

“Activate” Option in Web Page – Disable

From Citrix Discussions: to disable the “activate…”; function for Citrix receiver for windows that is visible when a user clicks their username in the upper right hand corner of Receiver for Web, in StoreFront Console, go to Stores > MyStore > Manage Receiver for Web Sites > Configure > Client Interface Settings page. There’s a checkbox for Enable Receiver configuration.

HTML5 Receiver Getting Started Tour

The first time a user connects to HTML5 Receiver, the user is prompted to tour the interface.

The Getting Started Tour can be disabled by doing the following:

  1. Edit the file C:\Inetpub\wwwroot\Citrix\StoreWeb\custom\script.js.
  2. At the bottom of the file, add Feng Huang’s code from First time user tutorial at Make sure the quotes are straight quotes and not curly quotes.
    localStorage["showFtu"] = false;

Customize Receiver UI in StoreFront 3.x

StoreFront 3.x customizations are visible in both Receiver for Web and in Receiver Self-Service.


If you are load balancing StoreFront and want to put the server name on the webpage, see Nicolas Ignoto Display server name with Citrix StoreFront 3.
Server name is displayed


Nicolas Ignoto Lab: Part 22 – Ultimate StoreFront 3 customization guide contains many StoreFront customizations including:

  • Add disclaimer
  • Change logo/background
  • Add header
  • Add text
  • Change colors
  • Etc.


Citrix Blog Post Citrix Customization Cookbook contains a collection of customizations including:

  • Add Static or dynamic (read from file) text to the header and/or footer of the login page.
  • Click-through disclaimer before or after login page
  • Footer for every page
  • Default to Folder view when visiting the Apps tab
  • Change default text
  • Change background images for featured categories
  • Background image


Citrix Blog Post Storefront 3 Web Customization: Branding Your Deployment describes how to modify the following CSS to customize the appearance of StoreFront 3.x

  • Background images
  • Logon button
  • Colors for page and text
  • How to view the mobile version of the page
  • CSS for mobile pages


Jason Samuel Upgrading Citrix StoreFront 2.6 to StoreFront 3.0 – Things to Know details how to change the StoreFront logo to a Receiver logo.

Citrix Blog Post StoreFront Message Customization describes how to add a scrolling message to the top of the screen. This is displayed in both Browsers and Receivers. This post contains a new version of the executable that supports StoreFront 3.0 and newer.


Migrate Web Interface features to StoreFront at details how to configure Web Interface features in StoreFront. This includes:

  • Enable return to last folder
  • Header logo
  • Pre-logon welcome message
  • Logon screen customization
  • Footer text


StoreFront 3.0 Receiver Customization APIs are detailed at Citrix Developer. Use the Receiver Customization API to brand or customize your end users’ app and desktop selection experience beyond capabilities provided in the StoreFront admin console. Customizations apply to latest Web, Chrome, Windows, Mac and Linux clients, and will be extended to mobile devices in future releases.

An example use case for the StoreFront 3.0 APIs is Citrix Blog Post Citrix Recipe Box: StoreFront Approvals. This is code for StoreFront that requires workflow approval when a user subscribes to an app.


Citrix Blog Post Receiver X1 APIs describes the following:

  • Overview of the CSS classes that can be customized.
  • Override Citrix’s JavaScript functions to modify behavior – exclude or restyle apps, change a sort order, add a warning message etc.
  • How to force X1 UI to display in either phone or larger mode.


Citrix Blog Post X1 Customization: Going deeper with CSS describes the following:

  • Use CSS (/custom/style.css) to style the three custom regions (#customTop, #customBottom, #customScrollTop). Shown below in red, blue, and pink.
  • Marker classes for showing/hiding or highlighting parts of the UI: large display, small display, high DPI, Favorites view, Desktops view, Apps view, appinfo view.


Citrix Blog Post Scripting X1 describes the following:

  • JavaScript code to display an Acceptance dialog box before users can login.
  • Use JQuery to add HTML code to custom regions (e.g. #customScrollTop) including using CSS to hide the HTML code unless a specific tab is selected by the user.

Citrix Blog Post – Rewriting the Session ClientName from StoreFront: I would like to offer the following customisation DLL which can apply client name rewrites based on a template. The customisation template can be any string, but where that string contains a particular token, the token will be replaced by some information from the User Context. If the intent was just to replace the ClientName with the user name, the template is then just “$U”. More details and the .dll file are in the blog post.

StoreFront Store Customization SDK at Citrix Developer: The Store Customization SDK allows you to apply custom logic to the process of displaying resources to users and to adjust launch parameters. For example, you can use the SDK to control which apps and desktops are displayed to users, to change ICA virtual channel parameters, or to modify access conditions through XenApp and XenDesktop policy selection. Key Customization Points:

  • Post-Enumeration
  • Post-Launch ICA File
  • Post-Session Enumeration
  • Access Conditions (pre-launch and pre-enumeration)
  • Provider List
  • Device information

Citrix Blog Post Adding a Language to StoreFront 3.0: A new language pack is comprised of a culture definition file, a string bundle file and a custom string bundle file. See the Blog Post for more details.

