XenMobile: Cannot login to the console, Authentication fails

Unable to login to the XenMobile console. Cannot check the LDAP connections/ bindings from the console. The users are not connecting from the devices. We get "Incorrect Credentials" error message on the devices...

AD Account Lockouts Due to Citrix PIN Password Caching

After a password change at ActiveDirectory, users are seeing account lockouts. XenMobile was causing these lockouts as the password cached with Citrix PIN was not updated...

udadmin -list -a shows incorrect license usage for XenMobile

After migrating from MDM 9 to XMS 10.X used license count exceeds the expected limit If you verify the checked out licenses using udadmin tool in licensing server, you should see licenses checked out for Used ID's as well as usernames. Steps: 1. Run the following command to change the directory t...

How to Disable Single Sign-On in NetScaler

This article describes how to disable Single Sign-On in NetScaler. Background In XenMobile, in some use cases the app may want to perform NTLM authentication of a user that was not used during enrollment. In such situation, the app uses Full Tunnel mode and so would like to send the credentials...

XenMobile - Deleting the certificate entries directly from the Database

When we try to upload new SSL cert on XenMobile server, it fails to to get uploadedbecause of present certificate and because of data corruption in DB we are not able to delete the old certificate from the XenMobile console so insuch scenario, we need to delete it from database directly. Note :...

CVE-2016-6877

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an...

Design/Logic Flaw

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an...

CVE-2016-6877

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an...

CVE-2016-6877

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an...

CVE-2016-6877

CVE-2016-6877 affects Citrix XenMobile Server prior to 10.5.0.24. The issue is described as allowing man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. The vendor notes that this was not considered a valid vulnerability becau...

PT-2017-9041 · Citrix · Citrix Xenmobile Server

Name of the Vulnerable Software and Affected Versions: Citrix XenMobile Server versions prior to 10.5.0.24 Description: The issue allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. However, the vendor reports that thei...

How to Integrate StoreFront and XenMobile when XenMobile is enabled with Domain and Certificate Based Authentication

This article will guide you with the steps to enable XenMobile server and StoreFront Server integration when XenMobile environment is enabled withCertificate + Domain based authentication. To achieve the above use case, you as an admin need to setup the following. 1. Configure/Enable XenMobile...

Enable XenMobile Enrollment of iOS and Android Devices with Azure AD as Identity Provider

With the latest version XenMobile server, you are provided with a new feature where an end user can use their Azure Active Directory credentials to enroll their Windows, iOS and Android devices to the XenMobile server. In this case Azure Active Directory will be the Identity provider and XenMobil...

XenMobile Rest API

XenMobile provides an extensive REST API that can be leveraged to extract data and provide it for business needs. This feature provides customers with the facility of calling XenMobile services using REST API. Instead of using XenMobile console, customers can call exposed services by using any RE...

How to request for XenMobile Service in Citrix Cloud

Citrix Cloud is a platform that hosts and administers Citrix services. It connects to your resources, via theCitrix Cloud Connector, on any cloud or infrastructure you choose. It allows you to create, manage, and deploy workspaces with apps and data to your end-users from a single console. The...

How to add a Server Certificate as full chain certificate || XenMobile Server Certificate 10.x

This article shows how a server certificate is made as a full chain certificate...

How to Enable Azure Active Directory Enrollment of Windows 10 Devices with XenMobile

When a Windows device is joined to Azure Active Directory, the device can be automatically enrolled in XenMobile. To enable this, add the XenMobile enrollment URL to Azure Active Directory as detailed in this article. You can join Windows 10 devices to Microsoft Azure AD in any of the following...

Xenmobile : MDM and MAM Console Features

There's a lot to consider while deciding the enrollment mode MDM/MAM to the XenMobile environment. What devices should you choose? How should you manage them? What are the devices features available from the console etc. How do you ensure that your network remains secure while still being user...

Error: "Guided Access Application Unavailable. Please Contact Your Administrator" on XenMobile Enrolled iOS Device

A XenMobile enrolled iOS device will show a"Guided Access App Unavailable. Please Contact Your Administrator.” error on screen and the device may appear to be frozen or locked...

How to Enable App Interaction Between XenMobile Secure Mail and Microsoft Office Apps

This document will help you understand how the XenMobile managed Secure Mail application will use Microsoft Office application to open the attachments in a controlled and secured manner. Environment Machine| Details ---|--- Active Directory| Win 2012 Certificate Authority| NA SQL Database| MS SQL...