SSO logon to Director fail via Edge/Chrome/Firefox

SSO logon to Director fail when accessing from outside of Director server computer via Edge/Chrome/Firefox. IE or IE mode works fine and any browser on Director server works fine User get "An internal error has occurred" error even if credential is manually input...

How to enable the picture copy/paste operations between CWA client and VDA

This article describes how to restrict the copy/paste operations between CWA client and VDA, only keeping the picture copy/paste enabled...

There is no LTSR version of WEM

This article describes whether there is Long Term Service Release LTSR version of Workspace Environment Management WEM...

Fail to create MCS machine catalog with error ID: XDDS: F0522F7D

The following error occurs when creating a catalog using MCS: ------ Error Id: XDDS: F0522F7D Exception: DesktopStudioErrorld: ProvisioningTaskError ErrorCategory: NotSpecified ErrorID: DiskConsolidationFailed TaskErrorinformation: Terminated InternalErrorMessage: Invalid diskFilename: storage...

How to check whether Citrix Licensing is in Grace Period using PowerShell?

This article describes how to use PowerShell cmdlets to check whether Citrix Licensing is in grace period and the number of hours remaining in the grace period...

Unable to launch resources or Studio - connection between broker service and database has been lost

Users unable to launch resources such as published applications and desktops. Administrators unable to use Studio to manage environment. When checking event viewer logs on the DDC, we see event 1201 warning: When accessing the SQL Database, below error is see:...

Mouse cursor invisible when hovering over text based apps in Citrix session

ADM based Endpoints/Laptops Mouse invisible when hovering over text based apps Mouse cursor not appearing with AMD integrated graphics inside the Citrix Sessions...

How to track the Citrix Gateway Service Points-of-Presence(PoP) of active HDX session

Citrix Gateway Service is designed to operate across multiple Points of Presence POPs in order to enhance availability and performance. In the event that a POP goes down or experiences connectivity degradation beyond specified thresholds. Citrix Optimal Gateway Routing responds to subsequent DNS...

Citrix DaaS - The Published resource is not available currently. try again later

After migrating from on premise to Citrix Cloud, users facing issues when launching apps via DaaS only via native CWA. Launching via web browser works as expected. Users are getting error: Transaction ID: xxxxxxxxxxxxxxxxx The resource is not available at the moment. Please try again later. Issue...

How to find ICA Gateway accessing log in nslog

This article is an analysis on nslog /var/log/ns.log for accessing CVAD environment via ICA gateway. However, nslog will not include detailed logs for this process. Please refer to analysis on "NetScaler Gateway+StoreFront+XenDesktop workflow" in the article in additional resources...

Failed to Install Citrix Workspace App with "Installation NOT successful for 'USB', error: 1603."

Failed to install Citrix Workspace App with "Installation NOT successful for 'USB', error: 1603."...

Citrix WEM Network drives are not being mapped

Network drive mapping set through WEM doesn't map the drive In the WEM action viewer, it is shown as applied to the required WEM agent No errors related to this in the event viewer or WEM logs...

App Layer creation Fails with "A socket operation was attempted to an unreachable network"

App Layer creation Fails with "A socket operation was attempted to an unreachable network :65530"...

Historical ICA RTT data

How to capture Historical ICA RTT data...

Add New VMs to MCS catalog Failed with Error "CreateClone Failed: No Virtual Disk Image Exists"

Received an Inner Error when adding new VMs to an existing MCS catalog: CreateClone failed: no virtual disk image exists with ID 'xxxx'...

Workspace App toolbar "Devices" option is missing on specific Windows clients

Regarding to same user and VDA, Citrix Workspace App CWA toolbar "Devices" option can show normally on some Windows clients. But on specific Windows clients, "devices" option is missing...

System user password Encryption method or Hash function type

NetScaler system user passwords are hashed using SHA1 on 11.1 and older releases. 12.0 use SHA512. RPC node passwords are encrypted using AES256 CBC from 11.0 onwards. RC4 is used before that. The keywords encrypted, hashmethod, encryptmethod example ENCMTHD3and kek are added internally based on...

FAQ | Azure client secrets and Citrix DaaS

General Queries on Azure client secrets and Citrix DaaS 1. If we were to modify the expiration date of application secret from DaaS console, then would it also update the new expiration date within the Azure portal? 2. The Citrix docs states that there would be an alert within the DaaS console...

