Configuring Gateway nfactor authentication with Radius first & LDAP second

Describe how to configure Citrix Gateway appliance to use RADIUS authentication as first factor and LDAP authentication as second factor The Storefront - Gateway Integration should be in place using 'Domain' Logon type in the Gateway configuration in the menu 'Manage Citrix Gateway'...

Vulnerability CVE-2008-5161 (SSH Server CBC Mode Ciphers Enabled) on SDX

Regarding vulnerability CVE-2008-5161 SSH Server CBC Mode Ciphers Enabled, we need to follow the below article to mitigate this vulnerability. Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD citrix.com However, we are unable to perform the steps mentioned in the...

How to track the Citrix Gateway Service Points-of-Presence(PoP) of active HDX session

Citrix Gateway Service is designed to operate across multiple Points of Presence POPs in order to enhance availability and performance. In the event that a POP goes down or experiences connectivity degradation beyond specified thresholds. Citrix Optimal Gateway Routing responds to subsequent DNS...

App Layering | The digital signature on wfica32.exe is invalid

When opening a Citrix application from the store, the .ica is downloaded to the computer. When that .ica file is opened, an error message appears: "The digital signature on wfica32.exe is invalid."...

How to drop illegal hostname contained request in NetScaler Gateway with responder policy

This article will describe how to configure responder policy to drop illegal hostname contained request in a NetScaler Gateway. e.g."nsg.lab.local" is the FQDN of NetScaler Gateway, to block user from accessing the gateway with other URLs, like IP address or other FQDN with tempering DNS records...

How to use rewrite policy to add text message or links under logon button in Gateway logon page

This article describes how to add text message or links to Gateway logon page with RfWebUI based portal theme. The below image is the Gateway logon page for an end user. Links and text message are under Log On button. The solution in this article applies to both basic authentication and AAA...

Cannot complete your request error when using Azure AD saml authentication

SAML authentication policy for AG has been configured. The IDP is Azure AD. However, "Can not complete your request error" appeared when using AG SSO Storefront...

Unable to add gateway URL to the Workspace app. Your account cannot be added using this server addre

Account Adding failure in Citrix Workspace via inputing Gateway FQDN with below error: "Unable to add gateway URL to the Workspace app. Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...

Cannot Connect to Server ";40;STAxxxx" on Mac Client

Symptom 1: Cannot connect to server ";40;STA " when launch ICA session from mac client With VPN enabled, user can only access internal network and fail to launch ICA session. Without VPN enabled,user can access to external network and launch ICA Session successfully Symptom 2: "The SDK context...

How to Recognize NetScaler Gateway User Login and Logout Entries in ns.log

This article introduces how to locate gateway login and logout records in ns.log to monitor authentication success/failure for each user...

How to access http://director/Citrix/Monitor/OData/v3 in HTTPS

Accessinghttp://director/Citrix/Monitor/OData/v3 in HTTPS...

Secure Mail - Unable to sync emails - Log Error: Caught ParserException in with Sync

Emails do not sync. Reinstalling Secure Mail does not resolve the issue. Secure Mail logs show: " 2019-07-16T10:40:23.024-0700 ",SecureMail,ERROR 2,-ActiveSyncEngine postSynchronousCommandWithData:contentType:withParser:withCommandString:withTimeout:error:,"Caught ParserException in with...

Mouse cursor disappears in the double dop scenario

The mouse cursor disappears in certain double-hop scenarios or when using the VirtualBox client. There appears to be a bug in the VirtualBox client rendering of 32-bit color cursors, which causes the mouse cursor to disappear. Double-hop scenarios where CWA for Linux versions prior to 2309 and CW...

Prompt for username and password when accessing the published App or Desktop

Prompt for username and password when accessing the published App or Desktop on VDA...

StoreFront Propagate Changes not working

Running Propagation results in MMC returning "Snap-in Unavailable: This snap-in performed a non-valid operation and has been unloaded ... Exception Message: Object reference not set to an instance of an object" In event viewer, Citrix Delivery Services Admin records "Error in retrieving...

How to bypass EPA check on mobile device using nfactor Authentication

This article describe how to bypass EPA check on Mobile device using nFactor Authentication.Mobile devices will not run the EPA scan if you configure Pre-authentication for EPA scan. Mobile device can always hit policy and it will fail...

