Unable to import GPO into Workspace Environment Management service - Invalid Zip file

When trying to import a GPO into WEM console in Citrix Cloud Web console, users get an error stating "Invalid ZIP file. Replace your file and try again"...

Which SNIP will be selected by NetScaler to connect with backend server

...

[NetScaler] Error "KB Questions and Asnwers not registered" with LDAP KBAttribute

In a SSPR nFactor configuration. You may observe error "KB Questions and Asnwers not registered" when login with LDAP password and can't move to the next AAA factor. Triggers are: The LDAP factor has noschema boundInherits username & password from a previous factor. LDAP action has KBAttribute...

NSC: NetScaler (Citrix ADC) MPX/SDX 15000, 26000, 26000-100G, 26000T-100G

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler Citrix ADC MPX/SDX 15020/15020Z, MPX/SDX 15030/15030Z, MPX/SDX 15040/15040Z, MPX/SDX 15060/15060Z, MPX/SDX 15080/15080Z, MPX/SDX 15100/15100Z, MPX/SDX 15120/15120Z, MPX/SDX 26100/26100Z, MPX/SDX 26160/26160Z, MPX/SDX...

Workspace Error "Unable to add account with the given server URL" after enabling WAF on ADC

After enabling WAF on ADC, the following error is seen while adding Citrix Gateway URL on Workspace : "Unable to add account with the given server URL. Ensure that it is correct or enter your email address." Traffic Flow Brief Topo: Workspace LB SSL Virtual Serveron ADC1 , WAF enabled Citrix...

Unable to update WAF Signatures "File too large"

Customer is unable to update NetScaler AppFw Signatures from the GUI and receives an error "File too large" when attempting the WAF signature update...

Role of Spoofed IP address in FQDN Based Tunneling

What is the role of Spoofed IP address in FQDN Based Tunneling...

Active TLS1.1 and Weak Ciphers Causing environment Vulnerabilities

This Tech Paper aims to convey what someone skilled in ADC would configure as a generic implementation to receive an A+ grade atQualys SSL Labs...

How to specify command line parameters when distributing a WEM application

To deploy applications via Workspace Environment management with additional command line parameters...

Virtual Application Launch Failure with error "The published resource is not available currently"

Launch virtual app failure via Gateway with error :"The published resource is not available currently"...

CWA displaying apps differently depending on which Storefront server you connect to

When connecting to a new Storefront server, customer is seeing icons that are displayed differently then they do when connecting to another Storefront server running the same version. Connected to the 1st server, the apps looked like this: Connected to the 2nd server, the apps looked like this:...

How to Hide HTML5 Workspace App Toolbar Download Option?

Hide 'Download' option in HTML5 Workspace App toolbar...

How to hide Storefront store from NetScaler Gateway

This article address a workaround to hide multiple stores' choice when adding account via NetScaler Gateway in Workspace at the fist time...

MPX/SDX Series 9100/16000, GUI LOM access to configuration settings are read-only

On a new MPX/SDX 9100/16000 appliance, LOM Access works fine via the CLI shell; however, while LOM Access and login via GUI are functional, the settings menu is disabled grayed out, preventing any changes from being made. It behaves as if there is read-only access even when logged in as the admin...

Windows VMs can inherit the wrong driver update settings from the template

When creating a Windows VM from a template that is set to not automatically update its drivers using Windows Update, the created VM is incorrectly set to update its drivers using Windows Update...

Microsoft Security Update Validation Report January 2023

Microsoft’s January 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwar...

Citrix Workspace App fails to open ICA file automatically

CWA configuration manager fails to open ICA file automatically with the error message: "ICA Client Configuration Manager: Could not find the file names C:\Users\..\launch.ica. Please check your installation, or contact your administrator."...

Disconnected sessions not reconnecting in Server VDA 2203 and higher

After a disconnection the user profile stays active on the server the user was first logged and is locked. When users get disconnected and click the Desktop-icon to get into their session again, they always get a temporary profile on another server. No additional configuration regarding...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 9

Package name: xms10.14.0.10942.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date:...

Microsoft Security Update Validation Report December 2022

Microsoft’s December 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites.The Store Front has successfully upgraded from 7.15 to 2203 LTSR...

CWA for Mac: How to disable Auto-Launch of CWA on MacOS

How to disable Auto-Launch of CWA on MacOS?...

ADC-13.0-Issue is with unable to upgrade ADC VPX

During Upgrade of VPX you are faced with error message, "License server version 11.14.0.2 not compatible with client version 11.16.6.0 Either upgrade the ADM to ensure that it is running", during upgrade process...

Driver Disk for Intel ice 1.8.8 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Intel's ice driver and wish to use the latest version of the following: Driver Module| Version ---|--- ice| 1.8.8 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Joining new DDC to Multi-Zone CVAD Site fails

New DDC join process to a multi-zone CVAD site spread across different datacenters fails. This happens at the step when each service on the new DDC tries to register with Citrix Configuration service...

How to configure EPA with one-to-one correspondence between usernames and mac addresses

This article address a configuration sample toconfigure EPA with one-to-one correspondence between usernames and mac addresses...

