Upgrading to Citrix Secure Gateway 3.1.3
January 22, 2010
In this article you will learn how to update to Citrix Secure Gateway (CSG) 3.1.3. CSG 3.1.3 addresses a security vulnerability and also provides numerous bug fixes.
The following steps will be taken in the upgrade process:
- Backup the CSG configuration file
- Download the CSG 3.1.3 update file
- Install CSG 3.1.3
- Verify CSG functionality
Disclaimer: According to the on-line Citrix documentation for Secure Gateway, the approved method for upgrading or updating CSG is uninstall the current CSG and do a fresh install of the new version. This article uses an in-place upgrade to move from CSG 3.1.x to CSG 3.1.3.
Note: Because the CSG service will be stopped and then restarted during the update process, it is important to schedule this update to minimize downtime for your users.
CSG 3.1.3 was released on December 15, 2009 and Part 10 of Learning the Basics of XenApp 5 and XenServer 5.5 was published on December 11, 2009. This article will not go into the details of installing CSG 3.1.3 but will only highlight the differences and a couple of items you will need to verify during the update. For the complete details of installing CSG, please reference Part 10.
For this article, the same XenApp 5 installation and Virtual Machine (VM) used in the Learning the Basics of XenApp 5 and XenServer 5.5 series will be used. If you followed that series, start the VM and log in to Windows. If you are not using the same article series, log in to the server where you have CSG installed. In the Learning series, a CTXBackup folder was created. That folder will be used to hold the backup copy of the CSG configuration file.
Click Start -> Run, type in CMD and click OK.
If the CTXBackup folder does not exist on this computer, type in md c:\ctxbackup and press Enter. This will make the folder to contain the content we need to backup.
Type in cd c:\ctxbackup and press Enter.
You command prompt should say c:\ctxbackup>
Type in xcopy /h “c:\program files\citrix\secure gateway\conf\httpd.conf” and press Enter. This copies over the hidden httpd.conf file.
The httpd.conf file uses UTF-8 encoding so Wordpad must be used to view it. To view the contents of httpd.conf, type in write httpd.conf and press Enter (Figure 1).
Note: Do not make any changes to this file. Most of this file is overwritten by the CSG configuration tool. Should you forget any of the original configuration settings this file can be viewed to retrieve the necessary information.
Close Wordpad when you are finished reviewing the contents of httpd.conf.
Type exit and press Enter to close the command prompt window.
Open your Internet browser and go to http://support.citrix.com (Figure 2).
Scroll down and click View All Products (Figure 3).
Scroll down to Secure Gateway and click Secure Gateway 3.1 (Figure 4).
Scroll down and click Secure Gateway 3.1.3 for Windows — Update SGE3.1.3 (Figure 5).
Click SGE3.1.3.zip (Figure 6).
Save the file to the server’s desktop (Figure 7).
Close your Internet browser. Double-click the SGE3.1.3.zip file on the server’s desktop and extract the contents of the zip file to c:\csg3.1.3 (Figure 8).
Click Start -> Run and type in c:\csg3.1.3\windows\csg_gwy.msi and press Enter (Figure 9).
Click Run (Figure 10).
Verify the Setup wizard indicates Secure Gateway 3.1.3 and click Next (Figure 11).
Continue clicking Next through the installation process. Click Finish to complete the setup wizard (Figure 12).
Begin the CSG Configuration Wizard (Figure 13).
Verify the correct SSL Certificate is found and click Next (Figure 14).
Verify the correct Secure Ticket Authority is found and click Next (figure 15).
Click Finish to complete the configuration and start CSG (Figure 16).
Log in to your web interface site, my URL is https://citrix.websterslab.com/Citrix/XenApp, and launch one or more published applications (Figure17).
Click Start -> All Programs -> Citrix -> Management Consoles -> Secure Gateway Management Console (Figure 18).
Expand Secure Gateway Management Console and click on Session Information (Figure 19). Verify your session appears.
In order to finish this process, exit all published applications, log off the web interface site, close your Internet browser and exit the Secure Gateway Management Console.
In this article you learned how to backup the CSG configuration file, download updates to CSG, install a CSG update and verify the update was successful.