Citrix Secure Gateway Client Access Instructions

Author: Scott Sherrer Version: 01 Version Date: September 19, 2008

Citrix Secure Gateway Client Access Instructions

Introduction
This document includes instructions on logging onto Citrix via the Citrix Secure Gateway to access the JNJ Citrix published applications. Before you attempt to login to Citrix you must already have the VPN/B2B connection established and proper firewall access enabled.

Requirements
Before you access the J&J network from a remote site, there are four requirements: Installed Citrix client installed Installed JNJ Root Certificates Updated Windows host file Logged into the VPN

Citrix Secure Gateway Client Access Instructions

Installing the Citrix Client

Before you can access J&J network via Citrix, you must have the Citrix client installed on your machine. If you do not have Citrix installed, follow the instructions below. Download the Citrix client at the following website: http://www.citrix.com/lang/English/home.asp Choose Downloads from main menu of the Citrix website Select XenApp (the new name for Presentation Server) from download list Under the list of Clients, select XenApp Plugin (new name for Client) - Version 11.000 NEW! from lists of applications (choose version appropriate for your operating system) You will be offered several options (Hosted Apps versus Web Plug-in), select: Hosted Apps Click Download Several pop-ups may attempt to appear. allow pop-ups so that the install window will appear Continue with installation by following prompts

After you have installed the Citrix client, verify that you received your network access Id and password.

Citrix Secure Gateway Client Access Instructions

Installing J&J Certificates

You will also need to download and install certificates in order to access the J&J applications in the Citrix farm. The certificates files are available in the attached JJEDSchain.p7b file.
JJEDSchain.p7b

1) Right Click on the file, Select Package Object\Edit Package 2) Go to File\Save Contents 3) Save it as JJEDSchain.p7b to your desktop/C drive

1) Double-click to open the file. Ignore the message that the file type is unknown. You should receive the following window.

Citrix Secure Gateway Client Access Instructions

2) Double-click on the folder labeled C:\DOCUMENTS AND SETTINGS.Then you should see the file labeled Certificates as shown in the picture below.

Citrix Secure Gateway Client Access Instructions

3) Double-click on the Certificates folder. You will see two certificates folders that you will need to install.

Citrix Secure Gateway Client Access Instructions

4) Double-click on the first certificate (JNJ Principal OnLine) to get the install wizard.

Citrix Secure Gateway Client Access Instructions

5) Press Install Certificate.

Citrix Secure Gateway Client Access Instructions

6) Press Next to continue.

Citrix Secure Gateway Client Access Instructions

10

7) Select Automatically select the certificate store based on the type of certificate option as shown in the picture below. Then press Next.

8) Press Finish. You should receive the following window acknowledging successful installation.

9) Close any remaining window associated with the JNJ Principal OnLine Certification Authority. 10) Double-click on the second certificate JNJ Root Certification to get the install wizard.

10

Citrix Secure Gateway Client Access Instructions

11

Close any remaining window associated with the JNJ Root Certification Authority.

Update Windows Host File

Update your host file with NATd IP address as provided by network/firewall team to hosts and save the file. C:\WINDOWS\system32\drivers\etc\hosts

11

Citrix Secure Gateway Client Access Instructions

12

Accessing Citrix applications via the Citrix Secure Gateway

1) If you are on site at J&J on connected via VPN/B2B then you can simply open an internet browser and enter the following URL: https://nacsg01.na.jnj.com The following screen should appear:

Enter your J&J network access ID and password. NOTE: If this is your first time accessing the J&J network without guest status, then you will be prompted to change password.

12