FAQ: Citrix Secure Mail APNS for IT Admins

This article provides answers to frequently asked questions onCitrix Secure Mail APNS forIT Admins.For more information on Push Notifications for Secure Mail, refer to Citrix Documentation - Rich Push Notifications for Secure Mail for iOS. General Overview Q1: Why does Secure Mail for iOS require...

How to create rewrite policy for Security Headers

This article explains how to create rewrite policy for content security headers, XSS protection, HSTS, X-Content-Type-Options & Content-Security-Policy ADC appliances support HTTP strict transport security HSTS as an inbuilt option in SSL profiles and SSL virtual servers...

NetScaler Kerberos WIKI - Troubleshooting

Troubleshooting details for Kerberos Constrained Delegation and Authentication related issues on NetScaler...

FAQ: Can we disable FaceID as passcode for Secure Hub on iPhone X?

Q: Can we disable FaceID as passcode for Secure Hub on iPhone X? A: Face ID feature uses the same APIs as the Touch ID feature on Apple devices. Currently we have the option to disable FaceID/TouchID for unlocking the devices using restrictions policy. However, we cannot restrict the iCloud or...

PVS image published from App Layering gives a BSOD with inaccessible boot device error

When booting an image in PVS that was published via App Layering, you may receive a BSOD with theINACCESSIBLE BOOT DEVICE error...

NetScaler MAS Analytics Insight is Working But Some User Sessions or Data is Not Captured

NetScaler MAS Analytics Insight is working but some user sessions or data is not captured...

Cannot See HDX, TCP, Gateway, and Web Insight Data on NetScaler MAS

Cannot see HDX, TCP, Gateway, and Web Insight data on NetScaler MAS...

Improved Control Over the Remote Language Bar for Seamless Published Applications

Introduction This feature enhancement first appears in the XenApp and XenDesktop 7.17 Product Release. Code changes to support this feature were required in Windows VDA version 7.17 and Receiver for Windows 4.11. Using the Receiver for Windows UI, users can now configure whether they want to...

Configure "Authentication Verification Order" Different to the Order Prompted on Logon Page Using NetScaler nFactor

This article describes how to configure "authentication verification order" different to the order prompted on logon page Using NetScaler nFactor. Background The following is the authentication field prompt order of the NetScaler Gateway logon page: 1. Login 2. Domain password 3. One-time passwor...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

Citrix App Layering - User Layer Error "We were unable to attach your User Layer"

When end users log into a virtual machine with Elastic layering enabled, they see the error "We were unable to attach your User Layer. Any changes you make to application settings or data will not be saved. Be sure to save any work to a shared network location." Details: "Access to the path...

On servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start.

On several servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start anymore although no error was returned during Hotfix installation. In the IMA Runtime registry, the Currently Loading Plugin will have MfSrvss.dll. Moreover, when checking the Certificate settings for...

EPA for device certificate check fails on NetScaler

Users get the error "access denied" after EPA scan even with valid certificates available in the store...

Blocking Windows Update from going to the next Windows 10 Feature Update (for example 1703 or 1709)

Citrix App layering, and probably other Citrix products, may not yet support the very latest version of Windows 10. For instance, Windows 10 1703 Creators Edition was not supported in App Layering until version 4.8. Unfortunately, "Feature Updates" are hard to block, because the Windows Update UI...

Error: "One or more issues were detected with your licensing configuration" during XenApp/XenDesktop upgrade to 7.16

When upgrading a Delivery Controller to version 7.16, a Citrix licensing error message might appear "One or more issues were detected with your licensing configuration. If unresolved, such issues will affect users' ability to access applications and desktops after the site upgrade"...

Calculate MSS Value for NetScaler SD-WAN Appliances

By default, the MSS value is defined as 1380 bytes in aNetScaler SD-WANappliance, assuming the WAN infrastructure allows a standard IP packet maximum transmission unit MTU size of 1,500 bytes. Some WAN infrastructures might not provide enough space for MSS of 1380 bytes because additional protoco...

How to Configure Storefront for Authentication using NetScaler Gateway

This article describes how to configure authentication at StoreFront using NetScaler Gateway - StoreFront Configuration...

KMS is not Activating Windows on PVS 7.1

PVS: 7.1 : KMS is not activating Windows...

Local Application Access With PREFER Keywords

Application will launch within ICA channel even if it's installed locally on VDA itself...

Profile installation failed. Profile failed to install.

On iOS devices, we receive the error profile installation failed while trying to install the Second profile...

How to enroll windows 10 devices

How to enroll Windows 10 in XenMobile...

Best Practices for Deployment of CITRIX SD-WAN

To configure the management access of SDWAN in a secure manner. https://docs.netscaler.com/en-us/citrix-sd-wan Citrix SD-WAN editions are typically deployed in an enterprise private network. We recommend that you deploy the Citrix SD-WAN solution wherein the management IPs are accessible only fro...

Generic USB Redirection after installing Citrix Receiver 12.7 for Mac on macOS High Sierra

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. New users after installing Citrix Receiver 12.7 or above for Mac on macOS High Sierra when launching...

New SCSI Controller Causes Windows to Prompt for a Reboot After Installing the Device

When powering on a machine after changing to a new host, you are immediately presented with a dialog box saying: "You must restart your computer to apply these changes"...

Secure App's access on Android devices Hung with the Screen "please wait"

End user accesses Secure App's on Android device which flips to SecureHub forauthentication and will get stuck on the screen 'Please wait' and circle keep on spinning endlessly. Screenshot Below for reference:...

