Backend SSL Connection Fails on ADC due to missing extensions

When using Secure-LDAP which uses port 636 TCPs or while making connection to server listening on secure port,it fails in SSL handshake phase...

Local Application Access With PREFER Keywords

Application will launch within ICA channel even if it's installed locally on VDA itself...

Unable to import App Layering OS Layer to ELM from vSphere

After creating a vSphere connector and selected the host and VM to import into the Enterprise Layer Manager ELM as an OS layer, the operation will timeout within a few minutes. vSphere shows an exporting task stuck at 0% before timing out...

How to Restrict NetScaler Management Interfaces with ACLs

This article describes how to lock down the NetScaler management interfaces with ACLs. Background Customers wanting to run a secure environment should limit access to the NetScaler management interface as a best practice. Ideally, the management interfaces should be on isolated networks physical ...

WEM 4.4 -Transformer autologon is not launching the Agent at logon

WEM Transformer does not auto-launch after an end user logs onto a WEM Agent machine...

UPM usage with Windows junction, hard and directory symbolic links

The user reports that some of his documents and files are not syncronised. After checking the missing folders or files types, it is found that they are of type symbolic there are three type of symbolic links: hard links, junction links and directory links. More information:...

Failed to load user profile due to vDiskdif.vhdx size increasing

issue: users fail to load their user profile,in the mean while, the size ofvDiskdif.vhdx increased to 70GB...

Hot-add of Digest Enabled Disk Not Supported

The CachePoint Appliance could not create the boot image of Windows 10. Error is: Failed to reattach disks to the desktop that were temporarily attached to the CachePoint Appliance. In vSphere a vm reconfigure task displays, "Hot-add of digest enabled disk not supported"...

Error: “Cannot start apps. Please run reset receiver to resolve a lockdown conflict for ClientHostedAppsShortcuts (error 2320)”

Users access a StoreURL and launch published IE from their Client machines. Then they use published IE and connect to another StoreURL from another farm to access another application. Majority but not all users get errors while launching the application. Error: “Cannot start apps. Please run Rese...

Error: The trust relationship between this workstation and the primary domain failed

Users cannot log on to a system using Active Directory credentials and the following error message appears: "The trust relationship between this workstation and the primary domain failed.” This issue is seen when the session logon is attempted through Remote Desktop Protocol, ICA, or directly at...

Requirements and Limitations of Authentication at StoreFront using NetScaler Gateway

Introduction NetScaler and StoreFront interop has undergone several improvements in the last few releases to reduce integration mistakes by administrator. Initial efforts were targeted to allow administrators to import NetScaler Gateway configuration into StoreFront through the management console...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

How to Configure NetScaler MAS for readonly access via TACACS using Cisco ACS

Configure NetScaler MAS and Cisco ACS to provide readonly access to users for MAS...

Published desktop is launched in background of local applications

Setting registry key: ForegroundLockTimeout to 0 makes published desktop window to launch in foreground in most cases. HKCU\Control Panel\Desktop name: ForegroundLockTimeout type: REGDWORD data: 0 default: 200000 In some cases, there are applications that set this value to a non 0 value, which...

ISSUE: Policy state pending or failed for Android devices

This purpose of this article is to help Xenmobile administrator troubleshoot issues related to Android policy deployment failures and also provide additional information on settings up XMS server with right values...

XenMobile Policy State Pending or Failed for iOS Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to iOS policy deployment failures and also provide additional information on settings up XenMobile server with right values...

SSL configuration on VDA

See Citrix Virtual Apps and Desktops documentation Enable TLS on VDAs...

Citrix Receiver Desktop Viewer Toolbar ‘charms’ and ‘app commands’ don't work

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information In the Citrix Receiver Desktop Viewer Toolbar, we can see the ‘charms’ and ‘app commands’ shortcuts, but...

Secure Hub Error : Security policy does not allow to connect on Android devices

This article explains on how to troubleshoot the errorSecurity policy does not allow you to connect on Android devices Log analysis : Below error could mean that user is entering an expired pin. "WARNING 3","SHTP:java.io.IOException: Connection failed, status=400 subcode=HTTP/1.1 400 SHTP0005:...