To force StoreFront to only use English, add the following to c:\inetpub\wwwroot\Citrix\StoreWeb\custom\script.js as detailed at Set default language to EN at Citrix Discussions:  💡
CTXS.Environment.getPreferredLanguages = function () { return null; }


To change the StoreFront page title, see Sam Jacobs How to Change the Page Title in Citrix Receiver 3.x at


Customizations detailed at topic Modify Receiver for Web site at Citrix Discussions:  💡

  • Add Featured App Groups to Categories View
  • Increase the number of Featured applications beyond the default of 3.

StoreFront SDK

Use the Store Customization SDK to apply custom logic to the process of displaying resources to users and to adjust launch parameters.  For example, you can use the SDK to control which apps and desktops are displayed to users, to change ICA virtual channel parameters, or to modify access conditions through XenApp and XenDesktop policy selection.

Requires Visual Studio to create .dll files that replace the ones bundled with StoreFront.

StoreFront 3.0 Portal Theme for NetScaler 11

See NetScaler Gateway 11 > Portal Themes. Build 62 and newer have a built-in X1 theme.

StoreFront 3.x Theme for NetScaler 10.5

You can make the NetScaler Gateway 10.5 logon page look like the Receiver for Web in StoreFront 3.0. Visit Citrix Blog Post X1 Skin for NetScaler Gateway to download an already developed theme package. Or see one of the following for instructions to manually edit the NetScaler Gateway theme to match StoreFront 3.x

To install the theme package:

  1. Download the X1 theme from the Citrix Blog post.
  2. WinSCP to the NetScaler and switch to /var/netscaler/gui/themes.
    1. On the right, rename the existing receivertheme.tar.gz file.

  3. Upload the theme that was downloaded from the Citrix Blog post.
  4. In NetScaler GUI, go to NetScaler Gateway > Global Settings > Change Global Settings.
  5. Switch to the Client Experience tab.
  6. At the bottom, if the current UI Theme is Green Bubble, change it to Default. Then go back into the screen and change it back to Green Bubble. This causes the theme to reload. Click OK.
  7. The logon page should now look more like Receiver for Web in StoreFront 3.0.

Related Pages

Email this to someonePrint this pageTweet about this on TwitterShare on LinkedInShare on FacebookPin on PinterestShare on RedditShare on StumbleUpon

28 thoughts on “StoreFront 3.7 / 3.6 / 3.5 Tweaks”

  1. Hi, I am using SF v3.7, is it possible to put a logoff icon that is always visible rather than needing to click on the username drop down? or, make ‘logoff’ the default rather than the username?

  2. Hey Carl. I wanted to know if you Enable the “Treat Desktops as Applications” setting on the StoreFront side is it possible to assign an Application Group to the Published Desktop so that you can group them into a Featured App Group in Storefront?

  3. Does anyone know how to disable localizations (disabling all languages except English) and set the default language to English in Citrix Storefront web 3.5?

  4. Hello

    First of all, greate site …

    We are testing XenApp 7.9 and Storefront 3.6.

    We used the following commands to treat desktops as apps:

    & “C:\Program Files\Citrix\Receiver StoreFront\Scripts\ImportModules.ps1”
    Set-EnhancedEnumerationOptions -siteId 1 -storeVirtualPath “/Citrix/Store” -treatDesktopsAsApps $true

    That worked so far…

    But how can we add Keywords to desktop to group in a App Group?

    Kind regards

    1. When you edit a published desktop, there’s no Description field?

      There are some differences today between desktops and apps.

      1. Hello Carl
        you’re wright there is a description box, but label says description and not description and keywords as on published application. I tried and see there it works. Thank you!
        Kind regards

  5. Carl,

    A quick question for you. I have recently upgraded my environment from XenDesktop 7.7 to 7.9, and now when my end users try using their CAC to login from a Wyse Xenith thin client they will get a “Citrix Sign-On failed”. However, if they simply remove the CAC from the reader and then reinsert it they are able to login without any issue. This was working flawlessly in XenDesktop 7.7, so I am wondering if there was some configuration change that was done in the background that would be causing this issue in my 7.9 environment. Any insight would be greatly appreciated.

    1. If you are using Windows 2012, we had to make the following changes to enable PIV/CAC cards to work correctly with SF 3.5:

      Add REG_DWORD “ClientAuthTrustMode” = “2” under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel.

