启用 ICA 文件签名

使用此策略可启用并配置 ICA 文件签名。

支持的平台:
启用策略:
Registry PathValue NameValue TypeValue
Software\Policies\Citrix\ICA Client\ICA File SigningversionREG_DWORD1
Software\Policies\Citrix\ICA Client\ICA File SigningenabledREG_DWORD1
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam1REG_SZBorder
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam2REG_SZBackgroundColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam3REG_SZTextColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam4REG_SZDesiredColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam5REG_SZClient-Type
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam6REG_SZEnableIPCSessionControl
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam7REG_SZIconIndex
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam8REG_SZIconPath
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam9REG_SZTransportDriver
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam10REG_SZDesiredHRes
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam11REG_SZDesiredVRes
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam12REG_SZScalingMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam13REG_SZTWIMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam14REG_SZConnectionBar
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam15REG_SZRTWIMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned ParametersdisableCheckForTrustedLaunchersREG_DWORD0
禁用策略:
Registry HiveRegistry PathValue NameValue TypeValue
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File SigningversionREG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File SigningenabledREG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam1REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam2REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam3REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam4REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam5REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam6REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam7REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam8REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam9REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam10REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam11REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam12REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam13REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam14REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam15REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned ParametersdisableCheckForTrustedLaunchersREG_DWORD

可信证书:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates
Value Namecertificate{number}
Value TypeREG_SZ
Default Value
安全策略:


  1. 仅允许签名的启动(更安全)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
    Value NamepromptUser
    Value TypeREG_DWORD
    Value0
  2. 在进行未签名的启动时提示用户(不安全)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
    Value NamepromptUser
    Value TypeREG_DWORD
    Value1

禁用可信 Launcher
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
Value NamedisableCheckForTrustedLaunchers
Value TypeREG_DWORD
Default Value0
True Value1
False Value0

receiver.admx

管理模板(计算机)

管理模板(用户)