Secure Hub Error: Request Failed on iOS devices

This article explains how to troubleshoot the errorRequest Failed on iOS devices when we have cert+LDAP policy on Netscaler Gateway Below error in the iOS Secure Hub logs indicates that the issue is because two factors Authentication is disabled. ,,ERROR...

How Do I Set Up Automatic Client Machine Clean Up on NetScaler Gateway?

This article describes how to set up automatic client machine clean up on NetScaler Gateway. Background This article will allow a NetScaler administrator to force clean-up when an user closes a session. You can specify all, none, or any combination of the client-side items. These items are: Cooki...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...

Average Logon Duration Is Not Available In Citrix Director

When an administrator logs in Citrix Director and goes to "trends" to look for Average Logon Duration, the information is not available. Logon Duration in MonitorData.Session Table in Monitoring Database also shows "Null" value for "Logon Duration" Restarting the Monitoring Service on Delivery...

How to use Safari instead of Secure Web to open the links from Secure Mail?

In order to achieve the desired behavior, change the Allowed URL filed in MDX policies of Secure Mail Refer to Citrix documentation - Allow Secure Web domains MDX policy for Secure Mail...

AD Account Lockouts Due to Citrix PIN Password Caching

After a password change at ActiveDirectory, users are seeing account lockouts. XenMobile was causing these lockouts as the password cached with Citrix PIN was not updated...

Citrix Director: Could Not Establish Trust Relationship for the SSL/TLS Secure Channel

Director display in License Server section Cannot retrieve the data. Data source unresponsive due to configuration error. View Director server event logs for further information Checking the Application event log on the server running Director- logs event error: Event ID: 8 Level: Error Source:...

StoreFront - Keywords Usage

A spaceis allowed between Keywords when multiple keywords are used. Syntax- KEYWORDS:keyword2 keyword2 Example: KEYWORDS: Auto Featured The default syntax is to have one space between two keywords. However, multiple spaces also do not produce any error. There can be spaces after the colon : in th...

Demo to configure profile management through HDX policies

If you want to test to configure Citrix UPM ,you feel confused about the detail steps.This article will guide you one by one...

Notice of Change Announcement for NetScaler SD-WAN 400-SE (Standard Edition), 400-WO (WAN Optimization Edition) and 2000 WS (Windows Server)

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler SD-WAN 400-SE, 400- WO and 2000 WS products. The tables below explain the Citrix ADC NetScaler SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The...

Concepts, Entities and Terms used for nFactor Authentication through NetScaler

nFactor is the new authentication framework that allows an administrator to configure complex authentication scenarios fairly easily. It reduces complexity through flexible and extensible authentication mechanisms. This framework could be used to configure all the authentication modes currently...

Deploying enterprise MDX enabled apps from App Store via Volume Purchase

The CEM/XenMobile Server is currently optimized for Volume Purchase distribution of Public App Store apps that are not MDX enabled. While it is possible to distribute MDX enabled apps from App Store via volume purchase, some considerations must be taken into account for optimal performance. This...

How does LDAP Authentication work with Kerberos Impersonation SSO?

How does LDAP Authentication work with Single Sign On using Kerberos Impersonation? In this flow, the NetScaler is contacting the KDC after we purged tickets on the KDC, and the NetScaler. 1. The client makes a GET request to the LB vServer. 2. The LB vServer is configured with Form-based...

Create non-persistent vm on XenServer

You can create a non-persistent XenServer VM by setting the VDI param to on-boot=reset VM will reset to original state after each reboot...

Unifiltr EventID 3: Unidesk denied an attempt to rename a directory

Your software may report an error attempting to rename a directory, you may receive an error trying to move a folder to the Recycle Bin, and you may see an error in the Windows System event log on an IM that looks like this: Log Name: System Source: unifltr Date: 10/23/2013 9:58:30 PM Event ID: 3...

