XenServer Security Update for CVE-2024-36350 and CVE-2024-36357

Severity: Medium Description of Problem AMD has disclosed several security issues affecting AMD CPUs. These CPU hardware issues may allow code in a guest VM to infer some active memory content of another VM that is running on the same host. Although these are not vulnerabilities in the XenServer...

Citrix Daas - CVAD - How to Migrate vCenter 7.x to 8.x Without Losing Citrix Configurations

This article provides a step-by-step guide on how to migrate vCenter 7.x to a new vCenter 8.x environment without losing Citrix configurations, ensuring a seamless transition and minimizing downtime, while maintaining the integrity of existing virtual infrastructure and Citrix settings...

WEM External task not working when "run script " selected

External task configured using below option for "run script" In the WEM logs we could see below error 12:14:13 PM Warning - VuemExternalTaskExecutor.ExecuteExternalTask : External Task - Create User Cache Folder Id:3 - Unable to validate target file existence... 12:14:13 PM Exception -...

On Prem || FAS 2402 LTSR || FAS with intune certificate

Impacts and limitations of FAS with Intune certificate...

Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session

Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...

Virtual Apps and Desktops - How to disable Microsoft Teams optimization

To disable HDX optimization for Microsoft Teams...

CWAL 2411 | "Ctrl+Shift+T", brings up citrix toolbar instead of reopening closed tab

Since we updated our Workspace on Linux Machines from 24.5.0.76 to 24.11.0.85, users are experiencing the following issue: Pressing Ctrl + Shift + T, brings up citrix toolbar on the endpoint instead of reopening closed tab on the windows machine...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

Citrix Cloud Azure Questions on MCS Disk Network Access

Security alerts are receiving for VM disks on our Citrix Cloud Azure environment and is raising Security concerns. Currently, all our VDIs have two disks, an Identity and Data disk. These disks are created with the default Azure setting of “Enable public access from all networks”. We are...

Topaz Signature Pad as COM Port Device Disappears after Logoff

Topaz Signature will disappear after users log off on a kiosk workstation. The environment contained: Citrix Virtual Apps and Desktops version 2203 CUx Desktop of Server VDA, any supported OS Citrix Workspace App 2402 CUx Windows 10/Windows 11...

Duplicate or Excessive Data in the Site Database May Cause Delivery Controller Performance Issues

The Citrix Broker Service experiences memory usage spikes, with memory consumption increasing significantly over a short period. This may lead to degraded performance or instability on the Delivery Controller. Affected Environments : CVAD environments with manually provisioned VDAs or PVS VDAs...

Hotfix XS82ECU1078 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. All customers who are affected by the issues described inCTX692065 - XenServer and Citrix Hypervisor Security Update for CVE-2024-45818should install this hotfix. Note: This hotfix is...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45817

XenServer and Citrix Hypervisor Security Update Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allow a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following...

Director “Cannot retrieve the data” for License Server

In Director see error “Cannot retrieve the data” for License Server. In event log see of Director Server there is this event. There was no endpoint listening at https://LicenseServerFQDN:8083//slsunauth/services/sls that could accept the message. This is often caused by an incorrect address or SO...

How to Configure SQL Instances in XenMobile Server with custom port

This article provides information on how to install XenMobile Server XMS 10 to be configured on a SQL Instance with the custom port. Prerequisites Knowledge of SQL service accountcredentials with the appropriate role. Knowledge of SQL Server FQDN or IP. Knowledge of custom port for the SQL instan...

Vulnerability in License Server and Snap-in for Desktop Studio, aka Heartbleed

Secure Configuration of Licensing Heartbleed Update In response to the recent Heartbleed vulnerability in OpenSSL CVE-2014-0160 Citrix released a security advisory, CTX140605, advising customers of its potential effects on some Citrix Licensing components. As part of the Citrix response to this...

How to change time zone on NetScaler from GUI

This document is about how to change time zone on NetScaler...

Citrix Delivery Controllers generates Event ID 505 and Event ID 3602 continuously

Upgrading CVAD version to 2308 generates“Citrix ConfigSync Service” with "Event ID “505 ” and "Citrix High Availability Service" with "Event ID 3602" The Citrix Config Sync Service failed an import. Error details: Error importing configuration data into secondary Broker...

