IMS connectivity guide (accessible version)
Updated 5 April 2024
Applies to England
1. Overview
This document details the necessary steps and procedures required for organisations to access the Investment Management System (IMS). Organisations accessing IMS will fall into one of the following categories:
- Registered providers: organisations who are registered with the Homes England regulator. Provider codes follow the format A# # # #, C# # ##, L# # # #, LH# # # #, ##AA
- Unregistered providers: organisations who are not registered. Organisation codes follow the format NP# # # #
- Local authorities: some local authorities have read only access to view schemes within their local authority area Bids for funding are not allowed using this log-in. A three-digit numerical code is provided for each local authority.
2. Client requirements
The following is required for connection to the IMS system:
- internet connectivity 鈥 specifically on port 443
- a supported browser 鈥 for example: IE11, Edge, Chrome or Firefox
- Citrix client
3. Citrix client
New users of IMS will need to install a Citrix client. If your organisation already uses other Citrix applications, then you may already have a Citrix client installed on your computer.
Whilst you don鈥檛 have to install the latest version of the Citrix client before accessing IMS it鈥檚 recommended to install the latest version for improvements and security updates.
3.1 Install the Citrix client from the homepage
If you are accessing IMS from a tablet or mobile device, you can install the Citrix Workspace App from the relevant App Store 鈥 for example, Google Play Store or Apple Store 鈥撀 by searching for 鈥淐itrix Workspace鈥.
- Open and click on Citrix.com
- Click on Citrix Workspace app 20xx for Windows (note: this number will change periodically when Citrix release new versions). Further down the page there is a link for a 鈥淲orkspace app for Mac鈥 for any Apple Mac users to download and install the latest version.
- Click on 鈥楧ownload Citrix Workspace app鈥 for Windows which will download a file named CitrixWorkspaceApp.exe
- Once CitrixWorkspaceApp.exe has downloaded double click to install it.
Follow the wizard steps:
- You鈥檒l see a 鈥榃elcome to Citrix Workspace鈥 box. Click the start button.
- This will take you to the Licence Agreement page. You鈥檒l need to read the agreement and tick the 鈥淚 accept the license agreement鈥 then click Next.
- Click Install 鈥 App protection is not required so you don鈥檛 need to enable it. This will then go through to the installation process.
- After the installation is complete, click 鈥楩inish鈥. If you click on 鈥楢dd Account鈥, you鈥檒l be taken to another screen 鈥 click close as we don鈥檛 use this feature.
Alternatively save the installation file if you wish to deploy the Citrix client using your own software management system.
4. Connecting to IMS using the Citrix Gateway
IMS uses Citrix Gateway which simplifies the connectivity requirements. The website is accessed on port 443 which is the default SSL port for secure connections (HTTPS).
The IMS applications are then 鈥渢unneled鈥 through to the same address on port 443 using a secure connection from the Citrix client (ICA/SSL), with the Citrix client configured to automatically use your web browser鈥檚 connection settings.
In most cases the only requirement is that access to the above address is allowed on port 443. Because this is the default HTTPS port, it is envisaged that most organisations will already have this open.
4.1 ICA and SSL
HTTPS is HTTP wrapped in SSL (the encryption protocol) and is typically delivered over port 443. As port 443 is the official registered port for HTTPS any traffic over port 443 is assumed to be HTTPS by firewalls and proxy servers.
ICA/SSL is a Citrix-proprietary protocol used for secure communications between Citrix clients and servers, on port 443. Because SSL is the encryption protocol, firewalls, routers, proxies and so on between the client and the server cannot 鈥渟ee鈥 what is inside the protocol. Therefore, firewalls and proxies do not really differentiate between ICA/SSL and HTTPS, and typically try to treat ICA/SSL as HTTPS.
4.2 The connection process
Follow these steps:
- The user connects to the website and logs in. This should be accessible in most cases as it鈥檚 the default HTTPS port and the Fully Qualified Domain Name is resolvable by any external DNS, like any other external website.
