Logon process to VDAs is extremely slow when Citrix UPM is enabled

Logon to VDAs is extremely slow when Citrix UPM is enabled. When disabling the Citrix UPM service the logon process is normal. Sophos AV 10.x is installed on the VDAs...

How to Remove Client Files Remaining on System after Uninstalling Receiver for Windows

This article is intended for Citrix administrators and technical teams only. NOTE: Receiver for Windows version 4.4 or later does not require these manual steps. Receiver for Windows 4.4 and later no longer requires separate Clean-Up Utility before installing or upgrading over a previously...

Storefront: Issue with creating new deployment - "Unable to Create Deployment"

1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...

Notice of Change Announcement for Version 11.1 of the Citrix Application Delivery Management (ADM)

Citrix Systems, Inc. announces End of Maintenance for version 11.1 of the Citrix Application Delivery Management formerly referred to as NetScaler Management & Analytics System Citrix Application Delivery Management ADM follows a 3-year product lifecycle model. Table 1. Release Milestones and Dat...

FAQ: Recommended database collations for Citrix Products

What are the DB collations supported by different Citrix Products? Product| Collation that ends with ---|--- Virtual Apps and Desktops 7| CIASKS XenApp/Virtual Apps 6.5| CIASKS and CP1CIAS Provisioning 7| CP1CIAS Workspace Environment Management WEM| CIAI Session Recording| CIAS...

Problem in taking a backup of ADC VPX from ADM

ADM is unable to take periodic backups of ADC and manual backups fail too. Here are the errors that we see in mpsconfig.log in ADM: SCP: Unable to open a session on 192.168.x.x Tuesday, 8 Oct 19 16:00:08.872 +1100 Error DeviceBackup541 Backup: Error uploading /mps/nssystembackup.pl on Citrix ADC...

How to Upgrade to License Server 11.x on Windows 2008

This article describes how to upgrade Citrix License server to 11.10 and 11.11.1 on a Windows 2008 Server...

How to Migrate PVS server from one datastore to another datastore

Migrate PVS server from one datastore to another datastore...

Error: Cannot create BDM partition for device <device name> while using XenDesktop Setup Wizard

The XenDesktop Setup Wizard might fail when creating target VMs on VmWare environmentunder the following scenario: Same service account is used; which is able to create Vms in Citrix Studio via MCS but failing in PVS All permissions are provided as per article CTX214389 vSAN is encrypted The Vm i...

Troubleshooting HDX Optimization for Microsoft Teams

This is a Live article - updated frequently with the latest info and known issues ------------------------------------------------------------------------------------------------------------------------------------------------- Recommended Teams version :latest version. Update history for...

Authentication login Issues with IOS device - error "CAMAuthManErrorCodeProtocol"

Customer receives an error "CAMAuthManErrorCodeProtocol" when he tried to login to his storefront server from the outside of hsi company...

How to Renew an APNS Certificate for Endpoint Management

This article describes how to update an APNs certificate for Endpoint Management. Refer to Citrix documentation - APNs certificates...

App Layering - How to reset Windows 10 Store Apps in User Layer

...

How To Configure RADIUS and TACACS servers for read-only and admin users in SD-WAN

...

How to Configure Citrix Gateway to use RADIUS and LDAP Authentication with Mobile/Tablet Devices

For detailed instructions refer to Citrix Documentation -Configure Citrix Gateway to use RADIUS and LDAP Authentication with Mobile/Tablet Devices...

How to reset Secure Hub PIN?

This article explains how an user can reset the Secure Hub PIN if forgotten...

Cannot connect to company network" when accessing O365 accounts

Citrix documentation indicates Secure Mail is supposed to support an MS hosted O365 back end account but user is unable to get a known good O365 account to function with Secure Mail. That same account works fine either via the web or via the Mobile Outlook App but I cannot get it to connect when...

WEM agents are not syncing consistently with the WEM broker, only if they are rebooted or if the Norskale Agent Host Service is restarted

WEM agents are not syncing consistently with the WEM broker. Running command "AgentCacheUtility -refreshcache" does not return any errors, and refreshing the VUEMUIAgent either. WEM agents sync only when they are rebooted or if the Norskale Agent Host Service is restarted. The Last Connection...

