Graceful Logoff from a Published Application Renders the Session in Active State

Graceful logoffs from a published application launched in a seamless, fixed window, or as an RDP Initial Program, might result in the session not closing and the user being logged off. Sessions can be reset or exited correctly by manually resetting them, or by terminating remnant user processes i...

FAQ: Licensing for Disaster Recovery Servers

Q: Can existing licenses in the production environment be used for a Disaster Recovery Server? A: Yes, it is possible to use the same server/farm licenses in another server/farm if it is a disaster recovery server/farm. Q: Can both Production and Disaster Recovery servers run simultaneously? A: N...

[Workspace App for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access their Citrix session, aka mobile thin client. The users usually have a docking station and two identical monitors at their workplace. When these users come back from a meeting and re-dock into...

UDAdmin.exe tool has been enhanced for better reporting and exporting of User Device License usage

Question: How to check license usage in Xendesktop/Xenapp with the enhanced UDAdmin.exe tool for reporting and monitoring? Answer: With License Server 11.14.0.1 Build 23101, some enhancements have been made to the UDAdmin command for better reporting of User Device License usage. The enhancements...

XenServer Security Update for CVE-2026-23554

Severity: High Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise the host. This issue has the following identifier: CVE-2026-23554 Affected Versions This issue affects XenServer 8.4. Note that XenServer 9.0 is in Public...

NetScaler-13.1-Warning "is_whitelisted_request - Dropping invalid http request" in ns.log

You may see warning message like below in ns.log and would like to know why this log exists. Aug 12 16:50:25 X.X.X.X 08/12/2024:07:50:25 GMT XXX 0-PPE-2 : default SSLVPN Message 918225 0 :"iswhitelistedrequest - Dropping invalid http request:|/v1|"...

HTTPS access to NetScaler Console is failed after installing a new certificate

HTTPs access to NetScaler Console failed after installing a new certificate from GUI System -Administration -Install SSL Certificate in NetScaler Console...

DaaS - Change master image it fails with "ProvisioningTaskError"

Unable to update DaaS Machine Catalog - Access Machine Catalog "Change master image" it fails with "ProvisioningTaskError" ErrorMessage - HandleExplicitStorage Failed Error retrieving item from path ""...

Profile Management VHDX auto expansion doesn't work CompactVHDIterations set to 1

Citrix profile Manager is configured with profile containers with the entire profile contained in the container Profile container auto-expansion is enabled Profile container VHD compression is also enabled The number of logoffs to trigger VHD disk compaction is configured to 1 Under the above...

BlobTierInadequateForContentLength during Machine Catalog Update

The following error is seen while updating a MCS Machine Catalog after resizing the size of the Master VM disk. Exception: StudioErrorId : ProvisioningTaskError ErrorCategory : NotSpecified TaskState : FailedToCreateImagePreparationVm TaskStateInformation : Terminated ErrorId :...

Citrix Virtual Apps and Desktops - Unable to launch APP-V application from the VDA

When user tries to launch published app-v application there is an error displayed: The application failed to launch. This may be due to a network failure...

Microsoft Security Update Validation Report April 2025

Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Director is not showing correct number of active sessions

Director is not showing correct number of active sessions. Number of active session in Studio console does not match with Director - Filters -Sessions option...

uberAgent service stops after a few seconds

Windows' Services console shows that uberAgent service is not running. When manually started, the service starts and stops after a few seconds. uberAgent log file located in C:\Windows\Temp default location shows the issue with network driver startup. Example: 2025-03-01 17:28:33.013 +0200,INFO...

Citrix Secure Access Client for Mac Security Bulletin for CVE-2025-1222 and CVE-2025-1223

Description of Problem Vulnerabilities have been discovered in Citrix Secure Access Client for Mac. Refer to below for further details: Affected Versions: The following supported versions of Citrix Secure Access Client for Mac are affected: Citrix Secure Access Client for Mac versions BEFORE...

Microsoft Security Update Validation Report February 2025

Microsoft’s February 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Hotfix XS82ECU1081 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45818

Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allows a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following identifier: CVE-2024-45818 What Customers Should ...

