Configuring Gateway nfactor authentication with Radius first & LDAP second

Describe how to configure Citrix Gateway appliance to use RADIUS authentication as first factor and LDAP authentication as second factor The Storefront - Gateway Integration should be in place using 'Domain' Logon type in the Gateway configuration in the menu 'Manage Citrix Gateway'...

Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab

Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab Event ID 5 is logged in Citrix Director, pointing to failure while connecting to data source. The CDF Traces captured from Director Server, show the exception "Unexpected character encountered while parsing value" D...

Citrix Licensing Manager Reports Error Code 400

After upgrading licence server to 11.15.0.0 build 25000, Citrix Licensing Manager https://localhost:8083 displays the error :For assistance, contact Citrix Customer Service and reference error code 400...

How to enable WebSocket on load balancing virtual server

...

Citrix License Telemetry FAQ

General License Telemetry Questions What was announced? In mid-November 2024, Cloud Software Group made changes regarding license telemetry for on-premises customer-managed environments which use the Citrix License Server: Starting with License Server 11.17.2 Build 40000, the on-premises...

Notice Of Change Announcement for NetScaler (Citrix ADC) Perpetually Licensed Hardware and Software

Applicable Products NetScaler Citrix ADC perpetually licensed hardware MPX, SDX and software VPX/BLX, & Standard Edition across all NetScaler Citrix ADC products. Information NetScaler, a business unit of Cloud Software Group, has made the decision to end of sale EoS NetScaler Citrix ADC...

Upcoming changes in XenCenter

To provide you with greater security, the Citrix Insight Services CIS website has extended its multi-factor authentication requirement to applications, like XenCenter, that use the API to upload data. As a result, we are making changes to how XenCenter interacts with CIS. Important : XenCenter...

NSC: Citrix ADC MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 8905/8905Z, MPX/SDX 8910/SDX 8910Z, MPX/SDX 8920/8920Z, MPX/SDX 8930/8930Z The tables below explain the Citrix ADC life cycle management milestones as well as important information regarding dates and option...

Allow Citrix Secure Access app for macOS to access device certificate without asking for system credentials every time

If device certificate check has been configured on ADC, then the client app Citrix Secure Access must provide the device certificate present in the Mac’s Keychain. Since the certificate is placed in “System Keychain”, macOS might prompt for system credentials every time the user logs on. To avoid...

How to change Logstream source IP to NSIP on ADC.

By default, Logstream communication from ADC to ADM uses the SNIP address to source traffic. Administrators may wish to use the NSIP for this communication. Prior to the introduction of Logstream, the IPFIX protocol used NSIP so customers may want to maintain this flow...

How to use StoreFront Multi-Site Aggregation to configure high availability

This article focuses on configuringhigh availability using StoreFront's Multi-Site Aggregation feature in case of standalone Virtual Apps and Desktops sites with identical published apps. This is not a disaster recovery solution however, it can be used as an alternative and it will be helpful in...

How to Allocate and Install Citrix NetScaler VPX Licenses

This document will provide a step-by-step guide on obtaining a Citrix NetScaler VPX license formerly ADC VPX. Requirements Contactmust be listed on company account withUnrestricted access...

Display adapter priority and monitor creation in Citrix sessions

This article includes information about the display adapter selection process, how virtual monitors are created, and manual configuration options for the same. Starting with XenDesktop 7.16 the Citrix Virtual Desktop Agent VDA for Windows 10 automatically selects the best display adapter to use f...

"Attach a Smart Card Reader and Insert Your Smart Card to Log On" When Using Certificate Based Authentication in Native Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. "Attach a Smart Card Reader and Insert Your Smart Card to Log On" when using certificate based...

App Layering - Shutdown for Finalize Error, "A RunOnce script is outstanding"

In any layer, when creating it, you must double-click on the Shutdown for Finalize script, where we determine that there are no pending Windows operations that need to complete before we finalize. When you run this, you may see this: Layer Finalize is BLOCKED, The outstanding items are: 'a RunOnc...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

How to Capture a Memory Dump from a Provisioned Target in VMware Environment

This article outlines the process to generate a memory dump file from a provisioned target device in a VMware environment, thenusing vmss2core tool convert snapshot to .dmp file, which can be analyzed in windbg. This is a three-step process of which neither steps require any modification to the...

