Operations Guide:
Support and Maintenance
Table of Contents
Introduction ............................................................................................................................... 1
Support....................................................................................................................................... 2
Structure ........................................................................................................................................................................... 2
Support Tools.................................................................................................................................................................. 5
Appendix.................................................................................................................................. 25
Appendix A XenApp Delegated Rights.................................................................................................................. 25
Appendix B XenDesktop Delegated Rights ......................................................................................................... 27
Appendix C Provisioning Services Delegated Rights .......................................................................................... 27
Appendix D XenServer Delegated Rights ............................................................................................................ 27
Appendix E Sample Call Script/Questionnaire ................................................................................................... 28
ii
Introduction
When implementing Citrix environments, support and maintenance aspects for new farms often get
overlooked. Effectively maintaining a Citrix environment necessitates reliable systems be in place to
ensure smooth day to day operations. This document covers main duties involved in maintaining of
Citrix infrastructures.
This white paper covers the following 3 sections:
Support When problems arise, technical support often is the first point of contact
for issue resolution. This section addresses the proper staffing, organization,
training, and tools utilized in effective support organizations.
Testing and Change Control Regular upgrades are required to ensure a farm
environment is up to date. Change management processes are critical to ensure
improvements are properly approved, tested, and validated by appropriate parties.
This section covers the proper processes that ensure changes in production
environments are deliberate, proven, and accountable.
Support
Well trained support members with a clear organizational structure are critical for an effective
support team. Since technical support is the first place many users go, thought needs to be given to
its structure, training, and tools utilized by support members.
Structure
Multi-tier support levels have been found to be the most effective means in addressing user
support issues. Low criticality, low complexity or frequently occurring issues should be
managed and resolved at the lower tiers. High criticality and complex issues are escalated to
more experienced architects or infrastructure owners. The diagram below outlines a
common multi-tier support structure:
The first level should resolve 75% of all issues encountered. These issues include routine
problems requiring limited knowledge of the Citrix environment. Issues are quickly resolved
and may also be automated, like password resets. When non-routine problems exceeding the
abilities of level ones are encountered, they are then escalated to level two. Information on
2
the end users problem and attempted troubleshooting steps are documented at the first level
allowing level two technicians to immediately begin addressing the problem. Level two
technicians should handle only 20% of the support tickets and are highly knowledgeable on
the Citrix environments. Should a complex issue arise that exceeds level twos abilities it is
escalated to the third, and final active support tier level three. Level three issues are
complicated and often mission critical requiring expert knowledge of the Citrix environment.
Tier three support tickets should be uncommon, amount to no more than 5% of all support
issues, and be resolved as soon as possible.
The final tier, level four, is not involved in active support of a production environment. It is
focus solely on the strategic improvements for enterprise environment, testing new
technologies, planning migrations, and other high level changes.
Should support discover an issue is related to an application or underlying infrastructure the
ticket is handed to the appropriate team for troubleshooting. If a program bug is discovered
the issue is then re-escalated and a ticket is established with the programs vendor.
In parallel with the active support structure, self-service portals are available for end users to
assist themselves with basic troubleshooting tasks. This assists in resolving frequently
encountered issues and helps prevent the creation of new support tickets.
Table 1 below covers the levels and expectations in additional detail:
Description
Responsibilities
Skill Set
Tier-1 support personnel should be
provided with basic training on Citrix
XenApp, Citrix XenDesktop and
supporting technologies. This can
include internal training from subject
matter experts or formal training. The
training provided should focus on the
following topics:
High-Level overview of the XenApp
and XenDesktop implementation
Using Citrix Desktop Director to
manage user sessions
Troubleshooting Citrix XenApp and
XenDesktop sessions
Managing AD group policies user
profiles
Troubleshooting methodology
In addition, regular training should be
provided to the Tier-1 team members
on the latest troubleshooting
recommendations from the Tier-2 and
Tier-3 teams as well as details on any
relevant changes to the environment.
