How to Restore NetScaler SDX to Factory Default Settings

This article describes how to restore NetScaler SDX to factory default settings. Important Points to Note 1. The procedure mentioned in this article is for troubleshooting or a last resort step only. The recommend procedure to restoreNetScaler SDX to factory default settings is using SVM GUI . 2...

Understanding and Configuring EPA Verbose Logging on Citrix Gateway

CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...

Error: 403 forbidden | Post authentication when accessing through NetScaler Gateway

We see 403 forbidden error post authentication when accessing the apps through Netscaler Gateway...

Error: "Please check your credentials you may have mistyped them" on XenMobile

XenMobile enterprise migration is completed successfully from 9 to 10.1. Enrollment begins OK, MAM side errors out. Customer initiates enrollment and when Secure Hubagain is connecting to MAM and user is expecting to enter PIN prompt they see the following error: Please check your credentials you...

How to Configure Device Certificate on Citrix Gateway for Authentication

Adevice certificateverifies that a user device is allowed to connect to the internal network. NetScaler Gateway supports device certificates that enable you to bind the device identity to a public key. Notes : You must install NetScaler Gateway 10.1, Build 120.1316.e or later or 10.5.e.x or 10.5....

Error: "An error occurred communicating with the server" When Opening PVS Console and Connecting to the Farm

After upgrading Provisioning Services PVS, the following error message appears when launching the PVS Server Console: "An error occurred communicating with the server."...

Database Connection Issues in XenDesktop and Provisioning Services

When adding a Delivery Controller to a site, the following error appearsin the XenDesktop studio: “The services could not connect to the database. Possible reason for message: The database server may not be allowing remote connections. Ensurethe database server is setup correctly and that the...

NetScaler Gateway Stuck at cgi/setclient After Log On

NetScaler Gateway stuck at cgi/setclient after log on...

How to Obtain SNMP MIB File for NetScaler SDX Appliance

...

XenServer Security Update for Multiple Issues

Severity: High Description of Problem Several issues have been identified that affect XenServer 8.4. These are: An issue that may, in some circumstances, allow a malicious privileged user in a guest VM to compromise the host. This issue has the following identifier: CVE-2026-23558 An issue that m...

XenServer Security Update for CVE-2026-4397

Severity: Medium Description of Problem An issue has been identified in XenServer 8.4 which, when starting a VM on a host with limited available memory, may allow a privileged user in that newly starting VM to access memory data of a previously terminated VM. This issue has the following...

XenServer Security Update for CVE-2025-58147 and CVE-2025-58148

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-58147 CVE-2025-58148 Affected Versions These issues affect XenServer 8.4...

Slow initial page load when connecting to Storefront after upgrading to 2411/2503

After installing StoreFront 2411/2503, connections made to the landing page for a Storefront Store i.e. https://example.com/Citrix/XenAppWeb, users experience a 6 second delay before the logon page fully loads...

NetScaler: FQDN based service is Down

FQDN based service is not coming UP and showing Server State as DOWN The Monitor status might be "Domain name not resolved" But from CLI, if you tried to resolve the hostname it might show the response...

Citrix PVS Console and Server Not Visible to Other Admins After Installed via CLI

After installing the Citrix Provisioning Services PVS Console and server version 2402 CU2 on a Windows Server 2019 machine using command line, the application is only visible to the user who performed the installation. Other administrators logging into the same server do not see the Citrix PVS...

GACS - App Configuration settings not being applied to HTML5 Client

App Configuration service GACS settings to disable options in the Toolbar for HTML5 client are not applied...

Update NetScaler Console certificate

NetScaler Console allows you to replace the default inbuilt database certificates with your own certificates from a trusted certificate authority. You can also configure your own cipher suites in the NetScaler Console database. This feature provides greater flexibility and security for your...

NetScaler Reset with Code 9222

Users report being unable to access a specific application. Investigation reveals that the NetScaler is resetting the packet with Reset Code 9222 when the server responds to the client’s request...

