If you’ve ever been frustrated by the length of time it takes to get past the initial pre-logon screen on Citrix Web Interface or Storefront then a simple change can rectify this issue.
Quite often the issue is caused by the web interface or storefront server making a ssl crl certificate check to Verisign and if the web interface does not have access to the internet this process will time out. Now whilst its important to allow web based apps and sites to perform crl checking for financial sites or sites that hold personal data its not really necessary. In order to disable crl checking you need to edit a single file and add a single line of code.
Firstly you need to check which version of ASP your Storefront or Web Interface is using. You can do this by opening the IIS management console and clicking on the application pools. You then right click on the relevent application and basic settings.
Once you know the version delve into c:\windows\microsoft .net/framework\%versionnumber%.
Then edit the aspnet.config and add the line <generatePublisherEvidence enabled=”false” /> so that the config file looks like this.
Also change the same asp net.config in the c:\windows\microsoft .net\framework64\%versionnumber%
Once saved the changes to the file open up the command prompt and type iisreset to restart IIS and allow the changes to take effect.
The difference this small change makes can be seen easily in this short video that I have created.
Author : Dale Scriven