Citrix ADC - Error: "Invalid private key, or PEM pass phrase required for this private key" on FIPS device

When trying to export a PFX file from a certificate that has already been uploaded to the ADC, we get the error "Invalid private key, or PEM pass phrase required for this private key" , even after making sure the correct certificate and private key is selected, as well as entering the correct...

SAML + LDAP using Nfactor gives error "You are not allowed to login. Please contact your administrator"

After hitting Netscaler for login, you are redirected to SAML and successfully login. Afterwards, you are redirected back to Netscaler and receive the error"You are not allowed to login. Please contact your administrator"...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 2

Package name:xms10.13.0.10212.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces:xms10.13.0.10129.bin Date:February, 2021 Languages supported:English US Readme version:1.00 Readme Revision History Version| Date| Change Description ---|---|--- 1.00| February, 2021| Initia...

Drag and then drop files between a Citrix session and a local endpoint

Citrix now supports Dragging and then dropping files between a Citrix session and a local endpoint. You can drag and then drop files, groups of files, directories, groups of directories, or a combination of files and directories to and from the same client on the session. This ability applies to ...

Target device boot issue from PVS server - vDisk cannot be accessed (a).

When booting the target device from vDisk we get the following error on pre-boot screen: "vDisk cannot be accessed a."...

SSL Renegotiation Process and Session Reuse on ADC Appliance

This article contains information about the SSL renegotiation and session reuse on a ADC appliance. SSL Renegotiation Process on a ADC Appliance The SSL renegotiation process is the new SSL handshake process over an established SSL connection. The SSL renegotiation process can establish another...

The SNI Feature of NetScaler Appliance

This article contains information about Server Name Identification SNI feature of the NetScaler appliance. Background The SNI feature is included starting with the NetScaler software release 9.2. Note : The SNI feature is not supported on the back end connections. For information on how to...

Citrix StoreFront Security Update - Security Bulletin

Description A high severity issue has been discovered in Citrix StoreFront that, if exploited, would allow an attacker who is authenticated on thesame Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server. This issue has the following identifier:...

Printers created from WEM are not being mapped to user sessions

Printers created from WEM are not being mapped to user sessions. VUEMRSAV shows the printers under Actions Applied. WEM session log shows the following error regarding to the printers affected: DynamicTokensController.ReplaceDynamicTokens : Replacing HashTags - no match found for :...

Password field not displayed for published apps in Windows Server 2019

When publishing any O365 app such as Excel or Word, users are prompted to authenticate to Office 365 to activate the app. Password field is not rendered when the app is published so users can never authenticate. This also occurs with RDP initial app. Microsoft has reproduced the issue with using...

ICA File Can't Be Launched by CDViewer for Specific User

Click the XenDesktop icon on StoreFront, IE11 doesn't invoke CDViewer to get through to XenDesktop. 2. Click the XenDesktop icon on StoreFront, Chrome 46.0 downloads the ICA file, clicking the downloaded ICA file doesn't invoke CDViewer to get through to XenDesktop. Usercan logon to same VDA...

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

Error: "This Operation Cannot be Performed Because a VDI is in Use by Some Other Operation"

Starting vm fail unable to find the disk OR Unable to start a VM error : "this operation cannot be performed because a VDI is in use by some other operation" OR Unable to start a VM , error : "The SR failed to complete the operation" OR Unable to start the VM , error : "This operation cannot be...

New Lossless Compression Codec (MDRLE) Added to HDX Thinwire Graphics

There are 3 Thinwire bitmap encoding modes used in current XenApp and XenDesktop Server OS and Desktop OS VDA graphics remoting: Full screen H.264 Thinwire Plus Thinwire Plus with selective H.264 Legacy GDI remoting uses the XPDM Remoting driver and so does not use a Thinwire bitmap encoder Curre...

How to Troubleshoot EDT Connections

Adaptive transport is a data transport mechanism for Citrix Virtual Apps and Desktops. It is faster, can scale, improves application interactivity, and is more interactive on challenging long-haul WAN and internet connections. Adaptive transport maintains high server scalability and efficient use...