- The user launches an application and a Citrix ICA file is automatically generated and passed to the Citrix client. The ICA file contains entries instructing the client to connect to https://secure.homesengland.org.uk on port 443 using the client鈥檚 default web browser settings.
- The client computer will try to resolve 鈥渟ecure.homesengland.org.uk鈥 to an IP address before attempting to connect using the client computer鈥檚 default web browser connection settings.
- If the default web browser connection settings allow direct internet access, you should not experience any problems connecting to the IMS applications.
- If the default web browser connection settings route internet traffic through a proxy server or firewall, most proxy servers and firewalls should allow the connection as they will try to treat ICA/SSL the same as HTTPS traffic. However, in some cases there may be issues caused by proxy servers/firewalls preventing or interrupting ICA/SSL traffic due to the way they are configured to handle HTTPS traffic.
If you are having connection problems, please see troubleshooting.
5. IMS application access
- On your computer open
- Enter your Citrix username and password supplied by Homes England, which will then display the following page.
- Click on the icon to launch IMS Live. The following page will be displayed as it connects to the application using the Citrix Workspace app 鈥 and may also display a prompt for Add Account.
- When the application has been launched, enter your IMS User ID and Password.
- If the Add Account prompt is displayed 鈥 tick the box Do not show this window automatically at sign-in to prevent this popping up on every login, then click Close.
5.1 聽Firewall and browsers
Depending which browser you are using it might download the launch.ica file but not automatically open the application 鈥 the image below is from Chrome where it has downloaded the file but needs you to click on Open or Always open files of this type to run IMS.
If using Internet Explorer, you might see an additional prompt as per the examples below 鈥 you鈥檒l need to click on 鈥淩un control鈥 or 鈥淎llow鈥 for IMS to launch.
Depending on your computer configuration you might have personal firewall software that could also prompt you to allow access when launching the IMS application.
5.2 Accessing from a tablet or mobile device (Apple or Android)
- Install 鈥淐itrix Workspace鈥 from the App Store on the device.鈥2. Open the Citrix Workspace app. There should be a 鈥+鈥 button to add an account 鈥 click on this.
- At the prompt to enter email address or Store URL type in https://secure.homesengland.org.uk then there should be an option underneath 鈥楢dd account type as Web Interface鈥 鈥 this needs enabling as it鈥檚 a web interface only site.
- Click Continue which will display the IMS login screen in the app (this will also save the connection for future use).
- Enter your Citrix ID and password which will take you to the screen with the Connectivity Test and IMS Live icons.
- Click on IMS Live - this will launch IMS in the Citrix Workspace app itself.
- With it being on a tablet/mobile device it will show you the touchscreen Gestures at launch for using within the app (change to keyboard/pointer/zoom etc.) 鈥 if you click anywhere on the blank screen it will remove the Gestures box and you鈥檒l be able to see the IMS Login box.
- Login to IMS with your IMS User ID and password. There should be a drop down arrow at the top of the screen where you can also change to keyboard, pointer, zoom and access the Gestures menu.
6. High DPI settings
Depending on your individual display configuration you may need to change the Citrix Workspace App鈥檚 default High DPI settings 鈥 single displays with high resolution and multiple displays with mixed screen resolutions and scaling will require a change to the setting for the application to display optimally.
In some cases, you鈥檒l see a blank box instead of the IMS application or are not able to click onto menus and enter text, or the application will display very small text 鈥 these can be resolved by following the steps below to allow Citrix to handle the scaling.
7. If you need to change the High DPI setting
- With the聽IMS聽application open, click on the Taskbar as below and right click on the first Citrix icon (blue and white circle).
- From the menu click on Advanced Preferences. Note: where there are two Citrix icons 鈥 if you right click on the second one, you鈥檒l only see menu options for 鈥淥pen鈥 and 鈥淓xit鈥.
- From the Advanced Preferences window that is displayed click on High DPI.
- The default setting is 鈥淟et the operating system scale the resolution鈥 鈥 click on Yes to change this to allow the Citrix client to handle the scaling then click on Save (you can then close the Advanced Preferences window). The new setting will apply next time you launch an application.
