Session Launch Failure Issue when Anti Keylogging is enabled [Windows 11 24H2 Update]

On Windows endpoints with the most recent Windows 11 24H2 update, session launches may encounter failures when the anti-keylogging feature App Protection is enabled. This issue is attributed to the changes in Windows system APIs leveraged by App Protection features...

Geolocation redirection not working

The Citrix Optimizer's default OS templates disable the "Geolocation Service" on Citrix VDAs, which causes the geolocation redirection to fail...

Performance issues with Intel GPUs and Citrix Workspace App

Customers using the Citrix Workspace App with Intel Arc GPUs and Intel GPU driver version 4824 could experience performance issues and lag The performance issues are present in Intel Arc A-series GPUs and Intel Core Ultra with built-in Arc GPUs, for example: Intel Arc A-Series Graphics Intel Arc...

waf signature false positive

Enabled the WAF signature 82. Firefox user will trigger signature rule 998998 CVE-2022-21907 and blocked the access by WAF...

Do CVE-2024-40725 and CVE-2024-40898 have an impact on XenMobile Server

...

Unattended Installation of XenServer Tools

This article describes about the unattended installation of XenServer Tools using Microsoft’s Windows Installer program, msiexec. Background XenTools delivered with XenServer 6.1 version are able to make use of Microsoft’s Windows Installer program, msiexec. One of those is a way to install...

Vulnerability in License Server and Snap-in for Desktop Studio, aka Heartbleed

Secure Configuration of Licensing Heartbleed Update In response to the recent Heartbleed vulnerability in OpenSSL CVE-2014-0160 Citrix released a security advisory, CTX140605, advising customers of its potential effects on some Citrix Licensing components. As part of the Citrix response to this...

Storefront Installation Error Adding Local Administrators to CitrixStorefrontAdministrators Group

Install StoreFront with below error: There was an error adding user accounts in the Administrators local group to the CitrixStorefrontAdministrators local group.See the log files described in the article 'Troubleshoot Storefront' in the Storefront product documentation. Try adding these user...

Store Front Server Group Server is not reachable. Configuration settings might be out of date.

When observing the Server Group in the StoreFront management console, for each Server Member server the notification "Server is not reachable. Configuration settings might be out of date." is displayed with a red exclamation point icon. When initiating propagation theStoreFront management console...

Linux Client Shortcut Key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete in Linux VDA

Normally, Ctrl+Alt+Enter from a Windows Client will change xfreerdp from "Window Mode" to "Full Screen" and vice versa in a Linux VDA's ICA session. However, on a Linux Client the same shortcut key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete to the application xfreerdp in a Linux VDA's ICA sessio...

Fail to launch SF resources: SSL Error 59

Fail to launch SF resources: Unable to connect the server. Contact your system administrator with the the following error: SSL Error 59: The server sent a security certificate identifying "www.xxxx.com", the SSL connection was to "SRA.XXXXX.COM.CN"...

ADC 13.0 - Error : Please log on. The server met an error. Please try again or contact your administrator

Error after login to Citrix Gateway: "Please log on The server met an error. Please try again or contact your administrator" Logging in works fine internally through StoreFront server, but fails when trying to log on through Citrix Gateway. The session policy was noted to be looking for a referer...

How to check ADM agent to endpoint connectivity issue

Issue : Getting the alert message as ADM agent is down. Tenant ID: XXXXXXX Agent IP: XXXXXXXX Agent Host Name: XXXXXXX Diagnostics Alert: • https://adm-prod-backup-XXXXXXX.s3.amazonaws.com not reachable...

Automatically launch the downloaded .ica files when using Chrome browser

When you try to launch a published application or desktop from a browser by browsing to storefront or gateway URL, an".ica"file is downloaded. You need to click the .ica file to launch the session instead of auto launch...

ERROR: Operation not permitted - no FIPS card present in the system

Attempting to check FIPS status on the Citrix ADC MPX 8900 FIPS certified appliance or the Citrix ADC MPX 15000-50G FIPS certified appliance using the show fips command results in the error message "ERROR: Operation not permitted - no FIPS card present in the system."...

