Unable to Launch Applications on StoreFront Through Thin Clients

When the user clicks on the application icon on StoreFront to launch it, nothing happens and the application fails to launch...

How to Integrate Citrix Gateway with StoreFront for Access with Wyse Clients

This article describes how to integrate Citrix Gateway with StoreFront for access with Wyse clients...

How to Configure SAML- Introduction?

SAML is an XML-based open standard which enables authentication of users across products or organizations. SAML is used by identity providers such as Google and by identity and authentication products such as Microsoft AD FS, Ping Identity, CA SiteMinder and more. Citrix customers wish to use...

Best Practices for deploying PVS in multi-geo environments

In scenarios where companies have a Global presence with multiple geographical locations, it is sometimes desirable to have a Provisioning Services Farm that spans multiple locations across the globe. PVS requires a constant andreliable connection to the SQL database. If there's a delay in...

Citrix Guidelines for Antivirus Software Configuration for Citrix Profile Management

This article provides guidelines for configuring antivirus software in environments using Citrix Profile Management Technology .These antivirus guidelines are not vendor-specific and are independent of the version of Citrix Profile Management deployed, except where explicitly stated. For Citrix...

How to Create Custom Android KeyStore for MDX App Wrapping

This article will guide the Citrix Endpoint Management admin in creating a custom keystore which will be used to sign the unsigned android apps using MDX toolkit and/or using MDX as a service...

StoreFront Events : the authentication protocols could not be enumerated because there is no challenge process

Issue : Cannot Complete Your Request From External Access Gateway With Event Logs as "the authentication protocols could not be enumerated because there is no challenge process "...

Secure Mail on iOS Does Not Show Notifications for Emails in Subfolders

Emails sent to Secure Mail subfolders does not create an alert on the APNS badge notification...

The management console is unavailable because the root certificate is missing

Error: The management console is unavailable because a root certificate is missing. Go to Verisign and download the certificate “VerSign Class 3 Primary CA – G5”...

Restrict access to certain URLs based on the Source client IP

Restrict certain IPs who should not be able to access certain URLs when they hit the Load balancing virtual server on the NetScaler...

FAQ: Kerberos Support for XenDesktop 7.x

Q: Does StoreFront 3.5 support configuring Kerberos authentication with XenDesktop 7.8? A : XenApp 6.5 supports Kerberos but XenDesktop 7.x does not. Going forward Kerberos will be replaced with Virtual Smart cards. This is because of the newer FMA architecture and Microsoft's SAM architecture...

Published app does not launch when SSO is used. Desktops launch fine.

Using Receiver and Receiver for web, published app wont launch but a published desktop works fine. If user is local admin - it works If signing in with username/password on Receiver or Receiver for web - it works. Event generated on vda host: "non-brokered ica connection request denied because th...

Unable to disable receiver App Shorcuts from Appearing on Desktop or Start Menu

Icons will still show on end user Desktop Windows OS and Start Menu...

Application Launch Fails Intermittently With Event ID 7

User launches published desktop via Storefront and can see the DesktopViewer. Desktop Viewer closes after a few seconds and logs the following error in the EventLog: Event ID: 1050 Citrix Desktop service connection validation failed on domain "for user" for reason "Deny" followed by Event ID7: "I...

Alt+Tab Does Not Pass Through the VDI in ICA Session

When pressing Alt+Tab while on a VDI in ICA session Full Screen, the apps show up from the endpoint and not from the VDI...

XenServer Fails to Boot with Boot from SAN Root Disk Multipathing:"Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)"

The XenServer host has recently been updated with a hotfix that updates the kernel. After patching the XenServer host is in a boot loop. During startup there is a message"Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block0,0" followed by a call trace: The initrd file size i...

An Unexpected MAPI Error Occurred - Catalog Not Found

When trying to promote to the vdisk, it says an unexpected MAPI error occured...

Error: "There is insufficient memory for the Java Runtime Environment to continue" on XenMobile Server

The following error is displayed on XenMobile server logs: There is insufficient memory for the Java Runtime Environment to continue The following are the log files: Reading from ./tc1.hprof.old.core...Dump file created Mon Aug 08 08:45:30 PDT 2016OpenJDK 64-Bit Server VM warning: INFO:...

Application Opens Using Local Defaults Instead of Published Application After Logging into Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. With FTA enabled in Studio, after logging into Receiver, the application will open using the local...

Unable to add NFS to the XenServer, error : There was an error while attempting to mount the NFS share

Error while adding the storage to XenServer 6.5 There was an error while attempting to mount the NFS share Unable to mount manually, failed with "mount failed reason given by server : permission denied."...

Receiver for Windows - Unable to remove old version

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Question: Unable to install new receiver since we were getting the pop-up that later version already...

How to boot Windows VM in safe mode?

How to boot Windows VM in safe mode...

Pinch and Zoom Does Not Function When Using Receiver on iPad

Unable to zoom and expand application on iPad when using Receiver. The functionality works fine on iPhone...

Receiver for Chrome Error: Invalid command line arguments: Unable to open the file as it has an unsupported extension

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When a user attempts to open a file directly from Google Drive, they may receive the following error...

Error: The Citrix Broker Service failed to validate a user's credentials on an XML service

WhenDomain Pass-throughis configured, the following is seen in the event log for the StoreFront: Log Name:Application Source: Citrix Broker Service Date: 2/8/2017 7:31:58 AM Event ID: 2100 Task Category: None Level: Warning Keywords: User: NETWORK SERVICE Computer: VDA name Description: The Citri...