NetScaler Appending random strings in http POST method causing "500 Internal Error"

The NetScaler appends some random string to POST request sent to the backend server, This results in failure, “HTTP 500 Internal error” to be specific...

GUI Issue - Unbinding the LogAction from Rewrite policy fails from GUI but works from Cli

Re-Write Policy is configured with a Log Action bound to it. When the Log Action is removed from the policy via the GUI, the policy is not actually removed. After hitting 'OK', there's no error, and the Log Action is still bound when checked again...

Azure deployed machines fail to Power On due to Data Collection Rule Associations

When applying a Machine Profile to an Azure-based Machine Creation Services catalog, attempting to Start machines may result in one of the following errors: "code":"UnsupportedFeature","message":"Data Collection Rule Associations is not supported in the location of the targeted parent resource...

Support for Tunneling Syslog to On Premise Datacenter when using Adaptive Authentication on Cloud

Configure external syslog server when using Adaptive Authentication on Cloud...

CVAD 2402 - Updating MCS non-profile based catalog to profile based

Boot Diagnostic setting needs to be applied to already created non profile based MCS random catalog. To inherit profile based settings from a VM source to an existing catalog which is non-profile based...

Canvas Display - Use multiple monitors as a single monitor for App launch

Map multiple monitors attached to the Endpoint as a single display to stretch the Application window across all the monitors...

Citrix DaaS - Hosting Connection "Username and Password Not Recognized" Error

When attempting to establish or test a hosting connection within your virtualization environment, the system reports an authentication failure with the following error message: "The username and password combination supplied for this connection was not recognized." This error indicates that the...

Citrix DaaS: Autoscale fails to turn ON the Virtual Machines

You may see AutoScale failing to turn ON the Virtual Machines at the scheduled time in AWS...

Netscaler-14.1- How NetScaler handles expect:100 continue header

When NetScaler gets an HTTP request that includes the Expect: 100-Continue header, it sends a 100 Continue response back to the client. This step is important because NetScaler’s Application Firewall needs to review the full request—including the body—before passing it on to the backend server...

Enable Azure AD Joined Device Management Functional Limitations

After configuring "Enable Azure AD Joined Device Management" stale machine objects are not automatically removed from AAD. - Made a custom aad role with the following permissions: microsoft.directory/devices/standard/read microsoft.directory/devices/delete - Assigned this role to the spn we use...

Latency using any Cloud application with 49" Inch Monitor ( using 5K resolution [5120*1440] )

After switching from On-Prem 1912 CU6 to Cloud 2203 CU3 - There is sluggish performance using a higher resolution monitors & increased in number of Monitors - Problem appears on 6 monitors with a resolution of 19201200 - Problemappears on 1x monitor with 49" curved monitor with a resolution of...

VDA 2402 - How to redirect all URLs using Host to Client Redirection

Use Host to Client Redirection policy to redirect all URLs from the VDA to the Client. This is useful when redirection fails when the URL is not added to ValidSites Registry, but Customer wants to redirect a long list of URLs but doesn't mind redirecting all URLs...

NetScaler 14.1 43.x - Citrix ADM Telemetry Download Fails with Error "400 Bad Request"

Citrix ADM users might encounter an immediate "400 Bad Request" error when attempting to download the 'Telemetry file'. As per mpsservice.log - ./mpsservice.log:1 x.x.x.x Debug TCPServerConnection default4473 HTTP Request from URI:/nitro/v1/download/consoletelemetry.tgz, method:GET...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 5

Package name: xms10.16.0.10551.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10427.bin, xms10.16.0.10318.bin, xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: April 2025 Languages supported: English US Important notes about this update As a best practice...

ADC: HSTS not working on NetScaler Gateway when using a Standard License.

After enabling HSTS at the Gateway Virtual Server using SSL Profile or SSL Parameters, some responses still do not contain the HSTS header...

OnPrem | CVAD 1912 upgrade throws an error "The license server doesn't support the hosting network"

During CVAD upgrade from 1912 version to 2203 CU3 version, we receive the error "The license server doesn't support the hosting network" and upgrade fails...