Get-MonitorConfiguration returns an error after DDC/Site upgrade

When admin invokes a cmdlet: Get-MonitorConfiguration, the error is displayed: A database operation failed and could not be recovered : Reason ? CDF Control trace captured on the DDC shows the error: Monitor System Setting 'DisableGoogleAnalytics' exists in the database was loaded but not found i...

Do CVE-2024-40725 and CVE-2024-40898 have an impact on XenMobile Server

...

Netscaler High Availability issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with Netscaler High Availability HA. Overview of the Issue NetScaler High Availability HA offers seamless failover capabilities to maintain uninterrupted...

NetScaler AppFirewall: Configuration, CEF logging, Signatures

Introduction This article provides a list of resources on how to Configure, investigate, troubleshoot, and prevent the most common issues with NetScaler AppFirewall. Overview of the Issue NetScaler web application firewall WAF provides comprehensive protection for web applications from various...

VDA registration failures after Cloud Connector rebooted for OS updates

Virtual Delivery Agent VDA machines fail to register after a Cloud Connector on version 6.92.0/4.349.0 restarts following an OS update. The event logs of the Cloud Connector will have the following events written prior to system restart and the registration failures: Source: User32 EventID: 1074...

How to Force Secure and HttpOnly Cookie Options for Websites Using NetScaler Appliance

The web administrators may forceSecure and/orHttpOnly flags on the Session ID and the authentication cookies that are generated by the web applications. Modifying Set-Cookie headers to include these two options can be done using an http Load Balancing Virtual Server and Rewrite Policies on a...

Failed to uninstall/install PVS target device software via SCCM or command line.

When using SCCM or using a command line, PVS target device installation failed due to filesystem filter driver CFsDep2.inf is not installed error...

FAQ: NetScaler and WebSockets

Q: Which version of NetScaler supports WebSockets? A : NetScaler supports Secure WebSockets from version 10.0. Q: Does the NetScaler have the capability ofperforming SSL Offload for VIPs servicing WebSocket applications. Does it also support SSL offload? A : Netscaler supports "ws://" for HTTP 80...

How to Defragment a PVS vDisk with minimum downtime

The purpose of this guide is to instruct a PVS Administrator on the quickest way to perform a defragmentation process on a vDisk, while minimizing the amount of downtime incurred for the PVS Targets. It is important to note that, while this process can be performed without having to Power Down th...

Database Creation Error when creating a new WEM database using a hyphen ("-") in the database name

When attempting to create a new WEM database when using a hyphen '-'in the name, an error appears saying "Database Creation Error". The Citrix WEM Database Management Utility Debug Log contains the following Exception: Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 102 |...

How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans

This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...

Error: "32 authentication policies are already bound" While Binding Authentication Policy

When multiple policies two-factor are used for one virtual server with the total number of policies exceeding 32, there will be error message popping up "32 authentication policies are already bound"...

MAC Moves Observed on NetScaler When More Than One Interface is in Same VLAN

MAC moves observed on NetScaler when more than one interface is in same VLAN. The following entries are seen in newnslog: current time is Mon Jun 5 17:03:55 2017 Channel 0/1 has been muted conflict MAC 00:1d:45:24:b3:68 Channel 1/1 has been muted conflict MAC 00:1d:45:24:b3:68 current time is Mon...

WEM Agent: "An error occurred while building your environment. Agent processing will now stop."

WEM Agent produces error saying - "An error occurred while building your environment. Agent processing will now stop."...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-12101

Severity - Medium Description of Problem A vulnerability has been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affected ...

NetScaler-13.1-Error "Not logged in" is displayed in console or SSH session to NetScaler

You may see error "Not logged in" displayed in the console session to NetScaler and you are not able to run any commands in this console session. Similar issue may also happen with SSH session to NetScaler...

NetScaler-13.1-EPA scan failed with "Error while parsing client security configuration"

EPA scan failed with "Error while parsing client security configuration" in EPA log. ---------------------------- 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | token: |^M 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | Policy MACADDRanyofF8BXXXXXX28A returned 2004 |^M...