Note: the 鈥淣o, use the native resolution鈥 option is generally not recommended as this won鈥檛 scale and can make the text very small.
8. Changing your Citrix password
You will be prompted to change your Citrix password 7 days before it expires. You can also change it anytime.
Your Citrix password requires changing every 60 days, it must be a minimum of 8 characters in length and contain at least three of the following: upper case, lower case, number, special character. You cannot reuse the last 5 passwords.
To change your password, follow these steps:鈥
- In the top right-hand corner of the website click on the settings link.
- Click on Account Settings.
- Click on the Change Password.
- Click Continue to the warning that you鈥檒l need to logoff the website and login again after you have changed your password.
- The Change Password box will now be displayed. Enter your old and new passwords as prompted then click OK.
- Click OK to the confirmation that your password has been changed.
- You鈥檒l be automatically logged off the website after 30 seconds or you can click the Complete Logoff button 鈥 you鈥檒l then need to close the browser and login again with your new password.
9. Printing from IMS
When you login to the IMS application, only your default printer will be mapped. If you need to print to a different printer, you will need to change your default printer before logging into the application.
The following workaround will help with some of the known issues such as printing dots where the text should be, reversed text, hashes instead of numbers etc.
9.1 Print to a PDF writer
If you have a PDF writer already installed on your computer, you will need to set it as your default printer when you print reports from IMS.
When prompted, select the location and filename of where you want to save the PDF file. Once it has saved it may automatically open the report, if not, open the file from where you saved it. If the report looks OK, you can then print this as a normal printout.
However, some IMS reports may still have the text mirrored. If this occurs, you will need to make a change to the PDF writer properties as below.
To do this, you may have to ask your IT department to help as it may require administration privileges.
10. Troubleshooting
If the following solutions don鈥檛 resolve the issue, or you would like any help, contact the Homes England Service Desk.
10.1 Proxy or firewall configurations
You may see error messages such as 鈥淭here is no Citrix SSL server configured on the specified address鈥 or 鈥淭he Citrix SSL server you have selected is not accepting connections鈥.
If the Citrix client connection fails, verify that SSL tunneling is allowed for this address. ICA/SSL traffic requires a single continuous SSL connection between the client and server. For example: proxy servers allowing the CONNECT method (SSL tunneling) and firewalls in forwarding mode ensure that connections are opened directly between the client and the Citrix Gateway.
Some proxy servers allow SSL tunneling by default, but some require it enabling. Similarly, verify that no restrictions are placed on ICA/SSL traffic such as time-outs on sessions, including idle, absolute, and data traffic time-outs.
Alternatively, allow to bypass the proxy/firewall and give direct internet access to this address.
10.2 Citrix client cannot resolve the name 鈥渟ecure.homesengland.org.uk鈥
If you can access the website but the application fails to launch, verify that the client computer can directly resolve the address 鈥渟ecure.homesengland.org.uk鈥. This issue can occur when the client computer is not able to resolve external addresses itself, such as when a proxy server is used for internet access, and the proxy server performs all external DNS resolution.
10.3 If you receive a prompt to save an .ICA file
The default action might be to download the .ICA file then you can click on the downloaded file to run it 鈥 they normally give an option to 鈥淎lways open files of this type鈥 which will allow the聽IMS聽application to load automatically when you click on the聽IMS聽Live link in the future.
10.4 Nothing happens when you launch IMS
Make sure the 鈥.ICA鈥 file type is associated with 鈥淐itrix Connection Manager鈥.
10.5 聽If your version of the Citrix client contains a bug or is incompatible
For example, some early versions of the client contain several bugs with regards to proxy/SSL connections and can cause errors preventing connection.
If possible, upgrade the Citrix client to the latest version.
10.6 If your firewall software stops the connection to the Citrix client
Check any personal firewall software and allow the Citrix client access on port 443. 鈥
11. Help and support
For IMS support, contact the Homes England Service Desk.
Phone: 01908 353604 Email: servicedesk@homesengland.gov.uk
鈥