NetScaler SD-WAN QOS and Application Rules

Citrix SD-WAN, formerly NetScaler SD-WAN Table of Contents Introduction QOS Components Transmit Modes Queue Depth IP Rules Application QOS rules with release 9.3 Basic Rules Basic guidance on Rules. Other Settings that affect Applications. Appendix A: Default Rules Breakdown Introduction The...

Citrix Receiver for Windows shows Authentication Window or Receiver prompts periodically

Citrix Receiver for Windows authentication prompt and/or receiver prompt pops up randomly...

Errors while launching HDX apps from Receiver/Secure Hub

When trying to launch any HDX applications from iOSor Android devices below error message is displayed. Error Message on iOS Devices:- Connection Error: Server Error; The Server disconnected the session. Error Message on Android devices: Cannot Connect : Error Connecting to the session reliabilit...

Install or upgrade to Citrix Director 7.x using Director .msi file

This article explains the prerequisites and steps to install or upgrade to Citrix Director 7.x using the Director .msi file. Note : Citrix recommends that you use the product installerinstead ofthe .msi file. Requirements Windows Server 2008 R2 or later IIS 7 or later .Net 4.5.1 or later...

How to Configure SAML- Introduction?

SAML is an XML-based open standard which enables authentication of users across products or organizations. SAML is used by identity providers such as Google and by identity and authentication products such as Microsoft AD FS, Ping Identity, CA SiteMinder and more. Citrix customers wish to use...

NetsCaler: Smart Card Authentication with EULA using nfactor

We need to do Smart Card Authentication on the NetScaler virtual server NetScaler Gateway or Load balancing and also we need the users to accept the End User License Agreement EULA before they could access the backend resource...

How to Troubleshoot Citrix ADC(NetScaler) Reporting Tab Related Issues

This article describes how to troubleshoot NetScaler Reporting tab related issues. An example scenario used in this article is when users go to Reporting tab on NetScaler and it does show any data or reports...

Bad performance over SSL protocol on NetScaler VPX 11.0 and VPX 10.5 release

Symptoms: Customer experiencing performance over SSL protocol on NetScaler VPX 11.62.10 in one arm deployment. Environment: We have NS VPX 1000 Platinum license no packet drops caused by rate limiting and it's config spec is 4vCPUs and 4GB of RAM, NIC 1000E full duplex speed. The NS appliance is...

How to Capture SSL Master Keys When Running an nstrace on NetScaler

This article describes how to capture SSL master keys when running an nstrace on NetScaler Background From NetScaler 11.0-66+ and 11.1/12.0 all builds, the "start nstrace" command has a new parameter, -capsslkeys, with which you can capture the SSL master keys for all SSL sessions. If the...

Hyper-V Synthetic Network Interface Card Reinitializes on New Target Devices

Hyper-V synthetic Network Interface Card NIC reinitializes on new Provisioning Services target.During the synthetic NIC reinitialize at boot, it delays any software to use the interface.Windows redetects the NIC as a new device and increments the name of the device, for example, “Local Area...

Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566

Severity - High Description of Problem Vulnerabilities have been discovered in the Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client. Refer to the information below for further details: Affected Versions: The following supported versions of Citrix Secure Access Client fo...

XenServer Security Update for CVE-2026-4397

Severity: Medium Description of Problem An issue has been identified in XenServer 8.4 which, when starting a VM on a host with limited available memory, may allow a privileged user in that newly starting VM to access memory data of a previously terminated VM. This issue has the following...

XenServer Security Update for CVE-2025-58151 and CVE-2026-23553

Severity:Medium Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to cause the host to become slow or unresponsive to management operations. This issue has the following identifier: CVE-2025-58151 A further issue has been identified ...

XenServer Security Update for CVE-2025-62626

Severity: Medium Description of Problem A hardware issue has been identified in AMD Zen 5 CPU devices that may cause those CPUs to return a value of zero more frequently than statistically expected when asked to generate a random value. This may compromise e.g. cryptographic keys that are generat...

NetScaler-13.1-How to limit the IP subnets to access LB vServer with responder policy in NetScaler?

How to allow only specified IP subnets to access LB virtual server with responder policy in NetScaler?...

Browser is prompted to install Citrix Workspace lite.

Receiving prompt to install Citrix Workspace lite when accessing store URL When accessing workspace we see that as Citrix workspace lite However, the installed app is Citrix Workspace app...

