NetScaler Gateway : Radius Authentication Fails Intermittently Despite RADIUS Server Accept

NetScaler Gateway Authentication Scenario 1: Gateway Page would present the authentication to be done in 2 factor. First the user enters the LDAP username and password. Now there would be 2 options either user can do the touch authentication present in the MFA Application or else can wait for the...

WEM Admin console error: "A valid license server with appropriate licenses needs to be configured"

When attempting to connect to infrastructure services using the WEM Administration Console, the following error is seen: A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management...

Setting ProcMon to run at a lower altitude to capture other filter drivers

If you need to get Procmon's filter to run below us in the filter stack, it has a setting for that. Procmon is usually used to figure out what is happening on the machine, but you do not get to see the activity of things such as virus scanners and unifiltr because they happen at a lower level tha...

Citrix SD-WAN Warning: EE provisioning error WAN Optimization is not provisioned. Please use single step upgrade to upgrade your network and schedule installation

After an upgrade to version 10.x the following Warning message is displayed in the GUI:...

How to Allocate an Extra Management CPU to NetScaler MPX Appliance

The object is to add an additional Management CPU to the NetScaler MPX for Management data processing and monitoring...

FAQ: XenMobile Server Support

This article contains answers to the frequently asked questions on XenMobile Server Support. General What is XenMobile Server Support? How do I get to the support page on App Controller server? In which version of App Controller Support feature is available? What are the browsers and platforms...

Troubleshooting a 3rd Party Wrapped App

XenMobile: Troubleshooting a 3 rd Party Wrapped App 1. Test with the core .ipa or .apk file.Does the core file work without being wrapped? If yes go to 2. 2. Do other wrapped application works as expected? If yes go to 3. 3. Wrap with the latest toolkit found at:...

FAQ: Citrix Secure Mail APNS for IT Admins

This article provides answers to frequently asked questions onCitrix Secure Mail APNS forIT Admins.For more information on Push Notifications for Secure Mail, refer to Citrix Documentation - Rich Push Notifications for Secure Mail for iOS. General Overview Q1: Why does Secure Mail for iOS require...

NetScaler Kerberos WIKI - Troubleshooting

Troubleshooting details for Kerberos Constrained Delegation and Authentication related issues on NetScaler...

FAQ: Can we disable FaceID as passcode for Secure Hub on iPhone X?

Q: Can we disable FaceID as passcode for Secure Hub on iPhone X? A: Face ID feature uses the same APIs as the Touch ID feature on Apple devices. Currently we have the option to disable FaceID/TouchID for unlocking the devices using restrictions policy. However, we cannot restrict the iCloud or...

PVS image published from App Layering gives a BSOD with inaccessible boot device error

When booting an image in PVS that was published via App Layering, you may receive a BSOD with theINACCESSIBLE BOOT DEVICE error...

NetScaler MAS Analytics Insight is Working But Some User Sessions or Data is Not Captured

NetScaler MAS Analytics Insight is working but some user sessions or data is not captured...

Cannot See HDX, TCP, Gateway, and Web Insight Data on NetScaler MAS

Cannot see HDX, TCP, Gateway, and Web Insight data on NetScaler MAS...

Failed to Publish Image to PVS server, Unidesk Agent error: "The specified service does not exist"

When publishing a Citrix App Layering image to PVS, you might get an error like this - Error: The operation being requested was not performed because the user has not logged on to the network. The specified service does not exist. You may also see 'Access is Denied'. This is recorded in the Unide...

Improved Control Over the Remote Language Bar for Seamless Published Applications

Introduction This feature enhancement first appears in the XenApp and XenDesktop 7.17 Product Release. Code changes to support this feature were required in Windows VDA version 7.17 and Receiver for Windows 4.11. Using the Receiver for Windows UI, users can now configure whether they want to...