RDP Error from ICA Session: "An authentication error has occurred (Code: 0x800706be)"

When we try to RDP inside an ICA session we get below error : Faulting application name: CredentialUIBroker.exe, version: 10.0.14393.4169, time stamp: 0x5ff78e7f Faulting module name: CtxWinlogonProv.dll, version: 0.0.0.0, time stamp: 0x5faeeb2d Exception code: 0xc0000005 Fault offset:...

Fail to add ADC URL into Citrix Workspace APP with "Http Error"

Fail to add ADC URL into Citrix Workspace APP with "Http Error" Error message "Your account cannot be added using this Server Address. Make Sure you Entered it correctly" Both Citrix Workspace APP for Windows and for Linux have the same issue Only cannot add ADC URL, if directly add Storefront UR...

Historical ICA RTT data

How to capture Historical ICA RTT data...

Cannot launch applications nor desktops at the second try in Citrix Workspace App

After adding the store to Workspace App, users can launch applications successfully for the first time. But when users exit the Workspace app and reopen it, they fail to launch applications on the second try. Error "Your apps are not available at this time" appears...

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS...

How to change admin profile on Citrix NetScaler VPX instances configured in cluster

This article provides instruction to change the admin profile of a Citrix NetScaler VPX instance that is configured in a cluster on a Citrix NetScaler SDX appliance. Requirements Two Citrix NetScaler SDX appliances should be provisioned in advance with Citrix NetScaler VPX instances and they shou...

Bookmark missing in iPhone/Android Client after NetScaler upgrade to NS13.0 91.13

After NetScaler upgrade firmware to NS13.0.91.13, in CVPN accessing mode, theBookmark is missing iPhone / Android device...

Some GPO's fail to apply when elastic layering is enabled

With Elastic Layering Apps Only enabled, gpupdate /force may report an error while applying some group policies...

Fail to add account with "Could not detect the specified account" error on Workspace APP For MAC

"Could not detect the specified account. The server might be invalid or may be unavailable at this time. Make sure the URL is correct and check your network connection. " error happen when adding ADC URL into MAC Workspace APP. MAC workspace current version is 2212. Can successfully launch resour...

Cannot Add Store to Workspace App, Errors "Your Apps are not available at this time."

Cannot add store to workspace app Your Apps are not available at this time. Please try again in a few Minutes or contact your help desk with this information: Cannot Contact Store...

Difference between 'nsconmsg -K ./newnslog -d event' and 'show ns event'

This article explains how 'show ns event' nscli command is different from 'nsconmsg -d event' output...

Upmoutlookhook64.dll error launching a Published Desktop session

Error "C:\Program Files\Citrix\User Profile Manager\upmoutlookhook64.dll is either not designed to run on Windows or it contains an error" when launching Outlook from a Published Desktop...

Citrix Cloud - Setting admin timeouts in Citrix Cloud portal

Requirement to know what the current timeout limit is when using Citrix Cloud and if it is possible to change the limit with regards to a Cloud Studio Admin session. Need to be able to force the user to have to login again after a certain amount of time...

Blank Windows Display when Open Citrix Workspace APP

When opening Citrix Workspace App, it displays blank. User cannot input store's URL or username&password to login. However, the ICA session can be launched through browser. It shows msedgewebview2.exe crashed because tsafedoc64.dll does not meet the Microsoft signing level requirement in Event...

PVS Configuration Wizard Crashes applying configuration

The PVS Configuration Wizard crashes and exits when applying configuration settings at the end of the wizard. This is visible in PVS Server application event logs, event IDs 1026 and 1000. Faulting application name ConfigWizard.exe...

Monitor Stays Black After Terminating a Remote session on Remote PC.

Black screen on Remote PC after disconnecting. Session appears to be hung or unresponsive...

Error "Couldn't connect to server 'https://gwfqdn:non-443' when log on to non-443 port vpn vserver

You may get the following error message"Couldn't connect to server 'https://gwfqdn:non-443'; while attempting to log on to non-443 port NetScaler Gateway virtual server using the latest Windows Secure Access Client. :...

How to Extend CA Validity Period and Renew FAS Certificates

This article is designed to describe how to extend CA Validity Period and renew FAS Certificates...

