Error: 403 forbidden | Post authentication when accessing through NetScaler Gateway

We see 403 forbidden error post authentication when accessing the apps through Netscaler Gateway...

How to Integrate StoreFront into Clientless Access Page from NetScaler When Using CVPN

This article describes how to use Clientless Access CVPN on NetScaler and integrate StoreFront published applications and desktops into the tabbed list...

Database Connection Issues in XenDesktop and Provisioning Services

When adding a Delivery Controller to a site, the following error appearsin the XenDesktop studio: “The services could not connect to the database. Possible reason for message: The database server may not be allowing remote connections. Ensurethe database server is setup correctly and that the...

Error:"Cannot Connect to the vCenter Server due to a Certificate Error"

When adding a host connection to a vmware server the following error message is displayed: "Cannot connect to the vCenter server due to a certificate error. Make sure that the appropriate certificates are installed on the VCenter server, and install appropriate certificates on every controller in...

Error: "Cannot find Android SDK. Please refer to the MDX Toolkit doc for download instructions"

Citrix MDX Toolkit is unable to find the Android SDK. The following error is displayed: "Cannot find Android SDK. Please refer to the MDX Toolkit doc for download instructions"...

How to Perform Reverse Imaging on a Provisioning Services Target Device for Windows and its Applicable Usages

When a Provisioning Services Target Device for Windows is booted from Provisioning Services across the network, it is not possible to perform any software updates that affect the network stack, since the network stack changes will drop the connection to the vDisk. The following provides a list of...

NetScaler Gateway Stuck at cgi/setclient After Log On

NetScaler Gateway stuck at cgi/setclient after log on...

NetScaler Console and NetScaler SDX (SVM) Security Bulletin for CVE-2025-4365

Severity - Medium Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler SDX SVM . Refer to below for further details: Affected Versions The following supported versions of NetScaler Console are affected: NetScaler Console 14.1 BEFORE...

Slow initial page load when connecting to Storefront after upgrading to 2411/2503

After installing StoreFront 2411/2503, connections made to the landing page for a Storefront Store i.e. https://example.com/Citrix/XenAppWeb, users experience a 6 second delay before the logon page fully loads...

NetScaler Console -14.1 43.50: Scheduled 2 stage upgrade fails for NetScaler in HA.

Upgrade Jobs fails for NetScaler when we configure scheduled 2 stage upgrade process from NetScaler Console. The jobs seem to create several subtasks that are failing. It completes upgrade on 1 NetScaler but does not upgrade the second one. This happens after upgrading the NetScaler Console to...

Citrix Profile Management: Temporary Profile Loading and Profile details not visible in Director

Temporary Profile Loading and Profile details not visible in Director...

Screen sharing doesn't work with QuickAssist or other apps when AppProtection is enabled

How to proper configure AppProtection for screen capture...

No Secondary Node GUI Access, Intermittent issue due to /var over 100% Full

The graphical user interface GUI on the secondary system becomes unresponsive or inaccessible when the /var directory exceeds 100% disk utilization. This is primarily attributed to the /var/log/db/default/lbvserver folder occupying a high amount of storage space. Despite manual removal of files...

Application firewall Logs are not logged locally in NetScaler

NetScaler appfw logs are being forwarded to the syslog server as expected. However, the logs are not being logged or displayed in the local /var/log/ns.log. Config: add audit syslogPolicy sysadv1 true sys1bind audit syslogGlobal -policyName sysadv1 -priority 100 -globalBindType APPFWGLOBA Before...

CVAD 2402 - Updating MCS non-profile based catalog to profile based

Boot Diagnostic setting needs to be applied to already created non profile based MCS random catalog. To inherit profile based settings from a VM source to an existing catalog which is non-profile based...

Microsoft Edge browser closes unexpectedly inside Published Desktop when using FIDO2 Authentication

FIDO2 Redirection is enabled to authenticate web application inside Published Desktop. MSedge browser closes unexpectedly at the web application authentication page, no error message on the desktop nor in the Windows event log. This issue only occurs with MSedge. No issue with Chrome or Firefox...

CWA smartcard logon error 'Can’t read smart card' on client with SIM card

There is a client with 2 smart cards . A physical smart card and an integrated eSIM . When CWA Windows tries to autenticate with smartcard the user gets an error that says "Can't read smart card. Please contact your IT administrator" . If we remove the SIM card from the client , the authenticatio...

