Mouse & Keyboard might show Delay/Stops Working when using High DPI Mouse in Citrix sessions

Users using high DPI mouse and connect to a Citrix published desktop or applications both mouse and keyboard stops working. Sometimes mouse is working 4-5 seconds before it stops working. Users see a delay in Display update i.e. when moving Windows as the delay of up to 5-10 seconds after stoppin...

CapsLock and Eisu keys on Japanese 106 keyboard are not working on VDA

When end users connect a Japanese 106 keyboard to the machine where CWA Linux installed and select Scancode mode in Citrix Linux, the extra keys in a Japanese 106 keyboard might not work on VDA. The Caps Lock or Eisu 英数 key is a special key that has different functions in different keyboard layou...

How to configure WEM load balance

This article guides you through the deployment of a Workspace Environment Management WEM server group containing two or more infrastructure servers in all active load balanced configurations. The article provides details of how to configure a Citrix ADC appliance to load balance incoming requests...

High CPU utilization on the WEM Server

Norskale Broker Service.exe 1912 utilizes High CPU...

Citrix FAS: Your session 'AppName' did not launch successfully due to error code 3500

Session launch fails in the double hop scenario as explained below, First Hop: Successful desktop Launch Second Hop: Session fails to launch with the error code “Your session 'AppName' did not launch successfully due to error code 3500. Please contact your administrator for more information about...

App Layer creation Fails with "A socket operation was attempted to an unreachable network"

App Layer creation Fails with "A socket operation was attempted to an unreachable network :65530"...

Mastering Historical Throughput/Bandwidth data Using NetScaler Reporting feature

This article aims to provide a comprehensive guide on utilizing the reporting feature to effectively capture historical throughput data in NetScaler...

How to add custom text or a disclaimer to a login schema

How to add a custom text / Disclaimer to the XML file of a login schema...

Unable to list or change the Master Image for a MCS catalog in Studio

Unable to list or change the Master Image for a MCS catalog in Studio. Error Cannot find path 'XDHyp:\HostingUnits\\image.folder\undefined.sharedsubscription' because it does not exist. For details, click here. If the problem persists, contact Citrix Technical Support. Transaction ID:...

Workspace App toolbar "Devices" option is missing on specific Windows clients

Regarding to same user and VDA, Citrix Workspace App CWA toolbar "Devices" option can show normally on some Windows clients. But on specific Windows clients, "devices" option is missing...

Low performance with Intel X710/XL710/X722

Creating a snapshot on Citrix Hypervisor 8.2 CU1 might be slower than XenServer 7.1 when using the following driver and firmware. Driver: i40e: IntelR 40-10 Gigabit Ethernet Connection Network Driver - version 2.9.21 Firmware: fw 8.71.63306 api 1.11 nvm 10.54.7...

How to troubleshoot PVS target device domain trust issue

Since both Citrix and Microsoft and 3rd party software can initiate changing password, sometimes the TD may lose domain trust. Reset machine password from PVS console can solve the issue, but sometimes we need to find out the root cause if too many TDs lose domain trust. This article aims to give...

Service 'Citrix Workspace Updater Service' (CWAUpdaterService) Failed to Start When Installing CWA

Failed to install CWA. Error message shows:Service 'Citrix Workspace Updater Service' CWAUpdaterService failed to start, Verify that you have sufficient privileges to start system services...

Restrict access to Storefront via Gateway based on Login Username

This article will describe how to configure responder policy to restrict access to storefront via gateway based on login username, and also explain the difference between expression "AAA.USER.LOGINNAME" and "AAA.LOGIN.USERNAME"...

Configure Virtual Channel Allow List for Epic Slingshot and Epic Warp Drive

The Virtual Channel Allow List feature has been enabled by default as of CVAD 2109 and has been carried forward to CVAD 2203 LTSR. When the allow list is enabled, Epic Slingshot and Epic Warp Drive require configuration of the Virtual Channel Allow List for their associated virtual channels to...

CWA Android : Citrix Workspace could not verify server or email address, Error code 437

CWA Android : Getting an error "Citrix workspace app could not verify the specified server or email address error code 437". when trying to logon to Workspace app for second time it shows this error...

RDP session fails to open, black screen appears briefly and the connection stops

Cannot start RDP session on VDA. A black screen appears briefly and the connection stops...