Application Shortcuts disappear when connecting to server where the profile already exists

When first logging into a server and the user profile is created for the first time, application shortcuts as configured in WEM appears on Desktop. Application shortcuts configured in WEM: Shortcuts created on desktop of new user profile: Shortcuts deleted after subsequent logins...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

Secure Web cannot access external websites

Unable to browse external websites. Error " http 1.1 gateway timeout" on Secure Web. VPN mode : Full VPN Internal websites work fine...

How to Create a Perl Based Custom Monitor on NetScaler

This article describes how to create a Perl based Custom Monitor on NetScaler. Background The NetScaler appliance has a lot of different monitors inbuilt, but there are use cases these monitors do not cover. For this NetScaler supports monitors of type USER, which brings the possibility to run...

App Layering - Google Chrome / Chromium Recipe

Google Chrome by default will install into a user profile which is problematic for mass deployment in a layer. However Google does provide an “offline” installer that installs Chrome into “Program Files” and this installer should be used with Unidesk if installing into a layer. The default way...

How to enable or disable self help portal in XenMobile server

This article provides instruction on how to enable or disable access to the Self Help Portal SHP...

Citrix App layering: Recipe for USB Drivers With VMWARE Horizon View 5.X

Overview The purpose is to explain a process for getting USB Hardware related device drivers working in a Unidesk Layer in conjunction with software application that may require peripheral device support. Tested Devices This document utilize these kinds of devices in our testing: Dell USB Laser...

Errors while launching HDX apps from Receiver/Secure Hub

When trying to launch any HDX applications from iOSor Android devices below error message is displayed. Error Message on iOS Devices:- Connection Error: Server Error; The Server disconnected the session. Error Message on Android devices: Cannot Connect : Error Connecting to the session reliabilit...

Citrix Receiver Installation NOT successful for 'XenApp Web Plug-in', error: 1612

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information After uninstalling Receiver for Windows, re-installation fails with the following error: Installation N...

StreamProcess.exe is consuming high CPU spike on PVS Servers.

The Streamprocess.exe was consuming high CPU on the PVS servers. The Perfmon suggested sustained spike in Kernel mode and process dumps revealed that we were waiting for the Packet Send & Receive...

Prerequisite Failure Error When Upgrading from StoreFront 2.6 to 3.0

Prerequisite failure error when upgrading from StoreFront 2.6 to 3.0: An error occurred during installation. Please ensure all the required prerequisites have been installed and run the installer again...

Unable to enroll more than two devices per user to XenMobile Server

When trying to enroll an iOS device with an user account that already has 2 devices enrolled, the enrollment would fail during the 2nd profile installation, with the following error message :Profile installation failed -A connection to the server could not be established On Android, the same...

How Do I Perform Complete SSL Certificate Monitoring and Management Using NetScaler MAS

NetScaler Management and Analytics System allows you to perform complete SSL Certificate monitoring and management operations from one single console. When a NetScaler appliance is discovered in MAS, all the certificates that reside on the NetScaler appliance also get copied to MAS. This gives MA...

Published Windows Explorer does not retain icon size and layout settings with Profile Management enabled.

Under certain circumstances, users may find that some Windows Explorer settings are not retained after closing a published Windows Explorer session. These settings are saved in the registry under HKEYCURRENTUSER\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags...

How to find the disk associated to a VM from XenServer CLI

While troubleshooting storage issues, we might need to get the VM's disk and its associated Virtual block devices . This article will help to get the desired details from the VM...

How to take a XenServer toolstack (XAPI) database dump and view it

XenServer stores the vital information related to objects such asVM, VIF, VDI, PBD in an XMLformat file under /var/xapi/state.db.Thisfile is synced between pool membersat regular intervals to maintain aconsistent view of the XenServer pool. We recommend that you back up this XAPIdatabase file. Th...

