Citrix Virtual Apps and Desktops Service Integration with Microsoft Azure flashcards
Citrix Virtual Apps and Desktops Service Integration with Microsoft Azure · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Azure region pair
- Two Azure regions in the same geography at least 300 miles apart, updated sequentially; used for Citrix catalog redundancy and disaster recovery designs.
- Availability Zone SLA
- A 99.99% uptime SLA for VMs spread across physically separate datacenters within a region; requires zone-redundant SKUs and supports Citrix VDA HA.
- Ephemeral OS disk
- An Azure OS disk stored on local VM storage, recreated on reimage or deallocate; used by MCS for non-persistent catalogs to reduce storage cost and latency.
- Azure Compute Gallery
- A repository for versioned VM images and image definitions; Citrix MCS uses a gallery image version as the master image for catalog provisioning.
- Resource lock
- An Azure ARM setting (CanNotDelete or ReadOnly) on a resource group or resource that blocks Citrix catalog updates, deletes, and power operations until removed.
- Azure Hybrid Benefit
- A licensing benefit letting Windows Server and SQL licenses with Software Assurance cover Azure compute; reduces VDA VM cost but does not affect Citrix licensing.
- Machine Catalog identity types
- Catalog join options: Active Directory domain, Azure AD DS domain, or non-domain-joined (Azure AD only). Choice determines authentication and profile strategy.
- MCS full clone
- A provisioned VM with its own OS disk copied from the master image; persistent and dedicated, used for catalogs needing user-installed apps and personalization.
- MCS write-back cache
- A cache of writes during a session stored in RAM, on the temp disk, or on a dedicated disk; reduces IOPS to the base disk and is discarded on reboot.
- Hosting connection permissions
- The Azure service principal needs Contributor at subscription scope or a custom role with Compute, Network, and resource group read/write permissions to provision catalogs.
- Azure NetApp Files for PVS
- The supported Azure storage option for Citrix Provisioning vDisk stores and high-IOPS profile containers; standard Azure Files SMB is not supported for PVS stores.
- Citrix Gateway Service
- A Citrix-managed gateway that terminates TLS and HDX traffic outside the Azure VNet, removing the need for a public IP and Citrix ADC VM.
- Machine profile
- An MCS setting that captures VM size, NICs, tags, and diagnostics from a template VM; changes require a catalog update to apply to existing machines.
- Deallocate vs stop
- In Azure, deallocate releases compute billing and the public IP; stop without deallocate keeps compute billing. MCS power management uses deallocate.
- Citrix Cloud Connector
- A VM in the resource location that brokers traffic between Citrix Cloud and VDAs; requires outbound 443 to Citrix Cloud and at least two per location for HA.
- Catalog image update
- An MCS operation that rolls a new master image version to catalog VMs using a configurable schedule and maximum concurrent operations, default 20.
- VNet peering transitivity
- Azure VNet peering is non-transitive; hub-and-spoke designs need Azure Firewall, Route Server, or user-defined routes so spokes can reach each other.
- Azure Load Balancer Standard
- The required SKU for HA StoreFront, Gateway, and Citrix ADC floating IP on Azure; supports zone redundancy, HA ports, and floating IP.
- Citrix ADC HA floating IP
- An Azure internal load balancer with floating IP enabled provides the shared VIP for two ADC VPX instances; the health probe must match the HA monitor.
- Accelerated networking
- Azure SR-IOV that reduces latency and CPU by bypassing the virtual switch; supported on most D/E/F series and recommended for Citrix ADC and high-density VDAs.
- Private endpoint
- An Azure private IP for a PaaS service such as Azure Files or Key Vault; keeps traffic inside the VNet but does not replace outbound 443 to Citrix Cloud.
- Azure AD Conditional Access
- A policy engine that enforces MFA, device compliance, and location conditions before Citrix Workspace issues a session token when Azure AD is the IdP.
- Service principal secret expiry
- The client secret used by the Citrix hosting connection expires; an expired secret breaks catalog provisioning and power management until renewed.
- Azure AD DS join
- A managed domain service providing Kerberos and LDAP for MCS catalogs without on-prem AD; VNet DNS must point to the AD DS domain controllers.
- Azure Key Vault
- A secrets store for Citrix ADC certificates and service principal credentials; managed identities allow VMs to retrieve secrets without embedded credentials.
- Citrix Autoscale
- A Citrix Cloud feature that powers VDA machines on and off using schedule-based or load-based rules with peak and off-peak buffers and a minimum machine count.
- VMSS vs MCS scaling
- Azure VMSS autoscale rules apply to VMSS and App Service, not to MCS-managed VMs; MCS scaling is driven by Citrix Autoscale via ARM power operations.
- Azure Monitor Agent
- An Azure VM extension that sends Windows event logs and performance counters from VDAs to Log Analytics; replaces the legacy Log Analytics agent.
- Network Watcher troubleshoot
- An Azure tool that tests connectivity and NSG rules between a source and destination; used to verify ICA traffic between Gateway and VDA.
- Provider registration error
- Catalog provisioning fails if Microsoft.Compute or Microsoft.Network is not registered on the subscription; register the providers and retry.
- VDA registration failure
- Occurs when the VDA cannot reach the Cloud Connector on 443 or the connector cannot reach Citrix Cloud; verify NSG, DNS, and resource location match.
- ADC HA probe mismatch
- Azure internal load balancer health probe must match the ADC HA monitor port; a mismatch causes both nodes to be marked unhealthy and failover to fail.