Published Explorer.exe and other applications close instantly after launch

When a published application such as Explorer is started, it closes instantly. Please note: this can also apply to many other applications that exhibit this behavior and not excluded to just explorer.exe. This is a built-in timer in Terminal Services which dictates if a session is not fully...

Support for ICA files in XenApp/XenDesktop Environment

When users are connecting to XenApp or XenDesktop with an ICA file, there could occur a wide range of issues related to connection, load balancing, performance,cosmetic issues with an application and so on. For users connecting with Citrix Receiver or Citrix Receiver in conjunction with StoreFron...

How to Change the Software Open iSCSI IQN in XenServer

This article contains information about how to identify and change the software iSCSI initiator IQN. By default a random IQN is generated when you install XenServer formerly Citrix Hypervisor. The IQN is a requirement when running iSCSI to identify the XenServer host on the iSCSI network. It is...

ADC upgrade failed with error code 1

Getting error code 1 while upgrading ADC Upgrade through CLI if GUI fails during Citrix ADC upgrade from 13.0 to 13.1 got failed with below error. "there was a problem with your upload. Failed with error code:1, please try again"...

Citrix Secure Access setup failed in Windows11 (ARM64 based)

CitrixSecure Accesssetup failed in Windows11 ARM64 based with the below error "Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network ConfigurationOperators group......"...

Workspace App 2203 LTSR CU2 displays a blank white box after login

Citrix Workspace App displays a blank white box after login. Issue does not happen when testing older versions of Citrix Workspace App such as 1912CU3...

How to add all VDA logon user accounts in "Direct Access Users" group automatically

Add all user accounts in "Direct Access Users" group automatically...

Failed to add admin accounts to the citrixstorefrontadministrator local group

In the installation log, there are the error： 2022/11/8 16:04:535084Information CreateAccountGroup:GroupName=CitrixStoreFrontAdministrators GroupDesc=允许使用Citrix Replication Service的用户、组和计算机。 2022/11/8 16:04:535084Error AccountHelper::CreateAccountGroup Exception caught creating account group:...

Clean up stale Azure AD devices with script

Under normal circumstances, when powering off Azure Active Directory AAD joined non-persistent VM, MCS agent inside VM will perform Azure AD leave and remove device record from Azure Active Directory. Occasionally, the action may fail, it will leave stale device in Azure AD. Recently, Azure AD...

Cannot complete your request on Gateway URL after adding new domain to trusted domains

After adding a trusted domain to Storefront. when you go to "Manage Authentication Methods", click on the settings, click on "Configure trusted Domains" and add new domains, when users try to go to the gateway URL, you may get either "Login Expired" or "Cannot Complete your Request|" error messag...

CWA 2206 or Above: Citrix Published Applications Randomly Lose Focus Or Get Minimized

Citrix Published applications randomly lose focus, hide behind another window or become minimized when using Citrix Workspace App 2206 and above. This only happens when locally-installed Chrome or Edge browsers are also running on the user's local computer...

[Citrix VPN] Citrix Secure Access Client for MacOS gets error: "Error while processing request"

When connecting Citrix VPN from the latest Citrix Secure Access Client for MacOS, you may see the following error message before login: Error while processing request. Contact your administrator. Errors in client logs: Jul 6, 2022 at 9:43:32 AM GMT+9 : No certificate extension matching Subject...

Microsoft Security Update Validation Report August 2022

Microsoft’s August 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

How to add secure attribute for citrix_ns_id cookie to Citrix Application Firewall Profile

Adding secure attribute for citrixnsid cookie...

Adding Physical Devices to Citrix Cloud using the Provisioning Devices Export Wizard. "No Devices Found to Export"

When attempting to add Physical Devices to Citrix Cloud using the Citrix Provisioning Devices Export Wizard. Getting a message "No Devices Found to Export" after selected the Device Collection to export. Note:Physical Devices can also be a VM that will not be in a Power Managed Catalog...

Citrix Provisioning Services - How To Gather CDF Traces

Starting in 1912 LTSR Citrix Provisioning Services improves on the CDF integration that kicked off in the earlier 7.0 days. This now includes the ability to natively maintain persistent rolling CDF trace logs on each PVS Server and Targets if necessary without the need for additional capture...