This will help ensure a base knowledge
level amongst the team and consistent
customer service.
Description
Responsibilities
Skill Set
Level 2
(Production
Support Engineer)
Description
Responsibilities
Skill Set
Vendor Support
Self Service
Description
The Level 4 team has minimal
exposure to administrative tasks but
focuses on translating business
requirements into technical
architectures, designing the
infrastructure or planning migrations.
Not involved in day-to-day support.
Responsibilities
Provide technical leadership for
upcoming projects
Lead design updates and architecture
revisions
Address high severity issues and service
outages
Oversee technology integration
workflows
Review periodic reports of server
health, resource usage, user experience,
and overall environment performance
to determine next steps and upgrade
paths
Review change control requests which
impact the Citrix environment
Review frequently recurring helpdesk
issues
Ensure technical specifications
continue to meet business needs
Update design documentation
Skill Set
Support Tools
Providing the appropriate tools for the aforementioned support levels is a key aspect in
order to achieve a high First-Time-Fix-Rate and a low Time-to-Resolution. The table below
highlights several tools available for supporting Citrix environments.
Tools\Processes
Tools
Details
Ticket Management
System
Call Scripts
Shadowing Tool
Knowledge Base
Citrix Administrative
Consoles
The diagram below outlines the recommended tools for every support level:
Tool
Desktop
Director
Desktop
Studio
Product
Description
Desktop Director provides an
overview of XenDesktop hosted
desktops and XenApp sessions. It
enables support teams to perform
basic maintenance tasks and to
monitor and troubleshoot system
issues.
Desktop Studio enables
administrators to perform
configuration as well as
5
XD
XA
PVS
Support Level
XS
L1
L2
L3
Tool
AppCenter
HDX Monitor
Provisioning
Services
Console
XenCenter
License
Administratio
n Console
Product
Description
XD
XA
PVS
Support Level
XS
L1
L2
L3
Please refer to the following appendices for details on how delegated rights could be
configured for the support staff
Appendix A (XenApp)
Appendix B (XenDesktop)
In addition to the aforementioned Citrix support tools, every support organization should
leverage the following instruments:
Call Script: The first contact help desk personnel should have documented scripts
or triage guides to ensure that all relevant data is captured while the user is on the
phone. This practice also assists in proper triage and allows the next support tier to
perform research off-line and review logs prior to customer contact. Please refer to
Appendix E Sample Call Script / Questionnaire for a sample call script.
Staffing Requirements
This section provides a guideline for the number of support staff required for several sizes
of Citrix XenApp or XenDesktop enterprises. This information is primarily based on Citrix
experience in deploying enterprise environments, taking into account the most typical design
requirements. Additional refinement may be necessary to optimize the support of the
environment based on specific business requirements.
XenApp centric organization
Farm or Load Managed
Groups
1
2-5
>6
#Servers
<100
<200
>200
#Users
<3000
<4000
>5000
Help Desk
1 CCA
3 CCA
3 CCEE
Admins
1-2 CCEE
3-4 CCEE
5+ CCEE
Architects
1 CCIA
1 CCIA
2 CCIA
#Desktops
<500
1000-5000
>5000
#vDisks
1-2
3-5
5+
Help Desk
1 CCA
3 CCA
3 CCEE
Admins
1-2 CCEE
3-4 CCEE
5+ CCEE
Architects
1 CCIA
1 CCIA
2 CCIA
Testing Phases
Since changes to Citrix infrastructure can impact thousands of XenApp and XenDesktop
users, multi-phase testing is critical for the reliability of the environment. As such, Citrix
recommends implementing the following testing strategy:
Infrastructure
There is a need for four dedicated levels of testing that ensures changes do not harm a
production farm. An isolated development environment should be used initially to try any
new changes, application installations, and updates. Conflicts resulting from these changes
have no impact in this environment and can be resolved before they affect any
infrastructure. Once proven, safe changes are then applied to a larger test environment. The
test environment should mimic production as closely as reasonably possible. This includes all
patches, applications, and policies be similar so that testing is as realistic as possible. Once
changes prove stable in the testing environment it is recommended the changes not be
initially rolled out to production all at once. Updates should be first applied to a targeted
pre-production subset of users to again validate and approve of changes made. This way if
any problems go undetected in the test environment the problems affect only a small subset
of users. When validated in pre-production changes can be applied to the production farm.