PVS fails to connect to database after sql server mirroring failover

SqlException on db open, number = 53, msg = A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections...

Error: "One or more intermediate in the chain are missing" When Updating Expired Certificate on StoreFront

The following error is displayed when updating an expired certificate on StoreFront: "One or more intermediate in the chain are missing"...

How to Reset XMS Administrator Password in Microsoft SQL

This article describesHow to Reset XMS Administrator Password in Microsoft SQL...

Error: "An authentication request was made before establishing a web session"

When going through the NetScaler, the following error is seen in the Event Viewer: An authentication request was made before establishing a web session. This typically occurs when sticky load-balancing between client and StoreFront is misconfigured...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

Cloud Bridge: Upgrading Virtual WAN MCN from 8.1 to 9.0

An error occurred while transfer software to change management system. ret =-1, file = /tmp/CB-VW-PKG-9.0.1.31.UPG...

How to Configure NetScaler EPA Expression to Validate if "Windows Update" Date is Within Specific Time Period

This article describes how to configure NetScaler EPA expression to validate if "Windows Update" date of client machine is within a specific time period. Note : The NetScaler should be running version 11.1 as this feature is not present in builds prior to 11.1 builds...

XMS is unable to connect to DEP - Error: "Connection failed" when testing the connection

In the XMS console, inside iOS Bulk Enrollment DEP Configuration, when importing the Token file from the DEP Portal, the connectivity test is failing with error "Connection Failed". However, XMS connectivity tests are showing that XMS is able to reach Apple's websites, the ports are correctly...

XenMobile Domain users unable to authenticate - LDAP response read timed out, timeout used

If domain users or admins are failing to authenticate to XenMobile, verify if the following error appears in the debug log 2016-04-05T10:25:50.128+0000 | 5EAF1FBBC192FC0D | WARN | http-nio-10080-exec-77 | com.sparus.nps.apple.security.AuthUtils | Forcing LDAP auth: cannot refresh user data:...

XenMobile Apps in authentication loop or crashing when returning to Secure Hub to do authentication

Secure Hub and apps for example Secure Mail end up in an authentication loop with Secure Hub showing the error message "Verify your credentials and try again", with the following options "Sign On" or "Quit". Sign On would bring you back to Secure Hub and start the loop all over again...

The Connection to "App/Desktop Name" Failed With Status (There is no Citrix XenApp Server Configured on the Specified Address)

Users receive this error when trying to launch externally: "The connection to "App/Desktop Name" failed with status There is no Citrix XenApp server configured on the specified address.."...

XenMobile user shows as "Anonymous" in XenMobile Admin Console

Within the XenMobile console, under the user column, few users started showning as anonymous. In zdm.logs we might see:User '[email protected]' not found or is disabled. Switching to anonymous mode...

Some Workspace Environment Management security settings are not getting applied

Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...

Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 403 Forbidden (ZDM-certsrv/1.0 - 403 16)

XenMobile Client Certificate request responded with a HTTP Response 403 16 Forbidden by the issuing server IIS Log : 2016-10-11 14:42:18 10.1.1.51 POST /certsrv/certfnsh.asp - 443 - 192.168.100.100 ZDM-certsrv/1.0 - 403 16 2148204809 31...

How to Configure Internal Beacon for Single FQDN on StoreFront

This article describes how to Configure Internal Beacon for Single FQDN on StoreFront. Background When you access any URL in Citrix Receiver, it tries to resolve both internal and external beacons. First it will resolve the internal beacon, followed by the external beacon, and then Citrix Receive...

How to Troubleshoot Citrix ADC(NetScaler) Reporting Tab Related Issues

This article describes how to troubleshoot NetScaler Reporting tab related issues. An example scenario used in this article is when users go to Reporting tab on NetScaler and it does show any data or reports...

Attach a smart card reader and insert your smart card to log on

Failed to add store site on Citrix receiver with error "Attach a smart card reader and insert your smart card to log on". The customer did not enable smart card authentication method...

Java Properties not Saved to the User Profile

Under certain circumstances Java properties might not save to the User Store on Logoff...

How do I fetch bindings for all NetScaler entities of a single entity type using a single NITRO AP

...

Profiles Are Not Written Back to User Store on Logoff

Under certain circumstances User Profiles are not written back to the UPM User Store during log off...

Configuring Multi Language Keyboard Layout for the session in Receiver for HTML5 and Receiver for Chrome

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure Multi Language keyboard layout in Receiver for HTML5 and...

Published Windows Explorer does not retain icon size and layout settings with Profile Management enabled.

Under certain circumstances, users may find that some Windows Explorer settings are not retained after closing a published Windows Explorer session. These settings are saved in the registry under HKEYCURRENTUSER\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags...

How to change the Sync duration of Apple DEP server and Xenmobile 10.x server.

To change the Sync duration of Apple DEP server and Xenmobile 10 server. The default syncduration is 1440 minutes...

How to connect to ADFS 3.0 from NetScaler ADC load balancer?

Use Case Use case 1 : Microsoft Active Directory Federation Services ADFS 3.0 which provides single sign-onaccess to enterprise applications, requires server name in client hello extension to identify theapplication to connect to. Use case 2 : Connect to a server with multiple applications runnin...

Known Issues or Configuration Reasons: OpenGL/DirectX/GPU Acceleration Not Used

Browsers are often an integral part of the operating system and are aware that they are virtualized. As such we would recommend finding those issues within a browser and also test with a standalone benchmark application to verify if it is a configuration issue with GPU/OpenGL usage in general or...