Citrix Federated Authentication Service (FAS) with Luna HSM - Integration Guide

Citrix Federated Authentication Service (FAS) is a privileged component designed to integrate with Active Directory Certificate Services. It dynamically issues certificates for users, allowing them to log on to an Active Directory environment as if they had a smart card. Thales Luna HSM is used to generate and store the FAS server’s Authorization/Registration Authority (RA) key. The benefits of integrating Citrix FAS with Thales Luna HSM include:

• Full life cycle management of keys.
• Access to the HSM audit trail.
• Significant performance improvements by off-loading cryptographic operations from servers.