- Prepare a dedicated Windows 2016 Server for the Central Store and SSPR Web Service
- Create 2 Active Directory Accounts > DataProxyAccount and SelfServiceAccount
- DataProxyAccount will not have any priviledges
- Give SelfServiceAccount Delegation using the self-service-password-reset-1.1.x.pdf (page 29)
- Create Folder and Foldershare using CTX217143 - Self-Service Password Reset Central Store Creation Tool
- Install SSPR & Import and Link Certificate on IIS & Configure SSPR
- Create AD Security Group and add users that will be able to change password
- Be sure to check “User cannot change password” checkbox is cleared on the user accounts
- Configure Storefront Authentication method.
Users should record their Security Questions after logging on to their Storefront page on Tasks tab.
https://support.citrix.com/article/CTX224244/how-do-i-deploy-selfservice-password-reset-for-the-first-time
https://docs.citrix.com/en-us/self-service-password-reset/current-release/self-service-password-reset-1.1.x.pdf