Citrix Default Domain Services not running after rebooting StoreFront server

After rebooting StoreFront server, "Citrix Default Domain Services" service is going into Stopped state...

PBM Error "Authentication failed: Invalid credentials" when adding machine to one catalog

When attempting to add machines to an existing catalog the process fails immediately with the below error, in Studio. "Machine Failures: domainname\machinename: Failed to create the virtual machine; domainname\machinename. Inner Error: A general system error occurred: PBM error occurred during...

How to run a file system check XenServer root file system

This article describes how to run a File System check, the file system on XenServer Host in case where the file system is corrupted and need to be checked. To check and repair a file system in XenServer you can use the fsck command. Requirements XenServer Installation CD...

Catalog Creation or Change Master Image fails when attempting to create ProvVM

Machine Creation Services actions, such as catalog creation, master image change, or adding additional VMs, may error unexpectedly for failure to create image preparation machine. CDF traces may indicate one of the following: "Error: creating virtual machine failed. AzureWriter-1 timed out while...

Wem agent upgrade fails with error: 0x80070643 on the Applayering Platform layer

WEM agent upgrade on the platform layer fails on in-place upgrade or post-installation with the Applayered Images. You will see the below entries in the WEM install logs: i320: Registering bundle dependency provider: b2c7bc43-a0ba-4c9b-8382-7c139e9735c7, version: 2203.1.0.1 i371: Updating session...

"Cannot complete your request." After Azure AD/SAML Authentication

External access via ADC with Azure AD MFA Authentication and redirected to StoreFront Store Receiver for Website receives "Cannot complete your request." notification. The following Event IDs are displayed in the Log Name: Citrix Delivery ServicesSource: Citrix Domain ServicesDate:Event ID: 1Task...

Citrix Profile Management user configuration for Microsoft Edge

Microsoft announced retirement of Internet Explorer in Summer 2022, MS Edge was deployed to Citrix XenApp servers with published desktops. When users log off and log on again the MS Edge presents "Out of box" dialog prompts. MS Edge favorites, homepage, history, etc.are not preserved. This articl...

WEM Agent error, "Only a single agent instance can be run within a session!"

Error showing from WEM Agent, "Only a single agent instance can be run within a session!"...

Support for ICA files in XenApp/XenDesktop Environment

When users are connecting to XenApp or XenDesktop with an ICA file, there could occur a wide range of issues related to connection, load balancing, performance,cosmetic issues with an application and so on. For users connecting with Citrix Receiver or Citrix Receiver in conjunction with StoreFron...

How to Change the Software Open iSCSI IQN in XenServer

This article contains information about how to identify and change the software iSCSI initiator IQN. By default a random IQN is generated when you install XenServer formerly Citrix Hypervisor. The IQN is a requirement when running iSCSI to identify the XenServer host on the iSCSI network. It is...

How to troubleshoot PVS target device domain trust issue

Since both Citrix and Microsoft and 3rd party software can initiate changing password, sometimes the TD may lose domain trust. Reset machine password from PVS console can solve the issue, but sometimes we need to find out the root cause if too many TDs lose domain trust. This article aims to give...

Auto Redirection to Desktop/App list via Gateway stucked in "Detect Citrix Workspace app" page

To auto launch desktop, you should ensure Citrix Webhelper work as invoked mode to accessdesktop/app via Citrix Gateway, please refer toCTX221662 for more details. This need user to encounter "Detect Citrix Workspace app" page to check local installed Citrix Workspace app. If you do not see this...

CWA Android : Citrix Workspace could not verify server or email address, Error code 437

CWA Android : Getting an error "Citrix workspace app could not verify the specified server or email address error code 437". when trying to logon to Workspace app for second time it shows this error...

Login schema unable to be configured and the SELECT button grayed out

When configuring nFactor authentication, user is unable to select login schema xml in GUI page. The "SELECT" button is greyed out. Like below screenshot...

Automatically launch the downloaded .ica files when using Chrome browser

When you try to launch a published application or desktop from a browser by browsing to storefront or gateway URL, an".ica"file is downloaded. You need to click the .ica file to launch the session instead of auto launch...

