Jump to content
Welcome to our new Citrix community!
  • 0

Microsoft new edge, ready for Citrix terminal serves?


Sondre Andersen1709159438

Question

Hi!

Anyone here tested Microsoft new edge in Citrix environment ?

What is the official statement from Citrix, is it supported?

 

Please share important gpo settings, tunings if you have.

 

We are planning to set this in production quite fast when Microsoft release enterprise version of new edge ( have not seen it yet ..)
 

Please share info if you have regarding enterprise official version of edge..

Link to comment

11 answers to this question

Recommended Posts

  • 0

Hi,

 

As the new Edge browser is supported on Windows 7 through 10 and Windows Server 2008 R2 through 2019, I expect it to be supported in Citrix setups as well.

 

I have had it running in Citrix for a while now. Currently there is an "issue" with Citrix API hooks which has to be disabled for the msedge.exe process, otherwise Edge will not start correctly.

 

James Kindon has a good article about it here:
https://jkindon.com/2019/09/17/deploying-brave-and-microsoft-edge-dev-browsers-in-citrix-cvad-environments/

I am currently writing a blog about, both installation and configuration (basic via GPO) of the new Edge browser I am hoping to have it ready within the next couple of days. Basically I am recommending to apply the Edge security baseline GPO and go from there. Keep in mind that the current security baseline GPO is a draft, so expect changes from Microsoft.

 

More info on the security baseline GPO:
https://blogs.windows.com/msedgedev/2019/12/18/security-baseline-draft-edge-79/

Link to comment
  • 0

Disabling the Citrix API hooks works great, however I noticed if I browse to another Citrix Storefront to launch an application (like our users do) and click on said application (In this instance our Medical Record) Citrix Receiver never loads.  If I use Firefox, Citrix Receiver loads the application as expected.  Has anyone else encountered this?

Link to comment
  • 0

Disabling all hooks via CtxUvi is not a great way to make the browser work.  In a DoD environment, it also disables Smart Card hooking so no authentication may take place.  The only hook that I've found necessary to disable is SfrHook.  Using the CAX Tool ( https://support.citrix.com/article/CTX222592 ) makes it easy to configure.  You'll also see that chrome and firefox are already configured for that hook exclusion, and knowing new Edge is based on chromium makes perfect sense in this scenario. 

Link to comment
  • 0
On 4/16/2020 at 6:55 PM, Chad Pyle1709158856 said:

Disabling all hooks via CtxUvi is not a great way to make the browser work.  In a DoD environment, it also disables Smart Card hooking so no authentication may take place.  The only hook that I've found necessary to disable is SfrHook.  Using the CAX Tool ( https://support.citrix.com/article/CTX222592 ) makes it easy to configure.  You'll also see that chrome and firefox are already configured for that hook exclusion, and knowing new Edge is based on chromium makes perfect sense in this scenario. 

 

I can confirm that only disabling the SfrHook for msedge.exe works on a published desktop with CVAD 1912LTSR on Server 2016.

I only added this key to my master image: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\SfrHook\msedge.exe

Link to comment
  • 0
On 4/20/2020 at 1:16 PM, Ard-Jan Verhage said:

 

 

I only added this key to my master image: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\SfrHook\msedge.exe

 

Using 6.5, if i exempt msedge.exe from all hooks it works fine, But disabling from just SfrHook doesn't allow it to load. 

In fact... I've excluded msedge.exe and nacl64.exe from all hooks that the CAX tool would allow me (plus reboot) and Edge still doesnt load. 

 

Does anyone have any further tips please? We need the "Smart Card Hook" working!

 

Thanks.  

Link to comment
  • 0
4 minutes ago, Tim Burgess1709162136 said:

 

Using 6.5, if i exempt msedge.exe from all hooks it works fine, But disabling from just SfrHook doesn't allow it to load. 

In fact... I've excluded msedge.exe and nacl64.exe from all hooks that the CAX tool would allow me (plus reboot) and Edge still doesnt load. 

 

Does anyone have any further tips please? We need the "Smart Card Hook" working!

 

Thanks.  

Have you checked this blog? (http://virtualwarlock.net/microsoft-edge-in-citrix/) It has some fairly recent edits that may be helpful

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...