: Double or Triple licenses are getting assigned to the same user

Multiple licenses are assigned to the the same user in the DAAS console...

HTML Element / Text not appearing correctly on Auth Window using Citrix Workspace App Native]

When using CWA Native their was HTML Element / Text not appearing correctly on Auth Window. - Text was missing / Custom Banner was missing - Issue is not present when using MS Edge browser...

DaaS - Create machine catalog using private storage endpoints on Azure

Create a secure environment in Azure by forcing all storage traffic through Private IPs. With this the Azure Storage Endpoint gets a Private IP assigned, and the Hosting Connection traffic cannot go through the public internet; all traffic needs to go through a Private IP...

CVAD 2203- Services are failing intermittently after restart

After a database outage, restarting Citrix processes on the controllers, as well as rebooting the entire controller, results in crash notifications in event viewer and odd behavior...

OnPrem | CVAD 1912 upgrade throws an error "The license server doesn't support the hosting network"

During CVAD upgrade from 1912 version to 2203 CU3 version, we receive the error "The license server doesn't support the hosting network" and upgrade fails...

Citrix Client redirected printers missing print vendor specific configurations

The customer observed some users reported that client printers mapped into their Citrix sessions were missing printer specific configurations. The most common reported issue from users in this case was that the second printer tray was not available when using Citrix published applications. Window...

Citrix Application Probe fails with "Enumeration Failed"

ProbeAgent.txt on probe machine will show logging similar to the following: 2023-12-11 11:00:21,068 5 INFO - Starting probe job. DesktopId: Win10 Azure Desktop, Name: Win10 Desktop, Config Id: 1, Browser Name: Win10 Azure Desktop 2023-12-11 11:00:21,068 5 INFO - Running reachability check...

PVS UEFI targets fail to boot when downloading TFTP bootstrap

The customer was migrating from PVS BIOS based target devices to PVS UEFI based target devices. BIOS based target devices were deprecated in PVS 2203, and all customers should be migrating to UEFI based target devices. The customer was using VMware based target devices, and was reconfiguring targ...

Citrix Virtual Apps and Desktops 2402 - Custom Application menus cut off after VDA upgrade

After upgrading the VDA from VDA 1912 to VDA 2402, users may notice that the fonts and graphics are not fitting within the custom application UI. Issue is generally seen when the client display has high resolution. Setting the High DPI setting on the Citrix Workspace App for Windows to Yes, may...

Linux Virtual Delivery Agent - ICA session crashes when resizing

When resizing the ICA Session Window, users might see that the session crashes...

Unable to login to WEM Web Console

When Login to Workspace Environment Management Web Console get the message "The user name or password is incorrect. Try again."...

Citrix Cloud: Workspace App configuration is missing silent plugin install for teams or other apps

To understand reason for certainplugin install for teams or other apps is currently unavailable along workspace configuration of Daas console On trying to enable the "Updates and Plug-ins" options for MSTeam, WebEx or Zoom the options to enabled or disable the below are not showing or missing in...

CVAD: Logon Duration is not reported if "Do not process the legacy run list" group policy is enabled

Logon Duration is not logged in Citrix Director if "Do not process the legacy run list" group policy is enabled...

Microsoft Security Update Validation Report January 2025

Microsoft’s January 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwar...

FAS - Users from 2-way trusted domain getting "incorrect username or password" on VDA login

Users from primary domain are able to be authenticated without issue. Users from Domain B, which is in a different forest and is trusted via 2-way trust, can authenticate with the storefront without issue. However, when launching a resource the CWA eventually loads a small window indicating the t...

PVS Boot Device Management creation of UEFI BDM disks.

PVS Boot Device Management wizard creation of UEFI BDM disks. In PVS 2402 and newer, the BDM wizard only shows options related to UEFI BDM creation, as BIOS has been deprecated, and BIOS management interfaces have been removed. This means BDM wizard will look for a locally attached drive with...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 9

Package name: xms10.15.0.10915.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10808.bin, xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date:...