XenMobile - Moving from LDAP to LDAPS

I am planning to turn on LDAPS on our XenMobile servers in the DMZ. We are being sure to open port 636 from our firewall to allow proper LDAPS traffic to flow. I understand there is one additional step to be performed prior to making the switch. I believe I need to export the root certificate fro...

Troubleshooting common issues with XenServer clustered pools and GFS2 SRs

XenServer uses GFS2 to make thin provisioning available by using block-based storage devices that are accessed through iSCSI software initiator or Hardware HBA. This article provides a guide for troubleshooting common issues when GFS2 SRThin Provisioning is being used in XenServer or Citrix...

How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans

This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...

Error: "32 authentication policies are already bound" While Binding Authentication Policy

When multiple policies two-factor are used for one virtual server with the total number of policies exceeding 32, there will be error message popping up "32 authentication policies are already bound"...

MAC Moves Observed on NetScaler When More Than One Interface is in Same VLAN

MAC moves observed on NetScaler when more than one interface is in same VLAN. The following entries are seen in newnslog: current time is Mon Jun 5 17:03:55 2017 Channel 0/1 has been muted conflict MAC 00:1d:45:24:b3:68 Channel 1/1 has been muted conflict MAC 00:1d:45:24:b3:68 current time is Mon...

Error code 0x00007E, BSOD, When Creating vdisk - BNIStack Failed, Network Stack Could Not Be Initialized

While capturing a new vdisk using the imaging wizard software you receive a BSOD. This occurs after the first reboot when the master image VM is switched to boot from the network via the local BIOS. The details of the stop error are: BNIStack failed, network stack could not be initialized. Error...

How to Add SQL Database Connections to XenMobile Server

This article describes how to add / increase additional SQL database connections from XenMobile. By default XenMobile Server 10.x has 50 database connections to SQL database. Note: Please be sure that your SQL Server has enough resources RAM & CPU to handle the additional load on the server prior...

There are no apps and desktops available to you at this time [Incomplete DDC Certificate Update]

Storefront: There are no apps and desktops available to you at this time - Event logs ID: 4012: None of the Citrix XML Services configured for farm are in the list of active services, so none were contacted...

Master image not visible while creating or updating MCS catalog

While creating a new catalog or updating an existing catalog, new Master image created on the vSphere hosting is not visible...

Citrix Virtual Apps - Mouse pointer looks big inside published application

Administrators might notice that in a multimonitor setup where the main screen is set to 200% scaling and the secondary screen to 100% scaling, when the published application is moved from the 100% scaled monitor to the 200% scaled monitor, the Mouse pointer size becomes bigger as expected both...

Kerberos KNOB stopped working

The KNOB “nsapimgr -ys arg1=1 -ys call=nsenablepreferredkrbetype” no longer works after upgrading from 13.1 to 14.1...

Citrix Daas - CVAD - How to Migrate vCenter 7.x to 8.x Without Losing Citrix Configurations

This article provides a step-by-step guide on how to migrate vCenter 7.x to a new vCenter 8.x environment without losing Citrix configurations, ensuring a seamless transition and minimizing downtime, while maintaining the integrity of existing virtual infrastructure and Citrix settings...

Microsoft Edge taskbar icon may not appear when it is launched through Local App Access

When Microsoft Edge is launched in an ICA desktop session through Local App Access LAA, Microsoft Edge icon may not appear in Windows taskbar of the session. In the situation, if end user makes a mouse click on the background Windows desktop in the session, the foreground Microsoft Edge window wi...

Intelligent Build to Lossless monitoring

Monitoring Intelligent Build to Lossless can be done via the Graphics status indicator: If more in-depth monitoring is needed, an in-session Intelligent Build to Lossless visual indicator can be enabled for the session. This indicator is turned off by default. When enabled, it will display a visu...

Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session

Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...

XenServer - Potential performance issues on imported Windows VMs

When importing Windows VMs into XenServer, for example by using the Conversion Manager virtual appliance or the OVF import functionality in XenCenter, in some circumstances these VMs may not have been optimized for peak performance, as they may be missing certain Viridian optimization flags. If y...