Bypass iCloud/Activation Lock using XenMobile

An end user may return an iOS device to the I.T. department and does not supply their iCloud account information. After a restore, the I.T. department cannot enroll the device as the device cannot be unlocked without iCloud credentials. XenMobile can issue a 'Activation Bypass Code' as per Apple...

Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

Why RDP Connections To Citrix VDA Consume Citrix Connection Licenses?

NOTE: This only applies to on-prem CVAD deployments. This behavior does not apply to CVAD service. Q. Even if there is no ICA session established on CitrixVDA and only RDP session is established, still Citrix Client License is consumed. A. This is an expected behavior. When we install a VDA, it...

How to to implement Rights Management Service in XenMobile Secure Mail

This article will guide you with the steps to implement Rights Management Service in conjunction with the exchange server on Secure Mail Active Sync Client, 1. Install and Configure Rights Management Service. 2. Validate the Rights Management Service Configuration. 3. Enable Rights Management...

App Layering error "A failure occurred while publishing the Layered Image: "Failed scanning a directory for files” because of Microsoft.MicrosoftOfficeHub

App Layering 4.0 - 4.5: The Enterprise Layer Manager ELM fails while publishing an image. Error:"A failure occurred while publishing the Layered Image. Failed scanning a directory for files" Unidesk 2.x/3.x: The CachePoint Appliance fails while creating a desktop. Error: "Failed to copy folders...

PVS Image Not Able to Get DHCP Address, Group Policies Not Applying

Event ID 5719 is logged when you start a Domain Member that is a PVS target Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5719Date: DateTime: TimeUser: N/A Computer: ServerDescription:No Domain Controller is available for domain due to the following: There are currently ...

Secure Mail: How to edit the MDX file for enabling/disabling the hidden policy.

Enable/Disable the hidden policy for Secure Mail: ex "AutoPopulateusernametitle"...

Considerations When Creating a Platform Layer in Citrix App Layering 4-x or higher

The objective of this article is to inform Citrix customers and partners about the best practices when creating a Platform Layer in Citrix App Layering 4.x. The Platform Layer is used to install drivers and software specific to a particular platform like PVS or MCS. The Platform Layer enables App...

How to resolve "Failed to probe partitions from virtual disk" error while importing an OS Layer

When importing an OS layer, you get this error: Failed to attach the disk /mnt/repository/Unidesk/OsImport Disks/Windows 10.vhd. Failed to probe partitions from virtual disk This is most often seen when importing a XenServer Windows 10 Gold VM that was exported as an OVF. However, it could happen...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

How to check PVS target device write cache size remotely

...

Cannot Start App - Federation Authentication Service

The application launch fails with an error "Cannot Start App" once FAS is enabled on the StoreFront. On the StoreFront you will see Event ID 28 and on FAS server you will see Event ID 123...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

Power Managed Server VDA's does not receive shutdown request

Randomly some of the Power Managed Server VDA's receive a shutdown request approximately 20 mins after the scheduled reboot and do not power on automatically and remain Turned Off. Scout logs detect the following: Some Power Actions are marked as failures by Broker possibly because VDAs are not...

How to Configure Microsoft MAK Volume Licensing in Provisioning Services Server

Configuration MAK in Provisioning Services Server...

NotNow - Explanation and Cause

There are certain times when the device is not able to do what the server requests. For example, databases cannot be modified while the device is locked with Data Protection. When a device cannot perform a command due to situations like this, it will send the NotNow status without performing the...

How to Generate Tech support bundle for Citrix ADM from CLI

The articles describes how to generate the technical support bundle of Citrix ADM...

Preventing the Cache-Control Response Header from being Set to private

Q: When Compression is enabled on a NetScaler appliance, can you prevent the Cache-Control response header being set to the value private? A: Yes. You can prevent the Cache-Control response from being set to the value private when compression is enabled on a NetScaler appliance. To prevent the...

Demo to configure profile management through HDX policies

If you want to test to configure Citrix UPM ,you feel confused about the detail steps.This article will guide you one by one...

StoreFront 3.9 Install Fails With "Message Exception Has Been Thrown by the Target of an Invocation"

StoreFront installation fails with no errors. Event Id 0"Message exception has been thrown by the target of an invocation" In StoreFront "Citrix-DeliveryServicesRoleManage" logs, you find Error Unexpected exception. Message: Exception has been thrown by the target of an invocation.. Stack Trace =...

Elastic layer not available, "no elastic layer assignments were specified"

After publishing an image with Elastic Layering enabled, when you try to connect to a session host, the layer doesn't show up and you get an error in the Application Log in Windows: "no elastic layer assignments were specified"...

Unifiltr EventID 3: Unidesk denied an attempt to rename a directory

Your software may report an error attempting to rename a directory, you may receive an error trying to move a folder to the Recycle Bin, and you may see an error in the Windows System event log on an IM that looks like this: Log Name: System Source: unifltr Date: 10/23/2013 9:58:30 PM Event ID: 3...

Information : XenApp/XenDesktop Performance Counters

1. CitrixBrokerService 1. Application Cache Writes 2. Brokered Sessions 3. Database Avg. Transaction Time 4. Database Connected 5. Database Transaction Errors/sec 6. Database Transaction/sec 7. Deregistration Requests 8. Expired Launches/sec 9. Expired Registrations 10. Expired Registration/sec...

Profile Management: File Type Association (FTA) Fails to Roam on Windows 10 and Windows Server 2016

On Windows 10 and Windows Server 2016, Microsoft introduced a new security mechanism to check settings of default applications in the registry. Occasionally, the Windows Profile Service changes the security settings of the user registry entry. As a result, the settings of default applications are...

How to configure SAML Authentication-Test Configuration

A test page is available to help test that SAML authentication is working and configured correctly. This page bypasses any Storefront components and only verifies the SAML authentication...