Need to reset the SSL listener certificate on XenMobile

Need to reset the SSL listener certificate on XenMobile. Scenario : After accidentally replacing the SSL Listener certificate with another certificate, we would be unable to access the XenMobile GUI. To gain access to the XenMobile GUI to replace the SSL certificate, we need to reset the SSL...

Configuring the vDisk Access Mode

...

XenMobile: How to migrate the Cert Based Auth from existing CA to a new PKI-Infrastructure (With a new Root CA and Issuing CA)?

Existing working two-factor-authentication for XenMobile using cert based auth as the second factor are XenMobile-certificates that are issued by a Windows Enterprise Root CA. This Root CA will be decommissioned and replaced by a new Windows Enterprise Issuing CA that is signed by a new Root CA...

Error: "Cannot Complete Your Request" Due to Incorrect Session Timeout Settings on StoreFront

The following error is displayed due to incorrect session time out settings on StoreFront: Cannot Complete Your Request...

Error: "Cannot Complete Your Request" Due to Authentication Misconfiguration on StoreFront

The following error is displayed due to authentication misconfiguration on StoreFront: Cannot Complete Your Request...

Citrix Profile Management: VHDX-based Outlook cache and Outlook search index on a user basis.

Feature Description To address two Outlook-related performance issues in Profile Management, version 7.18 introduced a new user-based Outlook search index database, stored as a VHDX file. In addition, the Outlook cache .OST file can also be stored as a VHDX file. Note: Profile Management provides...

Unable to Delete vDisk Version Because "Delete" Option is Grayed Out

Unable to delete vDisk version because the "Delete" option is grayed out since one target device is still showing that is connected to it. The VM on the Hypervisor is already down, but PVS console shows the device is still Active and connected to the vDisk...

How to Troubleshoot Citrix License Server

Every Citrix product environment must have at least one shared or dedicated License Server. Servers running Citrix products contact the License Server to obtain licenses when users connect. License files must be on the License Server that is associated with the product you are licensing. The...

App Layering: "Welcome to Emergency Mode" usually means the Repository logical volume is damaged

After a reboot, the ELM refuses to boot, instead reporting you are now in Emergency Mode: Welcome to emergency mode! After logging in, type "journalctl -xb" to view system logs, "systemctl reboot" to reboot, "systemctl default" or ^D to try again to boot into default mode Give root password for...

Error: "This Operation Cannot be Performed Because a VDI is in Use by Some Other Operation"

Starting vm fail unable to find the disk OR Unable to start a VM error : "this operation cannot be performed because a VDI is in use by some other operation" OR Unable to start a VM , error : "The SR failed to complete the operation" OR Unable to start the VM , error : "This operation cannot be...

How to clone a XenMobile over Hyper - V 2016?

Clone a XenMobile node over Hyper - V 2016...

How to configure, deploy, and troubleshoot StoreFront-based assigned application actions in Workspace Environment Management (WEM)

Feature Overview From WEM version 4.6, assigned Applications actions can be applications published from a XenApp & XenDesktop Site. This feature addresses a common customer request to have WEM include the ability to provide published application shortcuts in desktop sessions and through the WEM...

Native Receiver Access to Internal and External Store with Always-on NetScaler Gateway VPN Fails

User is connected to LAN and Receiver is accessing StoreFront directly or via LB. When moveing from LAN to Internet, Always-on VPN gets connected automatically. Now trying to launch an app results in error "There was a problem connecting: Store name". Trying to refresh the Receiver results in err...

Users unable to launch the published desktops and applications - XML errors on StoreFront servers

Event ID 0, Task Category 12346: No available resource found for user [email protected] when accessing desktop group "Remote Desktop - ABCXYZ". This message was reported from the Citrix XML Service at address http://xxx.yyy.zzz/scripts/wpnbr.dll NFuseProtocol.TRequestAddress. Event ID 28, Task Category...

StoreFront management console fails to open after upgrading, or clean installation of StoreFront 3.12.x (7.15 LTSR)

StoreFront management console fails to open when upgrading StoreFront 3.12.7.15 LTSR to StoreFront 3.12.x7.15 LTSR CUx, or after a clean installation of StoreFront 3.12.X7.15 LTSR. In these situations, attempting to start the StoreFront management console displays the following errors: In the...