NetScaler-13.1-How to implement authorization policy for Oauth user groups

In Oauth response, the user groups can be carried in the response with customized field. However, we can't relate the string of group to the group attribute of the user. We may have question for how to apply authorization policy for Oauth user groups. In this example, the default authorization...

DaaS-Hosting-Failed to update the master image associated with the provisioning scheme.

While changing Master Image in AWS throwing an error "Failed to update the master image associated with the provisioning scheme." Export of error details: Transaction ID: xxxxxxxxxxxxxxxxx Action Name: MCUpdateMachineCatalog Exception: StudioErrorId : ProvisioningTaskError ErrorCategory :...

NetScaler Gateway - App launch failure Error: "Session reconnection timeout"

Users attempts to launch an application externally via NetScaler Gateway and observed the below error Application launch fails consistently and the behavior is same with both web browser and the Citrix Workspace Application...

FAS - Upgrade of FAS server failed with error "Unable to complete the installation"

1 Attempting to upgrade FAS server component fails with below error- 2 Reinstallation attempt fails with the same error. 3 Event viewer shows below error : Log Name: Application Source: MsiInstaller Event ID: 11722 Task Category: None Level: Error Description: Product: Citrix Federated...

Citrix Infrastructure Monitoring- issue with adding new PVS/SF servers for monitoring from Cloud UI

When Admin tries to add/register new PVS or Storefront Servers for monitoring, the eror message appears:Incorrect token. Ensure you copy and paste the token correctly. The token is valid. Network trace shows 500 response code when the request is send to...

SQLLocalDB event ID 512

The Delivery Controller event logs show numerous error Event ID: 512 Source: SQLLocalDB 14.0 The "DataDirectory" registry value is missing in the LocalDB instance registry key: 44A9EE4E-9BD8-4715-AD84-84FC18033127 The "DataDirectory" registry value is missing in the LocalDB instance registry key:...

Create OS layer version fails when offload compositing is enabled

Issue : Creation of OS layer version fails, when 'Use Offload Compositing' option is enabled. Error : "The Compositing Engine failed to initialize after '00:20:00'" Console shows 'Waiting for the Compositing Engine machine to be ready', followed by 20 minute time out. ELM logs show...

wfshell.exe consumes high CPU

While the ICA session is closed, Citrix WinFrame Shell wfshell.exe process doesn't exit. This process consumes high CPU in Task Manager...

How to Extend CA Validity Period and Renew FAS Certificates

This article is designed to describe how to extend CA Validity Period and renew FAS Certificates...

STIG V-218773 - Recycling IIS App Pools on Storefront Servers

Address STIGV-218773 compatibility with Citrix Storefront vis a vis of the virtual memory an application pool uses...

ADC 13.0 - Error : Please log on. The server met an error. Please try again or contact your administrator

Error after login to Citrix Gateway: "Please log on The server met an error. Please try again or contact your administrator" Logging in works fine internally through StoreFront server, but fails when trying to log on through Citrix Gateway. The session policy was noted to be looking for a referer...

How to check ADM agent to endpoint connectivity issue

Issue : Getting the alert message as ADM agent is down. Tenant ID: XXXXXXX Agent IP: XXXXXXXX Agent Host Name: XXXXXXX Diagnostics Alert: • https://adm-prod-backup-XXXXXXX.s3.amazonaws.com not reachable...

General Information on NetScaler SDX LOM

This article provides general information on Lights Out Management LOM on the NetScaler SDX appliance and also about how to configure the NetScaler SDX appliance, initial settings and commands to troubleshoot. Background All NetScaler SDX devices are shipped with a LOM. The LOM has a separate CPU...

How to configure "Mandatory" keyword filtering to an App or Desktop resource in a Delivery Group

Administrator adds KEYWORDS "Mandatory" to Applications or Desktops in the Delivery Group and when users log in to Storefront via Browser or Native Store, resource is not displayed...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that, depending on configuration, may allow a malicious user of a PV guest VM to crash or compromise the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up ...