How to configure Google Chrome for Citrix WebHelper invoked mode

Citrix WebHelper for Google chrome can work as invoked mode or Non-invoked mode toaccess XenApp/XenDesktop resource. The article describes configuration steps for Citrix WebHelper invoked mode. It is essential to have access to back-end application via NetScaler Gateway when Receiver Client...

PVS 7.13: XenServer PVS-Accelerator Introduction and Requirements

Note : This feature is only available in XenServer 7.1 and PVS 7.13 or later. XenServer PVS-Accelerator feature offers additional capabilities for customers using XenServer and Citrix Provisioning Services PVS. With this feature, the read requests from a PVS target device can now be cached on eac...

How to Import NetScaler exported configuration: File-Introduction and Requirements?

With StoreFront 3.7, we introduced the ability to import an exported configuration from NetScaler Gateway. With the introduction of this feature, we enhance the capabilities previously available by allowing multiple vServers to be imported from a single configuration file. The Remote access...

How to Enable Password Expiration Notification on StoreFront 2.x

This article helps you configure StoreFront 2.x server to show password expiry warning message when you connect directly to StoreFront server...

Troubleshooting StoreFront Upgrade Issues

Unable to upgrade StoreFront...

StoreFront upgrade fails if PriviledgedService and MPSFagent (SCOM) is running

If the Citrix SCOM Management Pack Agent service is installed on the StoreFront server, StoreFront cannot upgrade. To work around this issue, disable the SCOM service before attempting the StoreFront upgrade. Note : This issue is not applicable to StoreFront 3.11 and higher. These services do not...

Unable to Launch Applications on StoreFront Through Thin Clients

When the user clicks on the application icon on StoreFront to launch it, nothing happens and the application fails to launch...

XenServer 7 Host Crash while starting multiple Virtual Machine

XenServer 7 Hosts crashes with below call traces while trying to start multiple vGPU attached Virtual Machines. The following trace can be found in xen.log in the crash folder /var/log/crash: XEN 101632.198343 ---- Xen-4.6.1-xs128153 x8664 debug=n Not tainted ----XEN 101632.198344 CPU: 5XEN...

How to configure SAML Authentication using Metadata?

To configure SAML Authentication with StoreFront you can use the metadata support option. This article describes the steps to perform the metadata based configuration...

StoreFront Events : the authentication protocols could not be enumerated because there is no challenge process

Issue : Cannot Complete Your Request From External Access Gateway With Event Logs as "the authentication protocols could not be enumerated because there is no challenge process "...

How to Create Custom Android KeyStore for MDX App Wrapping

This article will guide the Citrix Endpoint Management admin in creating a custom keystore which will be used to sign the unsigned android apps using MDX toolkit and/or using MDX as a service...

VMware vSphere 6.5 - Citrix Known Issues

Citrix is committed to ensuring compatibility with the latest VMware hypervisor releases. VMware released vSphere 6.5 in Nov 2016and vSphere 6.5 Update 1 in Aug 2017. Basic compatibility testing has been performed between already released Citrix products and vSphere 6.5 / 6.5 update 1.As always, ...

XAPI Service unable to start , error : xapi dies but pid file exists.

XAPI Service unable to start. It shows that the it already has a pid and is dead. Looking at the logs xensource.log, you will find INTERNALERROR as below: xapi top-level caught exception: INTERNALERROR: Xmlm.MakeStringBuffer.Error, -372779099 Caught exception at toplevel:...

Restrict access to certain URLs based on the Source client IP

Restrict certain IPs who should not be able to access certain URLs when they hit the Load balancing virtual server on the NetScaler...

PVS console showing target devices as down, even though it is possible to boot and stream to devices

PVS console showing target devices as down, even though it is possible boot and stream to devices.Event logged ID:11 Source: StreamProcess. DbAccess error: in ServerStatusSetContactInfo called from SSProtocolModule.cpp:2630. SQL DB server is up and accessible...

How to Enable Debug Logging on Workspace Environment Management Agent manually, if no connectivity to Broker exists

The Workstation Environment Management Agent and related service feature an optional debug level of logging.This additional level of logging is significantly more verbose than the standard logging levels and is disabled by default and only enabled to troubleshoot specific issues. Under normal...