Change Management Processes
Standardized processes that manage application lifecycles through installation, updating, and
end of life are necessary to ensure consistent and accountable performance of a farm. The
change control process should be closely followed starting with a change request. For any
changes to be made to a production environment a change request form must first be filled
out detailing changes requested, reasons for the change, and intended timeframes for the
action. This is then reviewed and edited if required by a change manager and then advisory
board. When the change request has gone through the entire change approval process it is
then given to a change implementer who then stages the change for testing, and finally
conducts the implementation in production. The table and steps below further detail the
process:
10
Procedure
1. The Request for Change (RfC) form is completed by any person requesting a change
2. After appropriate manager approvals have been acquired, the RfC is forwarded to the
appropriate Change Manager(s).
3. The Change Manager validates the RfC for completeness and logs the RfC information
into the Change Control Log for tracking. Incomplete CRs are returned to the requestor
for update and re-submission.
4. The Change Manager assesses the impact of the change in conjunction with subject
matter experts and/or managers of the teams associated/affected by this change.
5. The Change Manager works with the associated/affected teams as well as the change
requestor in order to confirm the priority, category and type of the change as well as the
proposed back-out plan.
6. If the process succeeds the RfC is forwarded to the Change Advisory Board for
approval. If the process does not succeed the change control log is updated with the
current status as well as the reason of the rejection and the RfC is send back to the
requestor.
7. The Change Advisory Board reviews and validates the change in detail, and discusses
and evaluates purpose, reasons, impact, cost and benefits. Each Board member
represents their department and provides guidance on the change requests. The Change
Advisory Board also reviews multiple requests to coordinate implementations and
package requests into a single release schedule.
8. Upon approval the change is send back to the Change Manager to schedule the change
for implementation into the staging environment.
9. The change is implemented and test are conducted. The results are sent back to the
Change Manager.
10. If the staging implementation and testing was successful the change is scheduled for
production implementation. In case the staging phase was not successful another staging
iteration will be conducted.
11. The change is rolled out to production.
12. The Change Manager reviews the implementation and finally updates the Change
Control Log.
13. On a periodic basis, the Change Manager reviews the Change Control Log to analyze for
trends on type, frequency and size of changes and forwards the results to the Change
Advisory Board for review.
In the instance of an emergency the processes may be expedited. Should an issue be declared
an emergency a change request form is still filled out and delivered to the appropriate change
management representative. When approved the requested change is immediately
11
implemented and the advisory board notified. Due to the criticality of time in an emergency
timeframes are not required.
12
Ongoing Operations
It is best practice to keep operating systems, applications, and Citrix components all up to date with
applicable hotfixes and updates to ensure stability, performance, and security of a farm. In general
Citrix recommends that Hotfix Rollup Packs and Service Packs always be installed, general hotfixes
be installed on an as needed basis only, and that all changes follow standardized change
management processes for any changes (i.e. development, testing, pre-production, and production).
For more information regarding general hotfix maintenance refer to (CTX132799).
Monitoring of a new environment enables administrators to address issues proactively. By having an
in depth understanding of current and expected behavior of the various components, administrators
are better equipped to discover an issue before it impacts the user community.
Make sure to define the monitoring activities that administrators will perform on a periodic basis, as
well as the tools that will be used. In addition, determine which reports will be made available to
management.