Attempting to setup UPN authentication instead of SAM. When we hit the Store Front, we get "cannot complete your request".

Attempting to setup UPN authentication instead of SAM. When we hit the StoreFront, we get "cannot complete your request". From inside the network, when accessing the storefront portal directly, able to log in with UPN. Issue appears to be the way the NetScaler is handing the authentication token ...

How to allocate Citrix licenses on My Account

This article describes how to allocate a Citrix Licenses on a Citrix portal Note: If a customer calls regarding cloud license allocation, inquire whether they are trying to allocate licenses between multi-tenants within the same Org ID or transfer licenses from one Org ID to another. If they are...

Excessive Retries Occur when a Provisioning Server Target Device is Deployed on a XenServer Platform

When the Citrix Provisioning Server target device is deployed on a XenServer platform, the device may experience some of the following symptoms: Excessive retries while performing a physical to virtual target build Slow ICA performance when using XenDesktop Freezing or locking with XenDesktop whi...

Event 7011:Service Control Manager NLASVC Service Timings Out

PVS server becomes unresponsive with numerous event 7011 - A timeout 30000 milliseconds was reached while waiting for a transaction response from the Nlasvc service...

ELM Upgrade failed because of a failed dependency check for audit-libs-python

When upgrading the ELM you receive a notification that the ELM upgrade failed, and you should revert to your snapshot and try again. That doesn't help. The ELM upgrade process is logged in /var/log/Unidesk/ApplianceUpgrader.log. It's a chatty log, but you can bring it up in an editor vi, nano,...

Cannot connect to vCenter from PVS Console using stronger SCHANNEL Protocols, such as TLS 1.2

When running the XenDesktop Setup Wizard or the Streamed VM Wizard, and connecting to a vCenter Server that has been configured to only accept connections using TLS 1.1 or higher, the PVS Console could present an error stating that the Connection was closed. The error shown will have a text simil...

Storefront 3.15 | Storefront propagation fails.

Propagation fails on Server 2012R2 machine. In event logs: Log Name: Citrix Delivery Services Source: Citrix Configuration Replication An error occurred when starting the 'WAS' Windows service. System.ServiceProcess.TimeoutException, System.ServiceProcess, Version-4.0.0.0, Culture=neutral,...

How to Delete Hosting Connection configured in Citrix Studio

Deleting a connection can result in the deletion of large numbers of machines and loss of data. Ensure that user data on affected machines is backed up or no longer required. Before deleting a connection, ensure that: All users are logged off from the machines stored on the connection. No...

NetScaler 12.1 'Address already in use' When Configuring a Load Balancing Virtual Server

User tried to configure a Load Balance virtual server, but the appliance is showing an "Address already in use" error message. The IP wasn't in use on the appliance...

Setting Azure Accelerated Networking on an ELM deployed before version 4.13

Prior to App Layering 4.13, the ELM was provisioned with a NIC that did not have Azure Accelerated Networking enabled. This feature was not fully supported by Microsoft on Linux guests prior to this point. Please note that upgrading to App Layering 4.13 will NOT change the NIC configuration. The...

Access Gateway VPN client on Windows 10

Post upgrading the PC to Windows 10 from Windows 7 Citrix Access Gateway VPN Plugin might fail with below error: Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network Configuration Operators group on this computer...

Failed to mount Elastic Layers, "A virtual disk support provider for the specified file was not found."

When using Elastic or User Layers, they do not get attached to the end-user VM when the user logs in. Checking C:\ProgramData\Unidesk\Logs\Ulayersvc.log, you see an error like this: 2018-07-19 13:02:25,804 ERROR 16 CompositingManager: Caught exception:...

Receiver for Android - Error Code 546 or 547

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users see one of the following error codes when trying to add a PNA or XenApp store to Receiver for...

Error: "Cannot Complete Your Request" Due to Authentication Misconfiguration on StoreFront

The following error is displayed due to authentication misconfiguration on StoreFront: Cannot Complete Your Request...

Display client-side notification area battery status in desktop sessions

Feature Description In previous versions of XenApp & XenDesktop, users working from a laptop and in a full-screen desktop session would not be aware of the laptop’s battery status or remaining battery level. This could lead to a loss of work/productivity for users when the laptop unexpectedly shu...