How to restart toolstack on host from CLI, and does it have any effect on running jobs

How to restart toolstack on host from CLI, and does it have any effect on running jobs...

How to reset root password of NetScaler SDX

This article describes how to reset the root password of NetScaler SDX running on XenServer. Note: If you are a XenServer user, do not refer to this article. Instead, see the XenServer documentation. Background For the XenServer component of a NetScaler SDX, a lost root password can be overwritte...

How to renew or request an SSL Certificate in Citrix Endpoint Management (XenMobile) Server

This article describes how to request or renew an SSL certificatefor Citrix Endpoint Management XenMobile Server...

How to Secure ICA Connection to VDA using SSL

To secure the ICA connection to VDA using SSL...

Error: 403 forbidden | Post authentication when accessing through NetScaler Gateway

We see 403 forbidden error post authentication when accessing the apps through Netscaler Gateway...

How to Use sAMAccountName and userPrincipalName at Same Time for User Logon with Active Directory

This article describes how use sAMAccountName and userPrincipalName at same time for user logon with Active Directory. Background While authenticating with LDAP for NetScaler Gateway or any other resource behind the NetScaler, we can only access resources using either 'domain\username' or...

Not All PVS Servers Showing On The Replication Status Window

The PVS farm shows all PVS servers under the Servers node. However, when you click Show Replication Status ofthe vDisk does not show all PVS serverslisted. The other servers have the vDisk files .vhd, .pvp but do not show up in the list...

Cannot Reconnect to a Disconnected Session from a Wyse Client

If by any chance any sessions gets disconnected then while trying to reconnect to that session via Wyse terminals the desktop launches properly and the session remains active for only 10-15 sec and then disconnects automatically and this behavior continues. Everything works fine from the FAT...

NetScaler Gateway Stuck at cgi/setclient After Log On

NetScaler Gateway stuck at cgi/setclient after log on...

XenServer - How to change the management IP addresses of all hosts in the pool

This article describes how to change the management IP address of all hosts in the pool...

ADC13.1-How to use a data set to evaluate or check the IP address in the X-Forwarded-For header

This article describes how to use a data set to evaluate or check the IP address in the X-Forwarded-For header...

[NetScaler] MPX LCD Display: Understanding Port Status Indicators

This article explains the meaning of the characters/icons shown on the NetScaler MPX LCD display...

When Elastic layers are assigned to VDAs they may fail to attach if VDA's are launched from shutdown

Elastic layers intermittently fail to attach during session launch. Layers are assigned to VDAs not users Ulayersvc logs show the different group membership is determined during each launch Working: ActiveDirectoryInfoService: Machine Group SIDs: test\Domain Computers, test\group1, test\group2...

ELM 2409 || SMB share not working after ELM upgrade from 2403 to 2409

After migrating to new release and upgrading to version 2409 the SMB share is not longer connecting, this appears to be causing lots of crashfiles to generate which overt he week caused the applayering platform to stop functioning all together until the crash files were cleared...

Microsoft Security Update Validation Report May 2025

Microsoft’s May 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

NetScaler Reset with Code 9222

Users report being unable to access a specific application. Investigation reveals that the NetScaler is resetting the packet with Reset Code 9222 when the server responds to the client’s request...

Citrix Virtual Desktop - Username show "-" in the Citrix Studio after launching Server Desktop

After user session Launched, the "current username" in Citrix Studio shows "-"...

Domain passthrough with ZeroTrust VPN users get "cannot start your session" via Azure load balancer

When you access Store URL and click on "Log on" you see the error - cannot start your session. wait a few minutes and try to logon again. If you still experience problems, contact your help desk. When you click on the "OK" button multiple times, eventually it goes away. More details on deployment...

Citrix App Layering 2503: Elastic Layer Assignments Load Older Layer Version After ELM Upgrade

After upgrading the Enterprise Layer Manager ELM to version 2503, users continue to receive older versions of elastic layers on their virtual desktops, even after the elastic layer assignments have been updated to newer versions. Additional symptoms observed: New versions of App Layers are create...