Virtual Apps and Desktops - How to disable Microsoft Teams optimization

To disable HDX optimization for Microsoft Teams...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069

Description of Problem A vulnerability has been discovered in Citrix Session Recording. Refer below for further details: Affected Versions The following supported versions of Citrix Session Recording are affected by the vulnerability: Current Release CR Citrix Session Recording before 2407 hotfix...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45817

XenServer and Citrix Hypervisor Security Update Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allow a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following...

How to Capture a Network Trace for a PVS Target Device

This article describes how to capture a target-side network trace from a Provisioned Services PVS machine. Requirements Hypervisors: XenServer 5.x XenServer 6.x VMware ESX 4.x VMware ESXi 5.x Hyper-V 2012 Or Physical Environment including but not limited to HP/IBM/Dell/Cisco target devices...

XenApp Target Device Does Not Respond and Displays a Gray Screen

XenApp Target Device appears to be unresponsive. Background When the Provisioned XenApp server is accessed through the local console, you see a gray blank screen. There are different symptoms reported for the same incident and they are not specific to Provisioning services or XenApp. In some case...

How to Configure NetScaler and StoreFront for Internal and External Connections

This article describes how to configure NetScaler and StoreFront with two NetScaler Gateways, two StoreFront sites, two different subnet IPs, and one URL for both internal and external connections...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 7

Package name: xms10.15.0.10731.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: June 2024 Languages supported: English US...

SQLLocalDB event ID 512

The Delivery Controller event logs show numerous error Event ID: 512 Source: SQLLocalDB 14.0 The "DataDirectory" registry value is missing in the LocalDB instance registry key: 44A9EE4E-9BD8-4715-AD84-84FC18033127 The "DataDirectory" registry value is missing in the LocalDB instance registry key:...

Citrix Workspace app timeout Notification is shown

After the end user logon Citrix DaaS session using native Citrix Workspace app, if there is no activity within the Citrix Workspace app window for the specified interval of time, Citrix Workspace app timeout Notification will be shown. The Warning Message is "Your session is about to expire. You...

CVAD 2203 CU4 VDA may experience BSOD With BugCheck code 0x96 INVALID_WORK_QUEUE_ITEM

VDA may randomly experience a BSOD with BugCheck code 0x96 INVALIDWORKQUEUEITEM The issue is seen after the installation of 2203 Cumulative Update 4...

PBM Error "Authentication failed: Invalid credentials" when adding machine to one catalog

When attempting to add machines to an existing catalog the process fails immediately with the below error, in Studio. "Machine Failures: domainname\machinename: Failed to create the virtual machine; domainname\machinename. Inner Error: A general system error occurred: PBM error occurred during...

The right-click does not work on the start menu of Windows 11.

Right-click does not work on the start menu of Windows 11. This issue only occurs when VDA is installed. Uninstall VDA or VDA not installed environments do not cause this issue...

Wem agent upgrade fails with error: 0x80070643 on the Applayering Platform layer

WEM agent upgrade on the platform layer fails on in-place upgrade or post-installation with the Applayered Images. You will see the below entries in the WEM install logs: i320: Registering bundle dependency provider: b2c7bc43-a0ba-4c9b-8382-7c139e9735c7, version: 2203.1.0.1 i371: Updating session...

NetScaler EPA scan fails on Mac OS Client

EPA scan fails on Mac OS client only, libs folder is missing in /Library/Application Support/Citrix. Note: Where the symbol indicates the relevant Mac OS user's home directory path...

Citrix License Telemetry FAQ

General License Telemetry Questions What was announced? In mid-November 2024, Cloud Software Group made changes regarding license telemetry for on-premises customer-managed environments which use the Citrix License Server: Starting with License Server 11.17.2 Build 40000, the on-premises...

NSC: Citrix ADC MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z The tables below explain the Citrix ADC life cycle management milestones as well as important information regarding dates and option...

How to capture a full memory dump from a PVS target running on Azure

This article will cover the steps necessary to prepare an Azure VM running PVS to be able to capture a full memory dump...

Issue launching sessions after setting up FAS Server - Event ID 101

After setting up FAS, apps / desktops are failing to launch. On FAS servers we see event ID 101. Log Name: Application Source: Citrix.Authentication.FederatedAuthenticationService Date: Date and Time Event ID: 101 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Descriptio...