[Citrix Gateway Trace Study] – LDAP Authentication

This trace study looks at how LDAP authentication to the Citrix Gateway works, using a user called "garyca" as an example. This example trace was carried out in a practice lab environment with the following IP addresses: VIP:10.90.33.172 NSIP:10.90.41.200 SNIP:192.168.0.2 LDAP/AD server:192.168.0...

ADC Upgrade from ADM Fails Due to Insufficient Free Disk Space on ADC Node

The following symptoms are indicative of this issue: ADM command log status shows status as failed along with a message saying"Command failed Rebooting not found in command output" ADM log file /var/log/ns.log shows the message"Command failed Rebooting not found in command output" Dec 13 11:24:39...

App Layering: How to specify or disable SSL protocols and ciphers in the ELM

Modern security requirements often specify disabling certain SSL protocols or cipher families. The ELM uses an Apache web server daemon for accessing the Management Console UI. Citrix keeps the ELM deployment images up to date with modern requirements requiring TLS 1.2, disabling SSLv3, disabling...

Error: " Secure Hub Could Not Connect " When NetScaler is Rebooted

After NetScaler is rebooted, the existing users are not able to connect. The following error is displayed: Secure Hub could not connect...

Enlightened Data Transport Not working with Double Hop DMZ scenario

EDT requires policy on the XenDesktop to be enabled and DTLS on the NetScaler to be ON. Also, StoreFront needs to be minimum Version 3.8 and Citrix Receiver at 14.7. So all the requirements are met. At theXenDesktop Policy for "HDX Adaptive Transport" is set to "preferred", still connections fail...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

On servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start.

On several servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start anymore although no error was returned during Hotfix installation. In the IMA Runtime registry, the Currently Loading Plugin will have MfSrvss.dll. Moreover, when checking the Certificate settings for...

Error "Packets dropped due to licensed throughput rate being reached" on NetScaler

The following error is recorded in the ns.log file on NetScaler: EVENT Message 62992 0 : "410 packets dropped due to licensed throughput rate being reached"...

PVS Console | Fails to load farm\site\server details with error 'Server communication timeout'

The PVS Console throws following error while expanding farm\site\server details: 'Server communication timeout' MMC Console timeouts may also be seen. Now consider a Large AD Environment, where there are multiple Domains and the PVS Administrator User account used to access the PVS Console is par...

How to disable Interrupt Safe Mode in Provisioning Services

How to disable Interrupt Safe Mode in Provisioning Services The "Interrupt Safe Mode" configuration is a special setting designed to handle bad PXE implementations that do not comply with PXE standards or have bugs. The setting forces a reset on the UNDI Interface after sending every packet into...

XenMobile: 500 Server Internal Error when uploading Android APK File to XMS

When trying to upload an APK app to the XMS console using Internet Explorer 11, we are getting a 500 Server Internal Error Looking into the error logs. The previous version x.x.x.0 works fine however upgrading the version gives - 500 Server Internal Error...

Seamless Flags Configuration for Epic Hyperspace

This article includes recommended configuration for specific issues that may be encountered in your EpicHyperspace via CVAD deployment. These configurations should only be used if you encounter the specific issue mentioned. Before determining whether or not you will use any of these configuration...

How to Update MCS created Machine Catalog to modify vCPU, RAM.

Due to performance issues the vCPU,RAM need to be increased. This can be done by power shell...

How to Publish XenMobile App Store apps using iOS Volume Purchase Program (VPP)

The Apple iOS Volume Purchase Program VPP solution allows the customer to manage iOS app licensing, therefore simplifying the process to find, buy, and distribute apps and other data in bulk for an organization. With VPP, you can use XenMobile to distribute public app store apps. VPP is not...

App Layering 2.x/3.x: Best Practices

A consolidation of the various layering best practices to apply in the OS and App layers. For App Layering 4.x Best Practices, please refer here:https://support.citrix.com/article/CTX225952 Operating System Layer Have one Operating System layer per Operating System Windows 7 32-bit, Windows 7...

How To Change The Default Password of nsroot User of a NetScaler SD-WAN WANOP Edition Appliance

The objective of this article is to provide the correct procedure to change the default password of nsroot user of a NetScaler SD-WAN WANOP Edition Appliance. SVM and XS instance can be accessed via CLI and customers can potentially change the password via the CLI. In this case the SVM password c...

Backend SSL Connection Fails on ADC due to missing extensions

When using Secure-LDAP which uses port 636 TCPs or while making connection to server listening on secure port,it fails in SSL handshake phase...

