1. CSG service running - The secure gateway runs as a service “Secure Gateway Service”. Launch the services MMC on the corresponding server and check if the “Secure Gateway Service” is running.
2. Start CSG service - Through the services MMC the “Secure Gateway Service” must be start.
3. Start CSG diagnostics - Launch the Citrix Secure Gateway diagnostics tool.
Watch the output to find the problem area.
4. Reinstall or renew certificates - When the CSG diagnostics identifies the SSL Certificates are invalid reinstall the certificates or renew the certificated when they are expired. In case private certificates are used verify the root certificate is installed and not expired.
5. Check if the IIS service is running - When the IIS service is not running the Web Interface is not accessible and the logon agent is not working. Launch the IIS manager MMC and check to see if the IIS service is running and if all the websites, particularly the Web Interface, are online.
6. Start IIS service - Start the IIS services if not running. Enable the websites of not running within IIS.
7. Check if the XML services are running - Check all the MetaFrame servers to see if the Citrix XML Service is running
8. Start XML Service - Start the Citrix XML Service if not running on the Citrix MetaFrame server. Start the IIS service and enable the website (default website) containing the Web Interface.
9. Launch the WIAdmin - By launching the Citrix Web Interface Console we can view and or change the secure gateway settings and Web Interface settings.
10. Consult IIS specialist - If you reach this state you have IIS running but the website is not functional. This could be caused by port conflicts or other faulty configured IIS setting. This document does not provide information for troubleshooting IIS. Consult Microsoft or IIS Specialist.
11. Reconfigure the Web Interface - Reconfigure the Web Interface farm settings and provide the correct Citrix servers for the farm. Reconfigure the Web Interface server side firewall settings and provide the correct secure gateway server and the STA servers.
12. Check if IIS is running on the STA servers - Launch the IIS manager MMC and check to see if the IIS service is running and if all the websites are online.
13. Start IIS Service - Start the IIS services if not running on the STA servers. Enable the websites if not running within IIS
14. Check if IIS Script path is accessible - Check if the default website containing the scripts path and if its accessible and has scripts only execute rights.
15. Set ACL’s - Set ACL’s on the scripts path and set scripts only execute permissions.
16. Consult Citrix specialist - Consult Citrix or a Citrix specialist for troubleshooting the secure gateway configuration.