A variety of built-in and customizable reports exist within the Citrix products so that administrators
can track trends, effectively plan capacity, and address auditing requirements. In addition,
troubleshooting is typically minimized when administrators fully utilize the tools integrated into the
Platinum edition, as well as other third party tools.
It is recommended that support staff and administrators involved in implementation review the
product documents, articles, and guides to support, manage and administer the environment. All of
these documents are available from the Citrix Product Documentation Library
(http://support.citrix.com/proddocs/index.jsp) or on the Citrix Knowledge Base
(http://support.citrix.com).
The remaining sections in this section identify the maintenance tasks (daily, weekly, yearly and
preventative) required to support each component of the XenDesktop Platinum edition.
XenDesktop Operations
This section covers the regular maintenance and upkeep involved in a XenDesktop
environment.
Overview
Several tasks need to be performed to ensure a stable, scalable Citrix XenDesktop platform.
The team responsible for supporting and managing the Citrix XenDesktop infrastructure
should perform regular tasks that should be incorporated into the existing standard
operating procedures. These are usually broken down into daily, weekly or yearly tasks.
13
Periodic Tasks
Daily Periodic Tasks
The following table outlines the necessary tasks that should be undertaken by the
appropriate Citrix XenDesktop administrators on a daily basis:
Daily Tasks Citrix XenDesktop
Checking of the event logs on all Citrix XenDesktop (Desktop Delivery
Event log checking
Controller) servers including Windows System, Application and Error logs.
Checking of the Citrix XenDesktop alerts in Desktop Studio needs to be
Citrix XenDesktop Alerts
performed at least once per day to ensure no issues have occurred with the
Citrix XenDesktop environment.
Checking of Citrix XenDesktop specific application logs including the Pool
Check Citrix XenDesktop
Management Logs. To assist with troubleshooting efforts, refer to
logs
Comprehensive List of Event Log Messages for XenDesktop on
http://support.citrix.com/article/CTX119978
Test Virtual Desktop
Simulate a connection to ensure access to Desktop Groups (Pooled and
Access
Assigned) is available to users.
14
Preventative Maintenance
As a part of your preventative maintenance routine for your Citrix XenDesktop
environment, Citrix Xnapshot for XenDesktop should be run on regular three month
intervals. This tool collects a wealth of information about the underlying system and its
configuration, such as BIOS information, registry information, device drivers, Windows
services, installed hotfixes, Citrix binaries, and Citrix XenDesktop farm information.
Citrix recommends that the following key Microsoft Windows services be monitored on all
of the Citrix XenDesktop (Desktop Delivery Controller) servers to ensure reliability.
Citrix XenDesktop Services to be Monitored
Citrix Desktop Delivery Controller Service
Citrix Diagnostic Facility COM Server
Citrix Management Server
Citrix MFCOM Service
Citrix Pool Management Service
Citrix Services Manager
Citrix XTE Server
IPSEC Services
Remote Procedure Call (RPC)
Server
Windows Management Instrumentation Driver Extensions
Workstation
15
16
Hotfixes
For hotfixes, backups of affected infrastructure (i.e. database, registry, etc) should be
made. Then half of the controllers should be updated and observed for several days. Should
no conflicts arise, the rest of environment may be updated.
XenApp Operations
This section covers the regular maintenance and upkeep involved in a XenApp environment
Overview
Several tasks need to be performed to ensure a stable, scalable Citrix XenApp platform.
The team responsible for supporting and managing the Citrix XenApp infrastructure should
perform regular tasks that should be incorporated into the existing standard operating
procedures. These are usually broken down into daily, weekly or yearly tasks.
Periodic Tasks
Daily Periodic Tasks
The following table outlines the necessary tasks that should be undertaken by the
appropriate Citrix XenApp administrators on a daily basis:
Delete Contents
Event log checking
Reboot schedule checking
Citrix XenApp Alerts
Suggested daily Citrix
XenApp commands to be
run
Test Application Access
Checking of the event logs on all Citrix XenApp servers including Windows
System, Application and Error logs.