SAML URL monitor to login.microsoftonline.com is down

Continuous error logs on the Netscaler dashboard as below "8699 77 PPE-0 DBSMonServiceBindinglogin.microsoftonline.com:443tcp-defaultvpndbssvc1339998057: DOWN; Last response: Failure - Time out during TCP connection establishment stage"...

[Netscaler] Nitro API: Intermittent Incomplete /nitro/v1/config/rnat Responses

You might observe less data than expected in the response from NetScaler when calling the Nitro API /nitro/v1/config/rnat under the following conditions: NetScaler versions before 13.1 Build 53.24 NetScaler versions before 14.1 Build 21.57 Simultaneous 'show' calls are made from different session...

CVAD 2402 - Citrix Storefront SSO failed after change the Base URL

After the customer modified the Base URL setting to use a different hostname, single sign-on SSO functionality stopped working for all users across the environment. However, when the Base URL is reverted back to the original hostname of the StoreFront server, single sign-on resumes normal operati...

NetScaler HA sync on AWS fails when using Policy Based Routing (PBR)

HA sync between Primary NetScaler node and Secondary NetScaler node will fail when Policy Based Routing is configured, when NetScaler is hosted on Amazon Web Services AWS...

Citrix NetScaler Automated backup job is failing after recent upgrade.

After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...

Fresh User layers hang/freeze on first logon

When logging on with a fresh profile/ user layer, the UL is created but logon process comes to a halt at a black screen force log off and log back fix the issue, the session is established and user desktop is shown...

Webex App for VDI not optimized

Webex App for VDI is working with fallback mode, instead of VDI-optimized mode...

Linux : Session closes immediately while getting gray screen for 10 seconds

When launch connection on linux vda from cloud, for a user the connection closes after a grey windows on vda user home folder is not created but other users may login fine...

uberAgent - unable to upload data to Splunk in environment with restricted internet access

uberAgent data is not available on the Splunk dashboard. Agents are reporting correctly when Admins allow full internet access on the firewall. uberAgent log file located in C:\Windows\Temp default location shows the issue with CurlSend attempt, example: 2025-05-02 10:31:10.439...

CWAL 2311 | Failed to register YUBI key on VDA desktop

Failed to register Yubi Key in workspace app for Linux.http://webauthn.io/webauthn.io registration works and onlyhttps://webauthn.me/debuggerwebauthn.me site registration fail...

Citrix CVAD/DaaS - License server is unavailable in Studio following upgrade to build 51000

The below message appears after upgrading the License server build to 51000...

"Cannot Complete your request" during enumeration for DUO OAuth in 2 factor setup

Getting " Cannot complete your request" after duo push is successfully sent. In the url tab, we could see the client connection being pointed to storefront successfully...

Citrix DaaS - Google Cloud Project (GCP) - Unable to create Machine Catalog Error

Step 1: image-export-ext: 2025-04-23T07:04:13Z Error running workflow: step ""export-disk"" run error: step ""wait-for-inst-export-disk"" run error: WaitForInstancesSignal FailureMatch found for ""inst-export-disk-image-export-ext-export-disk-9sv20"": ""ExportFailed: Failed to copy disk size...

NetScaler: Securing HA Management IPs and FQDN with SAN Certificates

Securing Management IP and FQDN for High Availability Citrix ADCs with SAN Certificates Ensuring the secure management of your Citrix Application Delivery Controllers ADCs in a High Availability HA setup is crucial for maintaining the integrity and confidentiality of your infrastructure. This...

Citrix Director - Unable to retrieve the list of Connections

Citrix Director does not show any 'Connection' information under 'Filters'. There is an error displayed in Director: "Data source unresponsive or reported an error. View Director server event logs for further information Refer Citrix KB article CTX130320" You can also find an event ID 5 logged by...

Linux VDA 2203: Can not register to Delivery Controller

User failed to launch published desktop, VDA failed to register Delivery Controller in Citrix Studio...

Citrix Cloud: Workspace App configuration is missing silent plugin install for teams or other apps

To understand reason for certainplugin install for teams or other apps is currently unavailable along workspace configuration of Daas console On trying to enable the "Updates and Plug-ins" options for MSTeam, WebEx or Zoom the options to enabled or disable the below are not showing or missing in...