FAQ: Citrix Virtual Apps and Desktops Long Term Service Release (LTSR)

Table of Contents General LTSR Information LTSR upgrades Mixing LTSR, CR, and Cloud releases Support lifecycles LTSR compliance Citrix Workspace app LTSR Release timing Other considerations and resources General LTSR Information What’s new and what’s changed with the Citrix Virtual Apps and...

App Layering/Unidesk: Blue Screen 0xA referencing unifltr.sys

End-user virtual machines and session hosts crash with a STOP 0xA blue screen referencing unifltr.sys. unifltr the the Unidesk and App Layering filter driver...

Smart Access Guide for NetScaler Gateway, StoreFront and XenDesktop

NetScaler Smart Access is an advanced feature of NetScaler Gateway. Usually, it needs to be used in the following 2 scenarios. 1. NetScaler End Point Analysis EPA is used. 2. Restrict user’s app/desktop visibility if the session is from NetScaler Gateway. In this document, I will focus on scenari...

After updating the app, receiving an error : Incompatible error

After updating the app Secure Mail, receiving an error when launching apps. Devices: iOS only ERROR: "Incompatible app, please try removing this app and then reinstalling it."...

App Layering: Error while finalizing a layer version: "Layer volume label does not follow the required format.

When finalizing a layer version of an OS, App or Platform Layer, the task errors out with this message and returns you to the packaging machine: "An error occurred while finalizing version 'Aug2017' of Layer 'MyLayer'. Please address this issue and retry: Layer volume label does not follow the...

Steps to Renew Apple DEP Token on Cloud Endpoint Management and XenMobile Server (OnPrem)

Users can generate a new Apple Deployment Program token before the existing Apple Deployment Program token has expired. The same process applies to expired tokens. This process will not impact the existing enrolled devices...

How to Restrict MAM only enrollment to XenMobile

Enable only Enterprise Mode for Enrollment of XenMobile users and restrict them using MAM mode for Enrollment...

Citrix Hypervisor unable to sync to NTP server

Unable to sync to NTP server...

Error : Sync not permitted. Account doesn't have permission to sync with the mail server.

Error : Sync not permitted. You account doesn't have permission to sync with the mail server...

Certificate Based Authentication : Troubleshooting Tips

This document specifically addresses some common troubleshooting tips and guidelines that would help in tackling certain issues related with the Certificate based authenticationCBA. Please ensure that the initial configuration is set as per the article: https://support.citrix.com/article/CTX22047...

Certificate Based Authentication : Troubleshooting steps

3. . If the value forDS Mapper usage isDisabled , run the following command to enable it: netsh http add sslcert ipport=0.0.0.0:443 certhash=20c70a6c6e66c3f82cf6098b7bcd2859486ecd10 appid=4dc3e181-e14b-4a21-b022-59fc669b0914 certstorename=my verifyclientcertrevocation=Enable...

Troubleshooting DTLS and EDT on Citrix Gateway

In Citrix Virtual Apps and Desktopsenvironment with EDT enabled and DTLS enabled on the Citrix Gateway VPN vServer, an error may occur when trying to launch an application or desktop.Depending on the scenario, errors message may be : "Cannot connect to the Citrix XenApp Server. Protocol Driver...

App Layering: Getting AppSense and WebSense to work

You may find that AppSense is not personalizing applications properly or otherwise not functioning. Here are the directions for installing AppSense and/or WebSense in a layer,...

App Layering: Recipe for QuickBooks

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

Secure Mail: How to edit the MDX file for enabling/disabling the hidden policy.

Enable/Disable the hidden policy for Secure Mail: ex "AutoPopulateusernametitle"...

Selfservice.exe Crashes on First Log On, Second Attempt Works

When a user attempts to logon it fails the first time and succeeds the second time. The first time selfservice.exe crashes. Self-service Plug-in exited unexpectedly. Exception was Object reference not set to an instance of an object. at Dazzle.AppMonitor.Control.Controller.WaitForLogoff at...

How to Upgrade Citrix Endpoint Management (XenMobile) Servers in a Cluster

This document explains how to upgrade Citrix Endpoint Management XenMobile servers in a clustered environment...

Change Password Option in StoreFront Not Shown, Available Only for Admins

Change password option in StoreFront not shown for non-domain admins but is there for domain admins...

NetScaler SD-WAN 410-SE Stuck in Rescue Mode When Factory Reset Using NMI Button

NetScaler SD-WAN 410-SE stuck in rescue mode when it is factory reset using NMI reset button. User does not see the outputs mentioned in the reset Citrix Documentation. The following is a screenshot of recovery image landing in rescue environment: You will then see the Choose Box ID option:...

An SSL hostname is required but none was supplied

Attempting to launch application gives the error message : "Cannot start App" Storefront Reports the following error :"An SSL Hostname is required but none was supplied"...

Federated Authentication Service High Availability and Scalability

FAS High Availability Q: How can I restrict the FAS servers available to a particular StoreFront? To do this, you edit the GPO which applies to the StoreFront. You remove unwanted FAS FQDNs from the list, but be sure to replace them with a blank space character. This will ensure that the "index"...

Citrix SCOM MP for StoreFront causes high memory utilization on Windows Server 2008 R2

Citrix SCOM MP for StoreFront causes high memory usage as well as can spawn many cscript.exe and conhost.exe processes...

XenMobile: What IP address has to be assigned to MAM LB?

XenMobile: MAM LB Configuration Looks like to this day the confusion still exist as to what IP Address has to be assigned to MAM LB on NetScaler which communicates with XenMobile Server. Whether this IP Address should be Internal or External? And what standard has to be followed is the objective ...

Failed to Start a VM Error : The SR Failed to Complete the Operation

The SR failed to complete the operation...

