Activer la signature de fichier ICA
Pris en charge sur : ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
Description
Utilisez cette stratégie pour activer et configurer la signature de fichier ICA.
Registre
HKLM
Software\Policies\Citrix\ICA Client\ICA File Signing Cette stratégie définit plusieurs valeurs de registre :
version Activé :
version = 1 Désactivé :
version = (supprimée) enabled Activé :
enabled = 1 Désactivé :
enabled = (supprimée) citrixparam1 Unsigned Parameters Activé :
citrixparam1 = Border Désactivé :
citrixparam1 = (supprimée) citrixparam2 Unsigned Parameters Activé :
citrixparam2 = BackgroundColor Désactivé :
citrixparam2 = (supprimée) citrixparam3 Unsigned Parameters Activé :
citrixparam3 = TextColor Désactivé :
citrixparam3 = (supprimée) citrixparam4 Unsigned Parameters Activé :
citrixparam4 = DesiredColor Désactivé :
citrixparam4 = (supprimée) citrixparam5 Unsigned Parameters Activé :
citrixparam5 = Client-Type Désactivé :
citrixparam5 = (supprimée) citrixparam6 Unsigned Parameters Activé :
citrixparam6 = EnableIPCSessionControl Désactivé :
citrixparam6 = (supprimée) citrixparam7 Unsigned Parameters Activé :
citrixparam7 = IconIndex Désactivé :
citrixparam7 = (supprimée) citrixparam8 Unsigned Parameters Activé :
citrixparam8 = IconPath Désactivé :
citrixparam8 = (supprimée) citrixparam9 Unsigned Parameters Activé :
citrixparam9 = TransportDriver Désactivé :
citrixparam9 = (supprimée) citrixparam10 Unsigned Parameters Activé :
citrixparam10 = DesiredHRes Désactivé :
citrixparam10 = (supprimée) citrixparam11 Unsigned Parameters Activé :
citrixparam11 = DesiredVRes Désactivé :
citrixparam11 = (supprimée) citrixparam12 Unsigned Parameters Activé :
citrixparam12 = ScalingMode Désactivé :
citrixparam12 = (supprimée) citrixparam13 Unsigned Parameters Activé :
citrixparam13 = TWIMode Désactivé :
citrixparam13 = (supprimée) citrixparam14 Unsigned Parameters Activé :
citrixparam14 = ConnectionBar Désactivé :
citrixparam14 = (supprimée) citrixparam15 Unsigned Parameters Activé :
citrixparam15 = RTWIMode Désactivé :
citrixparam15 = (supprimée) disableCheckForTrustedLaunchers Unsigned Parameters Activé :
disableCheckForTrustedLaunchers = 0 Désactivé :
disableCheckForTrustedLaunchers = (supprimée) REG Builder
BETAConfigurez l'état et les éléments pour générer les sorties .reg, PowerShell, Intune et SCCM.
Ces exports reproduisent l'effet registre de la stratégie. Modifier le registre directement n'équivaut pas à appliquer la GPO via la console (pas de gpupdate, pas de suivi centralisé). Testez avant la production ; HKLM nécessite des droits administrateur.
Fichier .reg
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Activer la signature de fichier ICA
; State: Enabled
; Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
[HKEY_LOCAL_MACHINE\Software\Policies\Citrix\ICA Client\ICA File Signing]
"version"=dword:00000001
"enabled"=dword:00000001
"promptUser"=dword:00000000
"disableCheckForTrustedLaunchers"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters]
"citrixparam1"="Border"
"citrixparam2"="BackgroundColor"
"citrixparam3"="TextColor"
"citrixparam4"="DesiredColor"
"citrixparam5"="Client-Type"
"citrixparam6"="EnableIPCSessionControl"
"citrixparam7"="IconIndex"
"citrixparam8"="IconPath"
"citrixparam9"="TransportDriver"
"citrixparam10"="DesiredHRes"
"citrixparam11"="DesiredVRes"
"citrixparam12"="ScalingMode"
"citrixparam13"="TWIMode"
"citrixparam14"="ConnectionBar"
"citrixparam15"="RTWIMode"
"disableCheckForTrustedLaunchers"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates]
; List values: enter one value per line in the builder UI.PowerShell
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'version' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'enabled' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'promptUser' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'citrixparam1' -Value 'Border' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam2' -Value 'BackgroundColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam3' -Value 'TextColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam4' -Value 'DesiredColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam5' -Value 'Client-Type' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam6' -Value 'EnableIPCSessionControl' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam7' -Value 'IconIndex' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam8' -Value 'IconPath' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam9' -Value 'TransportDriver' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam10' -Value 'DesiredHRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam11' -Value 'DesiredVRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam12' -Value 'ScalingMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam13' -Value 'TWIMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam14' -Value 'ConnectionBar' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam15' -Value 'RTWIMode' -Type String
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates'
New-Item -Path $path -Force | Out-Null
# List values: enter one value per line in the builder UI.Intune XML
Aucune correspondance directe Policy CSP / OMA-URI pour cette stratégie. Utilisez l'onglet Intune Remediation, ou importez l'ADMX dans Intune.Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
# HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates: List values: enter one value per line in the builder UI.
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'version' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'enabled' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam1' -Expected 'Border' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam2' -Expected 'BackgroundColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam3' -Expected 'TextColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam4' -Expected 'DesiredColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam5' -Expected 'Client-Type' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam6' -Expected 'EnableIPCSessionControl' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam7' -Expected 'IconIndex' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam8' -Expected 'IconPath' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam9' -Expected 'TransportDriver' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam10' -Expected 'DesiredHRes' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam11' -Expected 'DesiredVRes' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam12' -Expected 'ScalingMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam13' -Expected 'TWIMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam14' -Expected 'ConnectionBar' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam15' -Expected 'RTWIMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'disableCheckForTrustedLaunchers' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'promptUser' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'disableCheckForTrustedLaunchers' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'version' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'enabled' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'promptUser' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'citrixparam1' -Value 'Border' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam2' -Value 'BackgroundColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam3' -Value 'TextColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam4' -Value 'DesiredColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam5' -Value 'Client-Type' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam6' -Value 'EnableIPCSessionControl' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam7' -Value 'IconIndex' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam8' -Value 'IconPath' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam9' -Value 'TransportDriver' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam10' -Value 'DesiredHRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam11' -Value 'DesiredVRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam12' -Value 'ScalingMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam13' -Value 'TWIMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam14' -Value 'ConnectionBar' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam15' -Value 'RTWIMode' -Type String
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates'
New-Item -Path $path -Force | Out-Null
# List values: enter one value per line in the builder UI.SCCM CI
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
# HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates: List values: enter one value per line in the builder UI.
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'version' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'enabled' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam1' -Expected 'Border' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam2' -Expected 'BackgroundColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam3' -Expected 'TextColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam4' -Expected 'DesiredColor' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam5' -Expected 'Client-Type' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam6' -Expected 'EnableIPCSessionControl' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam7' -Expected 'IconIndex' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam8' -Expected 'IconPath' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam9' -Expected 'TransportDriver' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam10' -Expected 'DesiredHRes' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam11' -Expected 'DesiredVRes' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam12' -Expected 'ScalingMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam13' -Expected 'TWIMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam14' -Expected 'ConnectionBar' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'citrixparam15' -Expected 'RTWIMode' -Kind String)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters' -Name 'disableCheckForTrustedLaunchers' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'promptUser' -Expected 0 -Kind DWord)
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing' -Name 'disableCheckForTrustedLaunchers' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Activer la signature de fichier ICA
# State: Enabled
# Supported on: ADMX Migrator a rencontré une stratégie qui ne dispose pas d'une valeur supportedOn.
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'version' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'enabled' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'promptUser' -Value 0 -Type DWord
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameters'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'citrixparam1' -Value 'Border' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam2' -Value 'BackgroundColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam3' -Value 'TextColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam4' -Value 'DesiredColor' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam5' -Value 'Client-Type' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam6' -Value 'EnableIPCSessionControl' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam7' -Value 'IconIndex' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam8' -Value 'IconPath' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam9' -Value 'TransportDriver' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam10' -Value 'DesiredHRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam11' -Value 'DesiredVRes' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam12' -Value 'ScalingMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam13' -Value 'TWIMode' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam14' -Value 'ConnectionBar' -Type String
Set-ItemProperty -Path $path -Name 'citrixparam15' -Value 'RTWIMode' -Type String
Set-ItemProperty -Path $path -Name 'disableCheckForTrustedLaunchers' -Value 0 -Type DWord
$path = 'HKLM:\Software\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates'
New-Item -Path $path -Force | Out-Null
# List values: enter one value per line in the builder UI.