All Citrix XenApp servers are rebooted on a regular basis as part of an
automated process. Ensuring the reboot of the servers has been successful is
essential to maintain server health and performance.
Checking of the Citrix XenApp server alerts in the Access Management
Console needs to be performed at least once per day to ensure no issues have
occurred with the XenApp environment.
Qfarm /load - to check that the load of the Citrix XenApp servers are
reporting correctly
Qfarm /zone - to confirm that the correct Zone Data collector is assigned
Qfarm /online - to confirm all Citrix XenApp servers are online
Simulate an ICA connection to ensure key applications are available to users.
17
18
Preventative Maintenance
Citrix recommends that the following key Microsoft Windows services be monitored on all
of the Citrix XenApp servers to ensure reliability.
Citrix XenApp Services to be Monitored
Citrix Client Network
Citrix Diagnostic Facility COM Server
Citrix Encryption Service
Citrix Health Monitoring and Recovery
Citrix Independent Management Architecture
Citrix MFCOM Service
Citrix Print Manager Service
Citrix Services Manager
Citrix SMA Service
Citrix Streaming Service
Citrix WMI Service
Citrix XTE Server
Print Spooler
Server
Remote Desktop (Terminal) Services
Citrix Systems Monitoring Agent
Application Updates\Installs
19
3. Upon satisfying testing requirements the changes are then duplicated in the
production farm but assigned only to a specific pre-production subset of users for
further validation testing.
4. When proven in pre-production changes then may be signed off on and rolled out to
the rest of the users.
For additional information on installing and publishing applications in XenApp please refer
to Citrixs eDocs - Publish a resource using the Publish Application wizard.
Hotfixes
The general hotfix recommendations still standing XenApp hotfix updates should be first
applied to the Zone Data Collector (ZDC), backups of the ZDC, the XML broker, and then
the rest of member servers in this order. This ensures against accidental elections or
undesired farm reactions from occurring. For more info reference CTX120842
Printing
It is recommended that environments leverage Citrixs Universal Print driver. In the instance
additional printer drivers are still required the driver should first be installed in an isolated
test environment. Be sure to ensure to test the printer when it is out of paper, offline, as well
as to stress test the printer leveraging the Citrix StressPrinters 1.3 application (CTX109374)
PVS Operations
This section covers basic maintenance involved in a Provisioning Server environment.
Overview
Several tasks need to be performed to ensure a stable, scalable Citrix Provisioning Services
platform.
The team responsible for supporting and managing the Citrix Provisioning Services
infrastructure should perform regular tasks that should be incorporated into the existing
standard operating procedures framework. These are usually broken down into daily, weekly
or yearly tasks.
Periodic Tasks
Daily Periodic Tasks
The following table outlines the necessary tasks that should be undertaken by the
appropriate Citrix Provisioning Services administrators on a daily basis:
20
Confirm DHCP, TFTP (or PXE, if applicable) and Streaming services are
functional.
21
Preventative Maintenance
Citrix recommends that the following key Microsoft Windows services be monitored on all
of the Citrix Provisioning Services servers to ensure reliability.
Citrix Provisioning Services to be Monitored
Citrix PVS Soap Server
Citrix PVS Stream Service
Citrix PVS TFTP Service
Citrix PVS Two-Stage Boot Service
HTTP SSL (This is a service dependency for Citrix PVS Soap Server service)
DHCP Service (Located on Microsoft DHCP Server/s)
22
vDisk Updates
Due to infrastructure requirements for Provisioning Services farms utilize a slightly modified
testing\updating environment arrangement. Instead of isolated environments testing and
production share several key infrastructure components. Each environment has its own
dedicated XenDesktop farm and collections but share networks and Active Directory
(utilizing differing organizational unit structures and group policies) with one another.