Unexpected Creation of BullseyeCoverageError.txt in UserProfile Folder with 2402CU1 UPM

After upgrading Citrix Profile Management CPM to version 2402 CU1, administrators and users may notice a file named BullseyeCoverageError.txt appearing in the user’s profile folder. While this file does not impact functionality, it may cause confusion as it is unexpected...

BITS performance counters not working after publishing App Layering image to PVS

When you published an image from App Layering to PVS, Target Devices may not show BITS performance counters...

Published applications open through IE instead of Google Chrome

No local app access or URL redirection has been set up on the site. A published application that uses a browser for launching is being accessed through a server Virtual Delivery Agent VDA...

FIDO2 redirection in Chrome and Edge doesn't work

https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/secure/fido2.htmllocal-authorization-and-virtual-authentication-using-fido2-and-webauthn was followed. However devices which use Fido2 such as fingerprint readers and YubiKey devices are not detected in the browser,...

CWA Windows 24.3 error "Unable to connect to the server. Check your network connection and retry"

After upgrade from CWA 23.9.1.104 to CWA 24.3.1.97 users cannot login on CWA Windows with error "Unable to connect to the server. Check your network connection and retry." The URL used for CWA is for NetScaler Gateway and is set via GPO...

Failed to execute cmdlet "Export-LogReportCsv"

While running cmdlet "Export-LogReportCsv" and setting parameter "StartDateRange" before two weeks or more, "The remote server returned an unexpected response: 502 Bad Gateway" error may show as below. ----------- Export-LogReportCsv -OutputFile "C:\temp\CitrixConfigLog.csv" -StartDateRange...

Citrix Workspace for Mac does not function with background elements are disabled.

Citrix Workspace App for Mac may not function as expected if background elements are disabled. The following errors may be encountered: Users may not be able to add an account. Users may not be able to log in to the Citrix Workspace app. CWA for Mac auto-update may fail Users may encounter...

Error: Connection Failed - Citrix Endpoint Management with Certificate Based Authentication

Warning Event ID = 39 or ID = 41 on Windows Server 2008 R2 SP1 and Windows Server 2008 SP2 before February 11,2025. "Connection failed" will be shown by clicking Test Connection in PKI Entities after February 11, 2025...

Backup and restore capabilities in XenServer xsconsole

XenServer hosts store metadata about VMs and associated resources such as storage and networking. This metadata forms a complete view of all VMs available across the pool. You can backup this database to recover from physical hardware failure and other disaster scenarios. The legacy backup and...

Xenserver Configuration: Comprehensive Guide

Introduction This article will direct you to resources that provide guidance on configuring basic pools for XenServer Top Knowledge Content Basic Configuration guide for a XenServer Pool CTX128391 - How to Remove a Server from a XenServer Pool that Contains Only One Host CTX216127 - How to change...

Citrix DAAS Local Host Cache

Introduction This article is a summary of the top support articles related to Local Host Cache / High Availability mode for Citrix Desktops-as-a-Service DaaS Top Support Knowledge Content CTX312157 - Citrix DaaS in an Outage State and Local Host Cache CTX272155 - Enable Local Host Cache with...

Citrix Endpoint Management: Database issues

Introduction Citrix offers a series of articles dedicated to troubleshooting various database issues, such as connectivity problems, performance bottlenecks, and data corruption. By enabling quick diagnosis and resolution, these articles help minimize downtime and enhance the reliability and...

Netscaler Licenses

Introduction These articles provide a list of Knowledge Base resources on how to allocate and install license files to the Netscaler Products. Overview of the Issue These articles capture the most common use cases when customers face issues with Netscaler Products unlicensed or running in grace...

How to Reset the XenServer Host Password on a CloudBridge 2000/3000/4000/5000

This article describes how to reset the XenServer Host password on a CloudBridge 2000/3000/4000/5000. The procedure can be completed when credentials are not working to access the SVM, XS, and Serial Console...

User Profiles are Created on StoreFront Servers

StoreFront stops working from a full disk or a hard drive that is out of space. User Profiles are created on the Receiver StoreFront server for users of either Receiver for Web or Receiver clients...

TCP Ports get exhausted on the StoreFront server

StoreFront refuses to create connections and we get below events : Event ID 4231 : Request to allocate an ephemeral port number from the global TCP port space has failed due to all such ports being in use. Event ID 4227 : TCP/IP failed to establish an outgoing connection because the selected loca...