How to Retain the Custom Settings Made to NetScaler Appliance after the Restart

This article contains information about retaining the customer settings you have made to the NetScaler or Access Gateway Enterprise Edition appliance after the appliance is restarted. When you restart the NetScaler or Access Gateway Enterprise Edition appliance, the appliance automatically copies...

workspace cannot find a valid smart card certificate

Workspace App gives error " cannot find a valid smart card certificate". This works via Browser but not via Workspace App...

How to add all VDA logon user accounts in "Direct Access Users" group automatically

Add all user accounts in "Direct Access Users" group automatically...

Driver Disk for Microsemi smartpqi 2.1.20-035 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.20-035 Issues Resolved In this Driver Disk Includes general...

Driver Disk for Microsemi smartpqi 2.1.18-045 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.18045 Issues Resolved In this Driver Disk Includes general enhancemen...

Citrix Xenserver 7.1CU2 to Citrix Hypervisor 8.2 upgrade gets stuck at Boot Screen for servers with HPE Smart Array

After the Host is booted into the installer kernel it gets stuck at following screen...

Keyboard layout dynamic sync not working with East Asian, Cyrillic language usernames

When a user using Windows English OS and the username chars are East Asian/Cyrillic Unicode, the Keyboard layout dynamic sync of the Citrix Workspace App will not work. The remote language bar’s language will always be the first-time synced language when the session is created. Changing Microsoft...

EPA scan Fails. Error: Failed sending epaq

Error: Failed sending Epaq We will see following error in plugin logs: 2022-01-14 07:03:05.860 | Tid: 10876 | ERROR | nsstartepa | 1030 | Failed sending GET epaq. Return code: -4 2022-01-14 07:03:05.860 | Tid: 10876 | DEBUG | nsstartepa returning Failed sending epaq Following message will be seen...

Adding Physical Devices to Citrix Cloud using the Provisioning Devices Export Wizard. "No Devices Found to Export"

When attempting to add Physical Devices to Citrix Cloud using the Citrix Provisioning Devices Export Wizard. Getting a message "No Devices Found to Export" after selected the Device Collection to export. Note:Physical Devices can also be a VM that will not be in a Power Managed Catalog...

VDAs are still trying to register with old DDCs post changing the list of DDCs

Post changing the Delivery Controllers list, VDAs are still trying to register with the old Controllers. Deletes the old Delivery Controllers FQDN on "ListOfDDCs" key in "HKLM\Software\Citrix\VirtualDesktopAgent\Policy" registry and restarts the Citrix desktop service, however the VDAs are still...

PVS and MCS Devices Cache Disk Quickly Consumed By NTFSDisableLastAccessUpdate

- A Citrix Provisioned VDI, both MCS and PVS provisioned devices may consume most of its available cache disk space soon after boot, with or without any user interaction. - A machine left unattended appears to be consuming cache disk space while Procmon and Resource Monitor do not show...

Silent Command Line Upgrades of Workspace App without SelfService Fail Abruptly

Scenario: a command line installation of Workspace App where the/Silent parameter is used will simply stop within 30 seconds. This might occur during installations from the command line or through some management platform for example: SCCM, or BigFix or even Windows Active-Directory Group Policy...

"Cannot complete request" when connecting to SAML enabled store externally in Multi-Domain environment

"Cannot complete request" error with SAML enabled store in Multi-Domain environment Two-way Trust is added for the two domains where Infrastructure servers StoreFront, Federated Authentication Server, etc. are in Domain A and Users are in Domain B that is two different domains. Azure AD is the...

PVS 1912:Unable to merge vdisk "vDisk versions are not up to date on all Servers that access this vDisk. Update all "

Unable to merge the old versions of vdisk. Error message when we attempt merge: "vDisk versions are not up to date on all Servers that access this vDisk. Update all Servers with the lastest versions of the vDisk files"...

Error when adding an Enterprise App on Google Store for Android Enterprise - Upload a new APK file with a different package name

When we try to add In house Enterprise app for Android Enterprise using Citrix Endpoint Management, we get the error - 'Upload a new APK file with a different package name'...

MP4 video played on Windows Media Player does not show video on secondary monitor

In a multi-monitor environment, when you play an MP4 video on Windows Media Player the video may not appear if you move the player to the secondary monitor...

Citrix PVS: Target Devices giving error message "login request timed out " after Power Outage

After an interruption in service, some target devices are giving an error "login request timed out"...