Citrix Virtual Apps and Desktop 2402 - Citrix applications could not be maximized after minimizing

Users with multiple monitors might find that after minimizing a Citrix published application on an external screen, then disconnecting and reconnecting that screen, the application fails to maximize correctly. It might appear small, in the wrong place, or seem frozen...

uberAgent - data volume

How much data volume does the agent produce? Can I reduce the data volume?...

Citrix Client redirected printers missing print vendor specific configurations

The customer observed some users reported that client printers mapped into their Citrix sessions were missing printer specific configurations. The most common reported issue from users in this case was that the second printer tray was not available when using Citrix published applications. Window...

PVS Server: Windows Event logging for UEFI target Devices Boot Time inaccurate

The customer had built a new UEFI based vdisk and deployed it to production. The customer subsequently observed that the PVS Servers were recording a clearly inaccurate boot time, of millions of minutes, in Windows Event logs when target devices were booting. Example inaccurate boot time logged i...

Linux Virtual Delivery Agent - ICA session crashes when resizing

When resizing the ICA Session Window, users might see that the session crashes...

Citrix Virtual Apps and Desktops 2402 - Custom Application menus cut off after VDA upgrade

After upgrading the VDA from VDA 1912 to VDA 2402, users may notice that the fonts and graphics are not fitting within the custom application UI. Issue is generally seen when the client display has high resolution. Setting the High DPI setting on the Citrix Workspace App for Windows to Yes, may...

Applying Modern UI patch for Citrix Storefront LTSR2402 CU2 (to support CWA Linux Clients)

Symptoms or Error When users on Linux login to their Citrix Workspace App for Linux , they see an infinite progress screen or error instead of seeing the list of their apps and desktops. This is applicable only for customers where the admins have 1. Upgraded their StoreFronts to the new Storefron...

Cannot create hosting connection for AWS "Failed to connect the AWS EC2 endpoint URL"

On entering API key and Secret key with Role Based Authentrication for AWS get the following error: Transaction ID:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Action Name: HostingEditHypervisorConnection Exception: StudioErrorId : ConnectionValidationFailure Reason : ManagedMachineGeneralException Exception :...

iOS Workspace App 2501.10 - How to Fix Login Hang at "Stay Signed In" Prompt

Users of the Citrix Workspace app on iOS devices may experience a hang or freeze at the "Stay Signed In" prompt after adding their Citrix Cloud workspace URL. The app becomes unresponsive, preventing users from selecting either "Allow" or "Deny."...

Windows 365 Cloud PC VDAs registration getting stuck at initializing state

Windows 365 Cloud PC VDAs getting stuck at initializing state, users cannot access the desktop On the VDA, Citrix Gateway service NGS logs located in "C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Citrix\Ngs" directory will show the below errors. TimeStamp=2025-03-18T07:18:59.591082Z...

Microsoft Security Update Validation Report March 2025

Microsoft’s March 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

CVAD: Importance of LogonTimings WMI class for reporting Logon Duration in Citrix Director

Ques: Why is LogonTimings WMI class important for reporting Logon Duration in Citrix Director? Ans: LogonTimings WMI class is crucial for monitoring and reporting logon durations in Citrix environments. It provides detailed metrics that help administrators analyze and troubleshoot logon performan...

Daas unable to create host connection with error: "URL invalid"

Unable to create a host connection to AWS EC2 and on-premises hypervisors XenServer, VMWare, etc. with invalid URL or authentication failure when a proxy has been configured for the Network Service account...

BSOD, "BAD SYSTEM CONFIG INFO", When Creating a New Layer

When trying to create a new Windows 11 platform layer a BSOD loop occurs during the first boot of the packaging machine. Offload Composting was enabled. The below screens are seen...

Configuring USB Device Auto redirection on newer Citrix workspace App for Windows

USB Device Auto redirection configuration on newer Citrix workspace App for Windows...

Citrix Printing - Printer properties local settings is grayed out

Printer properties local settings grayed out after Citrix VDA server upgraded to Windows 2019 and Citrix upgraded to 2402...