Configure "Authentication Verification Order" Different to the Order Prompted on Logon Page Using NetScaler nFactor

This article describes how to configure "authentication verification order" different to the order prompted on logon page Using NetScaler nFactor. Background The following is the authentication field prompt order of the NetScaler Gateway logon page: 1. Login 2. Domain password 3. One-time passwor...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

Citrix App Layering - User Layer Error "We were unable to attach your User Layer"

When end users log into a virtual machine with Elastic layering enabled, they see the error "We were unable to attach your User Layer. Any changes you make to application settings or data will not be saved. Be sure to save any work to a shared network location." Details: "Access to the path...

On servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start.

On several servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start anymore although no error was returned during Hotfix installation. In the IMA Runtime registry, the Currently Loading Plugin will have MfSrvss.dll. Moreover, when checking the Certificate settings for...

EPA for device certificate check fails on NetScaler

Users get the error "access denied" after EPA scan even with valid certificates available in the store...

Blocking Windows Update from going to the next Windows 10 Feature Update (for example 1703 or 1709)

Citrix App layering, and probably other Citrix products, may not yet support the very latest version of Windows 10. For instance, Windows 10 1703 Creators Edition was not supported in App Layering until version 4.8. Unfortunately, "Feature Updates" are hard to block, because the Windows Update UI...

Error: "One or more issues were detected with your licensing configuration" during XenApp/XenDesktop upgrade to 7.16

When upgrading a Delivery Controller to version 7.16, a Citrix licensing error message might appear "One or more issues were detected with your licensing configuration. If unresolved, such issues will affect users' ability to access applications and desktops after the site upgrade"...

Calculate MSS Value for NetScaler SD-WAN Appliances

By default, the MSS value is defined as 1380 bytes in aNetScaler SD-WANappliance, assuming the WAN infrastructure allows a standard IP packet maximum transmission unit MTU size of 1,500 bytes. Some WAN infrastructures might not provide enough space for MSS of 1380 bytes because additional protoco...

How to Configure Storefront for Authentication using NetScaler Gateway

This article describes how to configure authentication at StoreFront using NetScaler Gateway - StoreFront Configuration...

Management CPU Increases Periodically In Citrix ADC

When monitoring CPU utilization on the NetScaler, you will periodically notice Management CPU CPU 0 reporting 100% Utilization. This will most likely appear cyclic recurring at a fairly regular interval...

KMS is not Activating Windows on PVS 7.1

PVS: 7.1 : KMS is not activating Windows...

Profile installation failed. Profile failed to install.

On iOS devices, we receive the error profile installation failed while trying to install the Second profile...

How to enroll windows 10 devices

How to enroll Windows 10 in XenMobile...

Best Practices for Deployment of CITRIX SD-WAN

To configure the management access of SDWAN in a secure manner. https://docs.netscaler.com/en-us/citrix-sd-wan Citrix SD-WAN editions are typically deployed in an enterprise private network. We recommend that you deploy the Citrix SD-WAN solution wherein the management IPs are accessible only fro...

Generic USB Redirection after installing Citrix Receiver 12.7 for Mac on macOS High Sierra

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. New users after installing Citrix Receiver 12.7 or above for Mac on macOS High Sierra when launching...

New SCSI Controller Causes Windows to Prompt for a Reboot After Installing the Device

When powering on a machine after changing to a new host, you are immediately presented with a dialog box saying: "You must restart your computer to apply these changes"...

Secure App's access on Android devices Hung with the Screen "please wait"

End user accesses Secure App's on Android device which flips to SecureHub forauthentication and will get stuck on the screen 'Please wait' and circle keep on spinning endlessly. Screenshot Below for reference:...

NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 Builds Temporarily Offline

Citrix SD-WAN, formerly NetScaler SD-WAN UPDATE: New builds are now available. Please seehttps://support.citrix.com/article/CTX227928 for more information. Original article text: Due to an issue found in the builds, NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 builds are not available for download...