Allow iOS MDM Exchange profile to be set as DEFAULT, and other iOS apps to interact with MAIL

Inform XenMobile Administrators how to allow iOS enrolled users the ability to set the MDM provisioned Exchange profile to be set as default mail account. Users may not see the Exchange account listed in the iOS Mail settings. Additionally users will not be able to send email with this account fr...

App Layering Recipe For Google Chrome 2.6 or Later

Google Chrome by default will install into a user profile which is problematic for mass deployment in a layer. However Google does provide an “offline” installer that installs Chrome into “Program Files” and this installer should be used with Unidesk if installing into a layer. The default way...

UPM - "Most used" section on the start menu not populated correctly

The "Most Used" section in the Start menu is not populated correctly in the user profile when logging on to Windows 8 / Windows 10 / Windows server 2012 VDA...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

PVS target and server version compatibility

Q: Can a PVS environment be configured with PVS target version higher than the PVS server version? A: No, The PVS target version should be the same as the PVS server version Configuring PVS environment with PVS target version higher than the PVS server version may work however if there is an issu...

Office not Activating in App Layering (incl. MCS Image Prep OS Rearm Failed)

Due to the complexity of Microsoft licensing, App Layering utilizes our own set of scripts to ensure Windows & Office activation. These scripts are a part of the "Citrix App Layering OS Machine Tools," and their misconfiguration is the leading cause of the "Image Preparation OS Rearm Failed" erro...

Web-camera redirection not working with Windows N and KN editions

Customers have reported to Citrix Technical Support that web-cameras are not being redirected into ICA sessions if the VDA is of type: Windows 7 N, Windowns 8 N or Windows 10 N or KN. What is Windows N and KN? https://support.microsoft.com/en-ie/help/11529/what-is-a-windows-7-n-edition- Labeled "...

ISSUE: Policy state pending or failed for Android devices

This purpose of this article is to help Xenmobile administrator troubleshoot issues related to Android policy deployment failures and also provide additional information on settings up XMS server with right values...

Cannot Start App - Federation Authentication Service

The application launch fails with an error "Cannot Start App" once FAS is enabled on the StoreFront. On the StoreFront you will see Event ID 28 and on FAS server you will see Event ID 123...

SSL configuration on VDA

See Citrix Virtual Apps and Desktops documentation Enable TLS on VDAs...

Users show as Anonymous in XenMobile Server

Users are listed as 'Anonymous' inXenMobile Server after moving their Active Directory Security Group to a new OU...

Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

Power Managed Server VDA's does not receive shutdown request

Randomly some of the Power Managed Server VDA's receive a shutdown request approximately 20 mins after the scheduled reboot and do not power on automatically and remain Turned Off. Scout logs detect the following: Some Power Actions are marked as failures by Broker possibly because VDAs are not...

VPP Required Apps Might Fail to Install on XenMobile Managed Devices

When too many VPP apps are pushed as required apps, installation may fail. The logs will show the following error. ErrorCode returned by Apple: code=9632, reason='Too many recent calls to manage licenses with identical requests'...

Creating a Seamless User Experience with XenMobile Email Enrollment for Secure Mail SSO

With the recent Secure Mail update, you can now configure Citrix Secure Mail to provide single sign-on SSO for users through the use of an automatic provisioning mechanism during your first-time use. Secure Mail consumes the user credentials that users enter to authenticate to Secure Hub to...

Troubleshooting XenCenter Proxy Authentication Issues

XenCenter does not connect to a proxy server One common problem with using a proxy server is that the client XenCenter can’t connect to it. You may receive the following error when trying to connect to a XenServer host after configuring to use a proxy server in XenCenter: You may also receive the...

How Do I Configure Cloud Connector to Support a Web Proxy

The primary intent of this article is to provide steps on how to configure the Cloud Connector to support a web proxy. The Connector supports connection to the internet via a web proxy server. The Connector requires outbound connectivity on port 443. Both the installer and the services it install...

"The specified schema name \"dbo\" either does not exist" error when upgrading

Unable to upgrade XenMobile Server from 10.3.5 to 10.5. The specified schema name "dbo" either does not exist or you do not have permission to use it.\nSQL state:42000\nSQL error code:2760"'...

XenMobile Server - Identity credential certificates (PKI) do not auto renew

MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...

Configure post-authentication Endpoint Analysis scan as factor in Citrix ADC nFactor auth

For detailed information refer to Citrix Documentation -Configure post-authentication Endpoint Analysis scan as a factor in Citrix ADC nFactor authentication...

Error: “Connection to PVS Soap Server Failed” While SCOM Management Server Tries To Communicate with PVS Servers

Getting the following error when running: Check Requirements and Configuration for Citrix MPPVS: On PVS server search for below logs: C:\ProgramData\Citrix\Provisioning Services MP Agent\mppvsagt.log says “Security Support Provider Interface SSPI authentication failed” On Event viewer seeing logs...

How to Configure Multiple License Types within a Single XenApp and XenDesktop Site

A XenApp and XenDesktop license specifies 3 things: Product, Edition, and Model. Previously, each XenApp and XenDesktop site could only consume one type of license product and model at a time. The 7.14 release of XenApp and XenDesktop now includes support for multiple license products and models...

Microsoft Visual C redistributable fails to install during VDA installation

While installing VDA in a platform layer. The VDA has MS VC redistributable pre-reqs and the pre-reqs were failing to install...

How to Add StoreFront Site to Client Trust Site Zone

This article explains how to add StoreFront site to client trust site zone, via group policy...

How to Generate Tech support bundle for Citrix ADM from CLI

The articles describes how to generate the technical support bundle of Citrix ADM...