  6. In Web Interface you could override the shortcut placement set within the published resource. What I am trying to accomplish is to not add any Desktop shortcuts to the desktop even though the checkbox to add the icon is enabled in the published resource. With WI we had a site for normal customers and then a site for admins or app developers so they did not get all the clutter on the desktop. I though this could be done by enabling self-service mode and using the full receiver but you cant just us the GUI as the desktop icons that are set in the published resource still appear on the desktop.

    Does anyone know how to accomplish this in Storefront or is this something that can not be done?


  7. I have a question. I installed a new Storefront 3.6 environment and am able to change almost everything. But at this point i am not able the change the backgrounds of the featured app groups. There are some tips to do it which worked in 3.5 as far as i know. When i use the code eg:

    .appBundle1 {
    background-image: url(‘Bundlebackground.png’);

    .bundleDetail.appBundle1 {
    background-image: url(‘Bundlebackground.png’);
    background-size: 100% 200%;

    nothing happens. the image is placed in the custom directory where it should belong.

    Has 3.6 that much changed? And is there a way to still use own images?

  8. Carl I am trying to run the command to change Prompt to sson for Pnagent 3.4 but it errors off with “& was unexpected at this time”. I started Powershell, started cmd and ran this

    & “C:\Program Files\Citrix\Receiver StoreFront\Scripts\EnablePnaForStore.ps1” –SiteId 1 -ResourcesVirtualPath /Citrix/Store –LogonMethod sson

    If I run it without the &, it opens the script. What am I doing wrong?

    1. “Started cmd”? What does that mean?

      You simply run the full command directly in PowerShell. Don’t start cmd from PowerShell.

  9. We have a disclaimer that comes up after the user logs in. It does not come up with a mobile device log in. Is it possible to show the same disclaimer for Mobile devices?

    1. One of my complaints about Receiver is that it’s capabilities are limited as compared to browsers. I’m hoping Citrix fixes this.

  10. Hi Carl,

    I enable Account Self service in Storefront
    The link is available at the logon page.
    But when I click the Account Self-Service link, i have the choose of two options. Password reset or Unlock account. I select Password reset and I fill in my username, but then there’s my question. I need to fill my domain\username instead of my username only.
    Do you no if it’s possible the fill in only the username?

  11. Hi

    I have an issue right now and a case logged with Citrix Support, but I was wondering if you Carl or anyone else might have come across this.

    I have NetScaler 11 Build 65.35nc, SF 3.5, XenApp 7.8 DDC on W2k12R2 and XenApp 7.8 VDA’s on W2k8R2.

    When a request comes through NS from external client, the ica file being issued to the client has the internal ip address of the VDA hosting the App/Desktop instead of the STA Ticket ID and there for the app/desktop does not launch. “Error: The connection to “App/Desktop” failed with status (There is no Citrix XenApp server configured on the specified address.).”

    So from the wireshark and NS trace Citrix support notices the traffic is coming via NetScaler, the POST request should be going to /scripts/ctxsta.dll.
    Instead it is going to /scripts/wpnbr.dll, as an internal request which its not.

    Citrix SF Escalation support still investigating this.

    So if you know how to fix this I would appreciate the guidance.


    1. This usually means that StoreFront did not detect the user as connecting through a NetScaler Gateway.

      Single FQDN for internal and external?

      Browser, Receiver, or both? Browser doesn’t use beacons but Receiver does.

      1. Hi Carl,

        Sorry I should of mentioned, I followed your guides when configuring the NetScaler, SF and XenApp VDA’s including tweaks for SF and also the Guide for Single FQDN.

        Yes its a Single FQDN for Internal and External access.

        Yes for Both Browser and Receiver.


  12. Carl,

    I would like to add a help page to the site as a 4th icon along side of Favorites Desktops and Apps. Has anyone tried to do this?

  13. Hi Carl,

    I am having weird issues on Citrix receiver 3.4.3 and storefront 3.0.1, Users not able to change the password. Citrix receiver is being used as PNAgent and they get “The credentials supplied were invlaid”.

    Please help me.

  14. Do you know if there is a way to always show the Change Citrix Receiver option for all HTML 5 compliant browsers even if the full Receiver is installed?

  15. I ran into a interesting upgrade issue.
    We customized our store front without using the cheesy interface thy offer. If you edit the receiver folder with images and edit the custom folder ( including the style. CSS) it will not let you upgrade from 3.0.1 to 3.5.
    I removed my store then reapplied it stock upgrade was good. Reverted the snapshot to see if it would fail with the customizations we made. Failed again

    This always worked in the past.
    Their built in way is cheesy and it does give many options.

    Once you upgrade with a stock store. If you place ur receiver folder and custom folder back in keeping the store name the same as well as receiver for web. Then storefront will not allow you to manage that store on 3.5

    So i m going to fight my way back to the top like I did on reciecer 4.4 ( hotfix coming soon FYI) and have them make it so you can do above.

Leave a Reply