Citrix Workspace App - Duplicate published app icons showing up in the endpoints

The customer recently deployed CWA through all company’s workstations and created a GPO to push the Store to CWA in the machines He noticed after the deployment that the endpoints and CWA show a duplicate of each published app Also, CWA shows two stores of the same name...

Recommendations to Prevent PVS Write Cache from filling Up Too Fast

This article provides some recommendations to prevent the PVS Write Cache to fill up too fast. PVS Write Cache on RAM with OverFlow to HD improves the machines performance and it is the most recommended one. However, if the the HD dedicated to store Write Cache dumped from cache on RAM, this will...

Enable mitigations for CVE-2018-12207

Depending on your hardware, your Citrix Hypervisor or XenServer installation may be affected by the security issue with the identifierCVE-2018-12207. Citrix provides the following hotfixes to mitigate this issue: XS70E075, XS71ECU2024, XS76E012,XS80E008. For more information, seeCitrix Hypervisor...

XenCenter 8.1.2 - For Citrix Hypervisor 8.1

Who Should Install This Update? This XenCenter update is for customers who use XenCenter as the management console for Citrix Hypervisor 8.1.0 or an earlier CR. It constitutes the following deliverable: File Name| XenCenter.msi ---|--- Description| This file updates the XenCenter installation on...

Citrix UPS Print Driver Certification Tool

Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description The Citrix UPS Print Driver Certification Tool can be...

Symantec Endpoint Protection 14.2.5569 installation failure error, " symcorpuires.dll could not be found."

Facing issues while installing Symantec Endpoint Protection client 14.x while installing on App Layer.When trying to install 14.2.5569 version of SEP , it’s getting crashed. and post a reboot of the packaging machine, unable to search in icons or search box . Getting an error that says...

Thinwire+ Support for H.264 Build-To-Lossless for transient content.

Introduction One of the features of Thinwire+ is “build to lossless” for transient content. This means that content such as3D or other moving imageryis initially displayed at low quality to improve frame rates and overall interactivity. Once user input has stopped, transient images are gradually...

How to troubleshoot License Server connectivity and grace period issues

Network Connectivity between Citrix product and the Citrix License server is necessary for normal operation. Please see steps below for troubleshooting steps...

How to change the SSL ciphers from XenMobile server.

Procedure to changethe SSL ciphers from XenMobile server...

Managing Printer Deployment Using Layers in the Unidesk Environment

While many brokering and persona management solutions provide mechanisms to manage printer deployment, you might find it easier to use Unidesk layers. Unidesk layers provide a flexible mechanism for managing printer deployments for different groups of users. When you use Unidesk layers to deploy...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Domain Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for domain check...

Citrix Director - Failure Reasons Troubleshooting Guide

Table of Contents Overview User Connection Failures Machine Failures Overview Citrix Director is a comprehensive monitoring and troubleshooting tool that integrates with XenApp and XenDesktop environments. The solution provides a single pane of glass for Citrix support and administrator teams to...

Citrix Receiver on the Internal Network fails to connect to a Store when Remote Access enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Under certain circumstances, while trying to access from a client in the internal network to a...

Newly published App-V applications are not visible to end users

After most recent upgrade of Web Studio users are not able to see newly published App-V packages/applications. This issue affects only newly published App-V applications...

NetScaler-13.1-Mastool version in Secondary node is showed as 0.0-0.0

Mastool version in Secondary node is showed as 0.0-0.0. The command to check mastool version in NetScaler is as below. shellcat /var/mastools/version.txt 0.0-0.0...

ADC-13.1-How to support multiple domain SSO to StoreFront with user "distinguishedName" attribute

How to support multiple domain SSO to StoreFront from NetScaler with user "distinguishedName" attribute...

FIDO2 Authentication Does Not Work With Webpages Opened Using Microsoft Edge

Users are not able to Authenticate to a website that requires FIDO2 Authentication using a Yubikey when using Edge on VDA Devices. The users are constantly prompted to select a Smartcard device. The same users are able to Authenticate onto the same website using Chrome or Firefox inside the same...