Citrix Cloud - Display messages to users in cloud workspace

Need to be able to customize messages when users log into cloud workspace to inform when of any maintenance or planned outages...

Session watermark policy. Need to change fields such as font and rotation

Session watermark policy has been enabled but requirement is to be able to change the font style, rotation and username on the Watermark...

Unable to connect to Storefront using Workspace App

Adding store fails with error 'cannot contact store' We can access store via CWA for web...

How to export logs using App Layering 2204 or higher

Walk-through the new export logs steps...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 7

Package name: xms10.14.0.10742.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10628.bin,xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: August 2022 Languages supported: English US...

WEM 2203: Citrix WEM Service Citrix.Wem.Agent.Service.exe crash

After installing WEM Agent version 2203, the following system events are logged in the VDA: Event ID 1026: .NET Runtime Application: Citrix.Wem.Agent.Service.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. and Event ID 1000: Faulting...

Start Menu not responding with User Personalization Layer enabled

Win10 20H2 start menu stops responding to mouse left click...

Citrix ADC occasionally not sending SNI to backend server in Client Hello

When enabled server side SNI + Common Name on ADC by SSL service configuration or SSL Profile, you may sporadically find ADC not sending SNI to backend server, which may cause backend SSL handshake failure...

Secure Mail Issues with Android Push Notifications

SecureMail on android devices was not getting background push notifications, therefore users had to manually open SecureMail to check for email. When examining network traces from the ADC, we observe connections to certain Google owned IP addresses are being blocked...

Citrix ADC MPX/SDX Fortville NIC Err-Disabled when LLDP Is enabled on Peer Switch/Router

If Citrix ADC is connected to a switch/router via Fortville NIC For example 10G port on MPX 8900, interface will show UP for a moment then go to Err-Disabled state. Running "show interface" command on ADC, you can find ADC Fortville NIC is in Err-Disabled State, along with TX Stall andHang counts...

How to Manually Configure Certificate Trust in Web Interface for NetScaler

This article describes how to import a root Certificate Authority CA into the NetScaler's trusted certificate store using the CLI. Setting up the certificate trust is necessary when deploying Web Interface for NetScaler in Gateway Direct Mode with the Authentication Point set to Access Gateway: A...

[Citrix Gateway] "Cannot complete your request" error after adding EPA configuration

In Citrix Gateway deployment, You may encounter "Cannot complete your request" error if adding a new EPA policy in AAA vServer. For example, you have the following existing configuration to implement post EPA scan based on group name: add authentication Policy NoAuthGroup01 -rule...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 9

Package name: xms10.13.0.10922.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10817.bin, xms10.13.0.10723.bin, xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: Ju...

UPM - "The Group Policy Client service failed to sign-in. Access is denied" error observed on login

"The Group Policy Client service failed to sign-in. Access is denied" error observed on login to servers after UPM profile migration...

Citrix Analytics Service (CAS) Onboarding Assistant

CAS Onboarding Assistant helps troubleshoot issues while onboarding your StoreFront with Citrix Analytics. The Storefront server might fail to connect to Citrix Analytics after importing the configuration settings from Citrix Analytics to your StoreFront server. CAS Onboarding Assistant checks al...

Microsoft Security Update Validation May 2022

Microsoft’s May 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Apple Magic Bluetooth Mouse 2 (A1657) on iPad can't be recognized by Windows VDA

Apple Magic Bluetooth Mouse 2 A1657 connected via Bluetooth on iPad can't be recognized by Windows VDA...

Citrix Gateway Service Points of Presence (PoPs) – Citrix Cloud Japan

In order to ensure business continuity and assure the quality of service for customers using Citrix Gateway service with Citrix Cloud Japan, Citrix provides the following Points of Presence PoPs for Citrix Cloud Japan customers. Customer actions Customers who may have hard-coded the FQDN or IP...

Microsoft Security Update Validation Report April 2022

Microsoft’s April 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 5

Package name: xms10.14.0.10521.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: March 2022 Languages supported: English US Important notes about this update As a best...

Citrix-ADM using localhost IP 127.0.0.1 to send syslog traffic to Splunk server

Citrix-ADM 13.0 76.29 is noted to be using localhost IP to send Syslog traffic instead of ADM IP to external Syslog server. As a result, Citrix ADM is not able to send the Syslog traffic to Splunk server successfully as seen below. A tcpdump on Citrix ADM also shows traffic is generated and sent...

Driver Disk for Mellanox mlnxen 5.4-1.0.3.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Mellanox's mlnxen driver and wish to use the latest version of the following: Driver Module| Version ---|--- mlxcompat| Not applicable mlxfw| Not applicable auxiliary| Not applicable mlx5ib|...

App Layering - User's not getting assigned app layers at login - Elastic layer assignment JSON files changing or being reset to default

Users with elastically assigned app layers do not have those app layers showing up at login. Elastic layering assignment files are changing on the network share used for elastic app layers. Layers.json ElasticLayerAssignments.json...

Citrix SF Server Group - Tech Query

Is it possible to change the name of a Storefront Server that already belongs to a Server Group? When a Storefront Server belongs to an SF Server Group, it is not possible to change its name and, it is not recommended to do it even if the Storefront Server does not belong to any SF Server Group d...