Error "Access is Denied" When Launching Published Applications or Desktops

Unable to launch published Desktop or apps. Error: Access denied Following event logs can be seeing on the VDAs: Source: Citrix Desktop Service Event ID: 1050 Message: Connection validation failed on domain domain.local for user username for reason "Unlicensed" Studio reports all licenses being...

Unable to import App Layering OS Layer to ELM from vSphere

After creating a vSphere connector and selected the host and VM to import into the Enterprise Layer Manager ELM as an OS layer, the operation will timeout within a few minutes. vSphere shows an exporting task stuck at 0% before timing out...

How to Restrict NetScaler Management Interfaces with ACLs

This article describes how to lock down the NetScaler management interfaces with ACLs. Background Customers wanting to run a secure environment should limit access to the NetScaler management interface as a best practice. Ideally, the management interfaces should be on isolated networks physical ...

No Published resources launching : Error Access Denied

On the VDA server event viewer - "Event: 1050 Connection validation failed on domain for user for reason Unlicensed"...

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director when user connected to static Desktops PVS+PvD in one Delivery Group. But when click the “Details” button under Activity Manager, the machine management options like “restart”, “shutdown” and “shadow” are all...

WEM SQL Database is growing to over 20 GB

WEM SQL Database is growing to over 20 GB ---...

App Layering PVS Agent error registering to ELM "Could not create SSL/TLS secure channel"

When configuring the App Layering Provisioning Services PVS Agent on the PVS server, the error"Could not create SSL/TLS secure channel" occurs...

How to Configure Syslog for XenMobile

How to enable Syslog/Sys logging for XenMobile. Note- Syslog is a standard logging protocol with two components: an auditing module which runs on the appliance and a server, which can run on a remote system. The Syslog protocol uses UDP or data transfer. Admin events and User events are recorded...

StoreFront 3.11 >>How to get the login banner on Storefront page

Storefront customization for the scremear is not working...

How to Create a Perl Based Custom Monitor on NetScaler

This article describes how to create a Perl based Custom Monitor on NetScaler. Background The NetScaler appliance has a lot of different monitors inbuilt, but there are use cases these monitors do not cover. For this NetScaler supports monitors of type USER, which brings the possibility to run...

Hot-add of Digest Enabled Disk Not Supported

The CachePoint Appliance could not create the boot image of Windows 10. Error is: Failed to reattach disks to the desktop that were temporarily attached to the CachePoint Appliance. In vSphere a vm reconfigure task displays, "Hot-add of digest enabled disk not supported"...

"Unknown Client Error 1110" error when launching Desktop using Firefox

When launching adesktop, user might get an "Unknown Client Error 1110" error The error is appearing only when using the Firefox browser to connect to the gateway. If used with other browsers, desktop is launching properly. If the ICA file is saved to the disk prior to launch, the desktop...

PVS Target device boot up stuck at "Starting Windows" or "virtual disk found"

PVS Target device boot up stuck at 'Starting Windows' forever. Most of the time reboot the problem VM from the hypervisor the VM can boot up without issue. Also we could see the PVS Target device boot up stuck at 'vDisk found'...

App Layering: Error while finalizing a layer version: "Layer volume label does not follow the required format.

When finalizing a layer version of an OS, App or Platform Layer, the task errors out with this message and returns you to the packaging machine: "An error occurred while finalizing version 'Aug2017' of Layer 'MyLayer'. Please address this issue and retry: Layer volume label does not follow the...

Requirements and Limitations of Authentication at StoreFront using NetScaler Gateway

Introduction NetScaler and StoreFront interop has undergone several improvements in the last few releases to reduce integration mistakes by administrator. Initial efforts were targeted to allow administrators to import NetScaler Gateway configuration into StoreFront through the management console...

Receiver for Windows 4.8, error "The specified module could not be found."

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Unable to launch Published Desktops, it fails to launch with error"The specified module could not be...

Citrix App Layering: How to Customize Windows 7 Visual Performance in a Layer.

There are no dedicated GPO to control that feature of customizing the performance of Visual Effects for the Windows Explorer in Windows 7. In order to get the customizations pushed out to all the desktops in the environment you need to create a registry script that will make these changes for you...

Can Users Still See Disabled Applications on StoreFront or Receiver Self Service Console if Using a Site Created on StoreFront

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Question: If Users are connecting to a StoreFront created site and accessing applications from a XA 6.x ...