Testing, pre-production, and production devices are assigned separate collections but all
leverage the same vDisk. In this setup a master device gets maintained that vDisks are
created from. These vDisks are assigned to the various device collections as the testing flow
progresses. These differences aside general updating best practices still apply in the updating
of vDisks.
For high level updates the change process utilizes Provisioning Services versioning
capability. For incremental changes such as hotfixes and patches a new vDisk version is
created which the changes are applied to. These updates can also be automated utilizing
PVSs automated vDisk update process (Citrix eDocs). It is recommended that any changes
be applied to new versions are replicated on the master device for consistency.
More significant changes such as updating XenTools, NIC drivers, etc. require that a new
master vDisk be captured and tested. The steps below walk through the process:
23
3. After successful testing and approval, the vDisk is then assigned to a PreProduction subset of users for final validation testing prior to implementation.
4. When shown to be stable, this new vDisk is assigned to the rest of the production
end users.
24
Appendix
Appendix A XenApp Delegated Rights
Console Permission
Tier-1
Farm Node
Farm Management
Edit All Other Farm Settings
Edit Configuration Logging
Settings
Edit Zone Settings
View Farm Management
Administrators Node
Administrators
Edit centrally configured
Web Interface sites
Log on to Management
Console
View Administrators
Applications Node
Published Applications
Publish Applications and
Edit Properties
View Published Applications
and Content
Servers
Terminate Processes
Sessions
Connect Sessions
Disconnect Users
Reset Sessions
Send Messages
Tier-2
Tier-3
Tier-4
25
Tier-1
Tier-2
Tier-3
Tier-4
For further information about delegated rights within a XenApp Farm, please refer to
eDocs - Delegating Tasks to Custom Administrators.
26
Support Tier
Tier-1
Tier-2
Tier-3
Tier-4
For further information about delegated rights within a XenDesktop Site, please refer to
eDocs XenDesktop Delegated Administration.
Support Tier
Tier-1
Tier-2
Tier-3
Tier-4
For further information about delegated rights within a Provisioning Services Farm, please
refer to eDocs Provisioning Services Managing Administrative Roles.
Support Tier
Tier-1
Tier-2
Tier-3
Tier-4
For further information about delegated rights within a Provisioning Services Farm, please
refer to CTX130420 XenServer 6.0 Administrators Guide (see chapter Role Based Access
Control).
27
Details
1
2
3
4
5
6
7
8
9
10
Incident
Personal
Information
11
Question
Name
Organization
Contact Number /Email
Contact Preference (Phone/Mail)
Resident Office
Current Location
Current Time Zone
Severity of the incident
# of affected users
Name of affected application
Description of the incident
Troubleshooting performed
Answer
28
Environment
Answer
29
Product Versions
Product
XenDesktop
XenApp
Provisioning Services
Version
5.0 / 5.5 / 5.6
5.0 / 6.0 / 6.5
6.x
Revision History
Revision
1.0
Change Description
Finalized Document
Updated By
Thomas Berger, Charles Wright
Date
May 30, 2012
About Citrix
Citrix Systems, Inc. (NASDAQ:CTXS) is a leading provider of virtual computing solutions that help
companies deliver IT as an on-demand service. Founded in 1989, Citrix combines virtualization,
networking, and cloud computing technologies into a full portfolio of products that enable virtual
work styles for users and virtual datacenters for IT. More than 230,000 organizations worldwide rely
on Citrix to help them build simpler and more cost-effective IT environments. Citrix partners with
over 10,000 companies in more than 100 countries. Annual revenue in 2011 was $2.20 billion.
2012 Citrix Systems, Inc. All rights reserved. Citrix, Access Gateway, Branch Repeater,
Citrix Repeater, HDX, XenServer, XenApp, XenDesktop and Citrix Delivery Center
are trademarks of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered
in the United States Patent and Trademark Office and in other countries. All other trademarks and
registered trademarks are property of their respective owners.
30