Bypass iCloud/Activation Lock using XenMobile

An end user may return an iOS device to the I.T. department and does not supply their iCloud account information. After a restore, the I.T. department cannot enroll the device as the device cannot be unlocked without iCloud credentials. XenMobile can issue a 'Activation Bypass Code' as per Apple...

Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

Why RDP Connections To Citrix VDA Consume Citrix Connection Licenses?

NOTE: This only applies to on-prem CVAD deployments. This behavior does not apply to CVAD service. Q. Even if there is no ICA session established on CitrixVDA and only RDP session is established, still Citrix Client License is consumed. A. This is an expected behavior. When we install a VDA, it...

How to to implement Rights Management Service in XenMobile Secure Mail

This article will guide you with the steps to implement Rights Management Service in conjunction with the exchange server on Secure Mail Active Sync Client, 1. Install and Configure Rights Management Service. 2. Validate the Rights Management Service Configuration. 3. Enable Rights Management...

SecureWeb 10.x: HTTP 1.1 Gateway timeout error while accessing external/internal websites from Secure Web.

While accessing any internal/external websites using Secure we get the following error in Secure web Error : Http/1.1 gateway timeout error Unable to find the requested server or DNS Error...

App Layering error "A failure occurred while publishing the Layered Image: "Failed scanning a directory for files” because of Microsoft.MicrosoftOfficeHub

App Layering 4.0 - 4.5: The Enterprise Layer Manager ELM fails while publishing an image. Error:"A failure occurred while publishing the Layered Image. Failed scanning a directory for files" Unidesk 2.x/3.x: The CachePoint Appliance fails while creating a desktop. Error: "Failed to copy folders...

Enabling Save Passwords option with Receiver for ios and Storefront

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. For Storefront Direct Connections , password saving is not available for receiver for ios and end...

PVS Image Not Able to Get DHCP Address, Group Policies Not Applying

Event ID 5719 is logged when you start a Domain Member that is a PVS target Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5719Date: DateTime: TimeUser: N/A Computer: ServerDescription:No Domain Controller is available for domain due to the following: There are currently ...

Secure Mail: How to edit the MDX file for enabling/disabling the hidden policy.

Enable/Disable the hidden policy for Secure Mail: ex "AutoPopulateusernametitle"...

Considerations When Creating a Platform Layer in Citrix App Layering 4-x or higher

The objective of this article is to inform Citrix customers and partners about the best practices when creating a Platform Layer in Citrix App Layering 4.x. The Platform Layer is used to install drivers and software specific to a particular platform like PVS or MCS. The Platform Layer enables App...

How to resolve "Failed to probe partitions from virtual disk" error while importing an OS Layer

When importing an OS layer, you get this error: Failed to attach the disk /mnt/repository/Unidesk/OsImport Disks/Windows 10.vhd. Failed to probe partitions from virtual disk This is most often seen when importing a XenServer Windows 10 Gold VM that was exported as an OVF. However, it could happen...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

How to check PVS target device write cache size remotely

...

Web-camera redirection not working with Windows N and KN editions

Customers have reported to Citrix Technical Support that web-cameras are not being redirected into ICA sessions if the VDA is of type: Windows 7 N, Windowns 8 N or Windows 10 N or KN. What is Windows N and KN? https://support.microsoft.com/en-ie/help/11529/what-is-a-windows-7-n-edition- Labeled "...

Cannot Start App - Federation Authentication Service

The application launch fails with an error "Cannot Start App" once FAS is enabled on the StoreFront. On the StoreFront you will see Event ID 28 and on FAS server you will see Event ID 123...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

Power Managed Server VDA's does not receive shutdown request

Randomly some of the Power Managed Server VDA's receive a shutdown request approximately 20 mins after the scheduled reboot and do not power on automatically and remain Turned Off. Scout logs detect the following: Some Power Actions are marked as failures by Broker possibly because VDAs are not...