CWA 2202 : Published desktop fails to launch when CWA is used

-- Issue with CWA only -- Same endpoint works when same VDA is launched from Store URL -- Issue with 1 end point only -- Never worked on the CWA -- First time set up Details...

EPA scan Fails. Error: Failed sending epaq

Error: Failed sending Epaq We will see following error in plugin logs: 2022-01-14 07:03:05.860 | Tid: 10876 | ERROR | nsstartepa | 1030 | Failed sending GET epaq. Return code: -4 2022-01-14 07:03:05.860 | Tid: 10876 | DEBUG | nsstartepa returning Failed sending epaq Following message will be seen...

When access the storefront webpage getting .Net errors

When access the newly added Storefront server getting the below error. Error : The 'targetFramework' attribute in the element of the Web.config file is used only to target version 4.0 and later of the .NET Framework for example, ''. The 'targetFramework' attribute currently references a version...

Citrix ADC - Error: "Invalid private key, or PEM pass phrase required for this private key" on FIPS device

When trying to export a PFX file from a certificate that has already been uploaded to the ADC, we get the error "Invalid private key, or PEM pass phrase required for this private key" , even after making sure the correct certificate and private key is selected, as well as entering the correct...

Recommendations to Prevent PVS Write Cache from filling Up Too Fast

This article provides some recommendations to prevent the PVS Write Cache to fill up too fast. PVS Write Cache on RAM with OverFlow to HD improves the machines performance and it is the most recommended one. However, if the the HD dedicated to store Write Cache dumped from cache on RAM, this will...

Citrix MSI Log Analyzer

Citrix MSI Log Analyzer v1.2.0.9 Created Date: Dec 04, 2017 Updated Date:May 29, 2019 To help us improve the tool, please send your feedback tohttps://podio.com/webforms/18778954/1263577. Please note: You can download the required file from the Citrix downloads website by visiting the following...

Citrix StoreFront Security Update - Security Bulletin

Description A high severity issue has been discovered in Citrix StoreFront that, if exploited, would allow an attacker who is authenticated on thesame Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server. This issue has the following identifier:...

DTLS 1.0 or DTLS 1.2 is not working through Citrix Access Gateway Vserver with SNI based certificate

On the Citrix Director or on the VDA server, you will we see that the ICA communication happened over TCP rather than UDP. Issue is seen through Citrix Firmware versions 13.0 47.24 or 13.0 build 52.24. If you have Certificate X which was bound to Citrix Access Gateway VServer as SNI Certificate,...

StoreFront - Citrix Subscriptions Store service not starting up on one storefront server in server group

When launching a published application an error message israndomly seen . "Your apps are not available at this time. Please try again in a few minutes or contact your help desk with this information: Cannot contact Storefront" The issue is caused by subscription service store service not starting...

Director Does not Show NetScaler MAS Data, Network Tab Shows "Page Not Fonud"

NetScaler MAS data cannot be showed in director network tab --page was not found...

How to use StoreFront Multi-Site Aggregation to configure high availability

This article focuses on configuringhigh availability using StoreFront's Multi-Site Aggregation feature in case of standalone Virtual Apps and Desktops sites with identical published apps. This is not a disaster recovery solution however, it can be used as an alternative and it will be helpful in...

Getting an error "Your changes could not be saved due to an invalid configuration of the account"

After the installation of receiver with Single sign-on enabled, users get above error message...

Troubleshooting thin provisioning for shared block storage on XenServer

XenServer and Citrix Hypervisor use GFS2 to provide the ability to set up thin provisioning with a shared block storage device. Pools that use GFS2 to thin provision their shared block storage are clustered and behave differently to pools that use shared file-based storage or LVM with shared bloc...

Failed to Publish Image to PVS server, Unidesk Agent error: "The specified service does not exist"

When publishing a Citrix App Layering image to PVS, you might get an error like this - Error: The operation being requested was not performed because the user has not logged on to the network. The specified service does not exist. You may also see 'Access is Denied'. This is recorded in the Unide...

How Do I Load Balance FTPS Servers on a NetScaler ADC

This article describes how to load balance FTPS servers on a NetScaler ADC...

How to export log files from the Citrix Enterprise Layer Manager (ELM)

NOTE: These steps apply to AL prior to 2204. See CTX463786 for the new interface steps You can export logs for your Citrix Enterprise Layer Manager ELM, and send them to the Citrix Support. This article explains what log files are available for export, and which log files are useful for what kind...