Unable to Delete vDisk Version Because "Delete" Option is Grayed Out

Unable to delete vDisk version because the "Delete" option is grayed out since one target device is still showing that is connected to it. The VM on the Hypervisor is already down, but PVS console shows the device is still Active and connected to the vDisk...

The Stream service is not running on the PVS server

The Stream Service is not running. This service is responsible for keeping all critical PVS services up and running...

How to Troubleshoot Citrix License Server

Every Citrix product environment must have at least one shared or dedicated License Server. Servers running Citrix products contact the License Server to obtain licenses when users connect. License files must be on the License Server that is associated with the product you are licensing. The...

How to create rewrite policy for Security Headers

This article explains how to create rewrite policy for content security headers, XSS protection, HSTS, X-Content-Type-Options & Content-Security-Policy ADC appliances support HTTP strict transport security HSTS as an inbuilt option in SSL profiles and SSL virtual servers...

NetScaler Kerberos WIKI - Troubleshooting

Troubleshooting details for Kerberos Constrained Delegation and Authentication related issues on NetScaler...

How to clone a XenMobile over Hyper - V 2016?

Clone a XenMobile node over Hyper - V 2016...

Native Receiver Access to Internal and External Store with Always-on NetScaler Gateway VPN Fails

User is connected to LAN and Receiver is accessing StoreFront directly or via LB. When moveing from LAN to Internet, Always-on VPN gets connected automatically. Now trying to launch an app results in error "There was a problem connecting: Store name". Trying to refresh the Receiver results in err...

[Citrix Gateway Trace Study] – LDAP Authentication

This trace study looks at how LDAP authentication to the Citrix Gateway works, using a user called "garyca" as an example. This example trace was carried out in a practice lab environment with the following IP addresses: VIP:10.90.33.172 NSIP:10.90.41.200 SNIP:192.168.0.2 LDAP/AD server:192.168.0...

Moving from Unidesk to Citrix App Layering

Although they are based on the same layering technology, Unidesk version 2 and 3 are very different from Citrix App Layering formerly Unidesk version 4. This document lays out the major product differences for exiting version 2 and 3 customers to help them understand those differences and plan fo...

NetScaler MAS Analytics Insight is Working But Some User Sessions or Data is Not Captured

NetScaler MAS Analytics Insight is working but some user sessions or data is not captured...

SDX backups not being transferred back to MAS appliance

Backups seems to be started on SDX but not getting transferred to MAS. You can see the backups are created on the SDX but they are never transferred back to MAS server. Backups present on the SDX: You will see these errors in the MAS logs: mpsconfig.log: Thursday, 11 Jan 18 07:41:33.394 +0100 Err...

App Layering: How to specify or disable SSL protocols and ciphers in the ELM

Modern security requirements often specify disabling certain SSL protocols or cipher families. The ELM uses an Apache web server daemon for accessing the Management Console UI. Citrix keeps the ELM deployment images up to date with modern requirements requiring TLS 1.2, disabling SSLv3, disabling...

Error: " Secure Hub Could Not Connect " When NetScaler is Rebooted

After NetScaler is rebooted, the existing users are not able to connect. The following error is displayed: Secure Hub could not connect...

Configure "Authentication Verification Order" Different to the Order Prompted on Logon Page Using NetScaler nFactor

This article describes how to configure "authentication verification order" different to the order prompted on logon page Using NetScaler nFactor. Background The following is the authentication field prompt order of the NetScaler Gateway logon page: 1. Login 2. Domain password 3. One-time passwor...

Citrix Workspace App for Linux: How to trust a CA certificate?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article's objective is to describe the steps involved in trusting a CA certificate in Citrix...

Error When Booting Target Devices: "vDisk file access permission denied"

Booting target device to a vDisk was showing the following error after downloading the bootstrap file: "Server IP Address:6930: vDisk file access permission denied."...

Citrix App Layering - User Layer Error "We were unable to attach your User Layer"

When end users log into a virtual machine with Elastic layering enabled, they see the error "We were unable to attach your User Layer. Any changes you make to application settings or data will not be saved. Be sure to save any work to a shared network location." Details: "Access to the path...