Which type of certificate should a Citrix Administrator request so that a client endpoint can communicate with StoreFront over an encrypted connection?

• A. Server
• B. Client
• C. Intermediate
• D. Root

Answer: (A)

Securing communication with StoreFront over HTTPS requires a server certificate. This certificate is issued to the StoreFront server’s domain (its FQDN) and is installed on the StoreFront machine to present during the TLS handshake. The client uses this server certificate to verify the server’s identity and to establish an encrypted channel for all data exchanged.

A client certificate would be used only if you were implementing mutual TLS, where the server also verifies the client’s identity. That’s not typical for standard StoreFront access, so it’s not what’s needed here. Root certificates are trusted anchors used to validate the server’s certificate, and intermediate certificates are part of the trust chain; they’re involved in establishing trust but are not the certificate you bind to the StoreFront service itself.

So, the appropriate certificate to request-and-install on the StoreFront server to enable encrypted client communication is a server certificate.