Citrix Data Collection Tool - CDC

Pre-requisites PowerShell 4.0 and above .NET 4.0 and above Media FrameWork 5.0 and above PowerShell Execution policy set to RemoteSigned/Unrestricted/ByPass Task Scheduler should be enabled for the creation of tasks to be executed when triggers are defined. Administrator privileges Please note: Y...

Troubleshooting Citrix Pass-Through Authentication

This article outlines workarounds and resolutions to specific Citrix pass-through authentication issues. Common Pass-Through Authentication Issues and Inquiries Refer to the following links for information on common pass-through authentication issues and inquiries: Citrix Docs - Enabling...

LDAP authentication failed with error code 4003 and Group length is very large

One user cannot login Gateway with LDAP authentication and other users can login normally...

Connection Quality Indicator

Connection Quality Indicator Created: Feb 15, 2017 Updated: Oct 16, 2024 SHA 256 Checksum: c79d1dfdfe50b1386a334b4d78f78ced25eb61b8091a2bc8b33f9d9b9014dbd2 Please provide feedback or enhancement requests at https://forms.gle/TwWrKPT6J8u7GdKA6. Description The Connection Quality Indicator CQI is a...

XAPI Database Parsing Tool - Windows

Description This script applies an XML stylesheet to the XAPI database and creates a file that can be viewed in a web browser. The style sheet is an example of how data can be extracted from the database for quick offline troubleshooting and configuration analysis. Once the script has been ran...

StoreFront Logon Error: "Incorrect user name or password"

Domain users are unable to logon to StoreFront and receive an error message: “Incorrect user name or password” with Event ID: 4625 and Failure Reason: “The user has not been granted the requested logon type at this machine”. The error can be seen on Citrix Receiver and on the StoreFront StoreWeb...

Citrix StoreFront Security Update - Security Bulletin

Description A high severity issue has been discovered in Citrix StoreFront that, if exploited, would allow an attacker who is authenticated on thesame Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server. This issue has the following identifier:...

Unable to see ICA Latency and ICA RTT in CQI or Director

ICA Latency is incorrectly showing as 64,000 ms when using EDT via Citrix Gateway...

Storefront 3.12 - Cannot Join Server Group - Joining the Server Group failed. Joiner cleanup was unsuccessful. Please refer to the Windows Event Log for Details

When attempting to add a Storefront Server to a Server group the following error is observed on Joiner Server: Error:Cannot Join Server Group - Joining the Server Group failed. Joiner cleanup was unsuccessful. Please refer to the Windows Event Log for Details. See image below Event logs: Event 1 ...

DTLS 1.0 or DTLS 1.2 is not working through Citrix Access Gateway Vserver with SNI based certificate

On the Citrix Director or on the VDA server, you will we see that the ICA communication happened over TCP rather than UDP. Issue is seen through Citrix Firmware versions 13.0 47.24 or 13.0 build 52.24. If you have Certificate X which was bound to Citrix Access Gateway VServer as SNI Certificate,...

Supported Databases for Virtual Apps and Desktops AND Citrix Provisioning (PVS)

Citrix is committed to ensuring that our products function with the latest Microsoft SQLdatabases.Citrix supplies reasonable efforts to ensure compatibility with upcoming database releases. New versions of supported databases released after our products have been released, must work. However,...

Getting an error "Your changes could not be saved due to an invalid configuration of the account"

After the installation of receiver with Single sign-on enabled, users get above error message...

Citrix Workspace App Launcher is unable to launch applications automatically with Apple Safari 12 or Application Enumeration failing through Safari 13.0.2 version via Citrix Access Gateway

Citrix Workspace App andCitrix Receiver cannot launchapplications automatically with Safari version 12...

How to Secure SSH Access to the NetScaler Appliance with Public Key Authentication

This article contains information about securing administrative access to the NetScaler appliance by using the public key authentication mechanism of Secure Shell SSH. Requirements To complete the procedure in this document, the NetScaler appliance must have the following tools: An SSH client...

Unable to start application with SAML authentication "Cannot Start App" Event ID 28 Could not contact any Federated Authentication Servers

Launching an application or desktop fails when StoreFront is configured for FAS/SAML authentication. Error seen when user tries to launch an application or desktop: No errors are logged on the FAS server. Storefront will show event ID 28 with error showing "...Could not contact any Federated...