How to Enable AuthManager logging in Citrix Workspace App for Linux

This article describes the procedure to enable AuthManager daemon logging which is responsible for Authentication of the client with the WebInterface/Storefront. This will be useful in troubleshooting Authentication Issues...

How to reset root password of NetScaler SDX

This article describes how to reset the root password of NetScaler SDX running on XenServer. Note: If you are a XenServer user, do not refer to this article. Instead, see the XenServer documentation. Background For the XenServer component of a NetScaler SDX, a lost root password can be overwritte...

Ovs-vswitchd daemon showing high CPU usage

XenServer 6.5 SP1 heavy IO traffic/ CPU utilization with open vswitch technology. Ovs-vswitchd daemon running on the XS was showing high CPU usage and performance tab shows heavy CPU usage...

Citrix Receiver on the Internal Network fails to connect to a Store when Remote Access enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Under certain circumstances, while trying to access from a client in the internal network to a...

How to Export and Install an SSL Certificate for StoreFront to Use HTTPS

This article explains how to export your existing SSL certificate, import the certificate to another StoreFront server, bind the certificate to Internet Information Services IIS, and configure StoreFront for HTTPS connections. This article assumes the following typical scenarios: You have created...

How to launch applications Using Windows 10 Edge Browser

Launch applications using Windows 10 Edge Browser...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

Event 4003 on StoreFront Servers

The following eventisdisplayed in the event viewer: First error message: Log Name:Citrix Delivery Services Source:Citrix Store Service Date:7/22/2016 12:05:09 PM Event ID:4003 Task Category: 12346 Level:Error Keywords:Classic User:N/A Computer:StorefrontSrv.Contoso.com Description: All the Citrix...

How Do I Configure Framehawk Support on NetScaler Gateway?

This article describes how to configure Framehawk support on NetScaler Gateway. Use Case With the increase of mobile users adopting tablets and smartphones, it is critical to ensure a rich virtual application and desktop user experience on Wi-Fi and cellular networks where network quality may be...

Error: "No servers available for disk" When Booting from vDisk

When configuring a vDisk for private mode, any device booting from that vDisk gets the "No servers available for disk" error. For example, when connecting to the Provisioning Services PVS console on the first server, the vDisk is listed as private mode. When the console is connected to PVS consol...

Error:"Cannot Connect to the vCenter Server due to a Certificate Error"

When adding a host connection to a vmware server the following error message is displayed: "Cannot connect to the vCenter server due to a certificate error. Make sure that the appropriate certificates are installed on the VCenter server, and install appropriate certificates on every controller in...

Cannot Reconnect to a Disconnected Session from a Wyse Client

If by any chance any sessions gets disconnected then while trying to reconnect to that session via Wyse terminals the desktop launches properly and the session remains active for only 10-15 sec and then disconnects automatically and this behavior continues. Everything works fine from the FAT...

Auto Client Reconnect Fix on XenDesktop Deployments with CloudBridge for Traffic Optimization

This fix applies only to XenDesktop deployments that utilize CloudBridge for traffic optimization. This fix enables the Auto Client Reconnect functionality of XenDesktop for deployments that utilize CloudBridge for traffic optimization. With this fix Auto Client Reconnect is used for session...

Unable to add/install an SSL certificate-key Pair to the CloudBridge: “Error detecting a valid private key file format”

When configuring an SSL Profile the backend server’s ssl certificate/key pair must be uploaded. The following error message is displayed when trying to upload the private key file regardless of the extension i.e .key or .txt Please correct any problems and resubmit your request Execution error...

How to Display Custom Error Pages by Using NetScaler Responder Policies

This article contains information about configuring Responder policies that redirect user requests to custom error pages during a maintenance period of a back end web server farm. Background You can create custom error page and redirect the user requests to it. For example, you might want to host...

Error: "Management Interface: vDisk Properties were Lost" on Provisioning Services

Creating a vDisk fails before completion and displays the following error message: "Management Interface: vDisk properties were lost."...

XenServer Security Update for CVE-2025-58151 and CVE-2026-23553

Severity:Medium Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to cause the host to become slow or unresponsive to management operations. This issue has the following identifier: CVE-2025-58151 A further issue has been identified ...