Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway

The following error is displayed after logging on to NetScaler Gateway: "403 - Forbidden: Access is denied."...

NetScaler Remote GSLB Service Shows as DOWN

- A remote NetScaler GSLB Site, have the Site Metric MEP Status showingas DOWN. - Monitor bound to the GSLB Service shows Down...

Web Cams Not Working Through Published Desktop OS Session | Being Redirected As Optimized USB

The End-Users are unable to use the Web Cam through a Published Desktop OS session launched using Workspace App USB Device Being Redirected As Optimized USB...

Users Unable to Connect After Rebuilding Licensing Server With qfarm Showing Load of 20000

After rebuilding the XenApp licensing server users are unable to connect. XenApp Licensing installed without issueand its services are running. Running qfarm /load on any of the XenApp servers in the farm shows a load of 20000 meaning the servers are unable to acquire a connection license for the...

How do I Load Balance DNS traffic (DNS proxy) on NetScaler?

Domain Name Servers DNS are the Internet's equivalent of a phone book. They maintain a directory of domain names and translate them to Internet Protocol IP addresses. When you request DNS resolution of a domain name, the NetScaler appliance uses the configuredLoad Balancing method to select a DNS...

Screensaver Not Working in XenDesktop

Screensaver not starting on Virtual Desktop - Desktop OS VDA...

Citrix Credential Wallet Service and Citrix Peer Resolution Service do not start

On the Citrix storefront services console, the Citrix Peer Resolution Service and the Citrix Credential Wallet services stay in stopped state, wouldn't start even if we start manually...

FAQ: Connection Leasing in XenApp/XenDesktop 7.6

Q: What is Connection leasing? A: It allows users to connect to recently used published applications or desktops launchedwithin the last 2 weeks or less during a site database failure using a combination of a license lease and cached information on the Delivery Controllers. The Delivery...

Secure Mail Error: "Cannot Safely connect to the server. The server certificate is not trusted."

New Users: When attempting to connect to Secure Mail, new users encounter the following error message: "Cannot safely connect to the server. The server's certificate is not trusted." Already Enrolled Users: Already enrolled users experience the error message: "Access to your company network is no...

Unable to Enroll Device "Profile Installation Error"

"Profile installation error" occurs while enrolling device. IPCU logs show the following error: Desc : A connection to the server could not be established.US Desc: A connection to the server could not be established.Domain : MCHTTPTransactionErrorDomain Code : 23001 Type : MCFatalError Params :...

File System on Control Domain Full on XenServer

There are a variety of errors and symptoms that can be seen when the Control Domain file system becomes full. The errors and symptoms that you see might be different depending on the partition layout of your XenServer host. Possible errors can include the following errors or alerts might appear...

How to Set the Time Zone of the NetScaler Appliance to UTC Time Zone

This article contains the procedure to change the time zone of the NetScaler appliance to Coordinated Universal Time UTC if the appliance is set to another time zone. When setting the appliance to the UTC time zone, it can be confusing to refer to a relevant city. To avoid such uncertainty, you c...

How to Add SQL Database Connections to XenMobile Server

This article describes how to add / increase additional SQL database connections from XenMobile. By default XenMobile Server 10.x has 50 database connections to SQL database. Note: Please be sure that your SQL Server has enough resources RAM & CPU to handle the additional load on the server prior...

StoreFront Featured Apps Group Appears More Than Once

When there is a single Featured Apps group created; the new group appears more than once in StoreFront...

SSL Error 61 - You have not chosen to trust Certificate Authority on Citrix Receiver for Windows

Citrix Gateway, formerly Citrix NetScaler Unified Gateway Citrix Workspace app is the new universal app for all workspace services, that will encompass all Citrix clients and app capabilities over time. The following error messagesare displayed for Receiver users accessing StoreFront or Web...

Advanced Memory and Storage Considerations for Provisioning Services

As Citrix Provisioning Services has begun to play a greater role in XenApp and XenDesktop implementations, many discussions have been had on proper sizing of Provisioning Services from a network, CPU and storage perspective. However, most recommendations have left out guidelines for proper sizing...

How to Disable SR-IOV on Emulex CNA\HBA on HP Hosts Running XenServer 6.5

To Disable SR-IOV on Emulex CNA\HBA...

NetScaler Gateway Rejects RADIUS Accept Request

RADIUS authentication is configured on NetScaler Gateway. RADIUS accepts the authentication and sends the correct message however NetScaler rejects the authentication. The RADIUS log files show that the authentication is accepted. The network trace shows that a message is sent from RADIUS server...

Enabling EDT Lost Tolerant Mode using Linux as client.

How to enable EDT Lost Tolerant Mode in the latest VDAs versions when using Linux as client, all requirements needed...

NetScaler-13.1- Missing Web App Firewall Logs in NetScaler

Missing Web App Firewall Logs in NetScaler...

NetScaler 13.1 53.24: iOS "Network Timed Out" with Outlook/Teams Authentication

Users encounter a "Network Timed Out" error on their iOS devices when attempting to authenticate specifically with the following applications: Microsoft Outlook iOS Microsoft Teams iOS This authentication failure is isolated to iOS devices; users on Android, Windows, or macOS versions of the same...

DaaS - VDI - Rename cluster VMware

Impact of Renaming VMware Cluster in a DaaS/VDI Environment...

Audio not working on VDA when reconnecting from Ipad

After CWA 2412 IOS audio stops working randomly on Ipad after reconnectng to the session. With Adaptive audiodisabled we got audio about with 50% of reconnects. With Adaptive audioenabled audio playback worked every single time we reconnected to the desktop...

Citrix Workspace App for MAC - Intermittent sign in failure, browser access works

Administrators may notice that the Mac end points intermittently fail sign into workspace app. Visiting the store via browser would work consistently...

SNMP for Power Supply configured but alerts not receiving

SNMP configured for Power Supply but alerts not receiving...

PVS Citrix Virtual Desktops Setup Wizard fails to create every other machine

When using PVS Citrix Virtual Desktops Setup Wizard, it creates machines however every other machine fails to be created. This typically means either all even numbers machines or odd numbers machines fails to be created depending on what number you start with...

Microsoft’s January security update fails/reverts on a machine with 2411 Session Recording Agent

Microsoft’s January security update installation fails/reverts on a machine having 2411 Session Recording Agent TPV-6160...

Lower than expected performance with AMD CPUs and DOD

Lower than expected performance when using AMD CPUs on the VDA and Citrix Display Only Driver DOD which could result in perceived lag. The lag might be more noticeable with multiple monitors and is only observed with AMD CPUs. These symptoms might be observed with CVAD versions prior to 2212 or...

Subnet mask missing in Windows once PVS target is booted via BDM

When booting a PVS target using a BDM with static IP and having DHCP enabled in the vdisk, Windows may be missing its subnet mask...

Citrix workspace app for Windows issues with "limit instances"

If the user clicks multiple times on a published application it will launch several instances of the application even if "Limit to one instance per user" is set on the application...

Unable to encrypt Identity disk on AWS when using encrypted master image

The AMI was created using an encrypted instance\snapshot. However, the MCS machines appear with identity disk "Not encrypted"...

Microsoft Security Update Validation Report November 2024

Microsoft’s November 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

"No Such Instance currently exists at this OID" retuned even the OID is correct

"No Such Instance currently exists at this OID" retuned even the OID is correct like nsCPUusage OID: 1.3.6.1.4.1.5951.4.1.1.41.6.1.2 sysHealthDiskPerusage OID: 1.3.6.1.4.1.5951.4.1.1.41.8.1.5 etc...

Rendezvous v1 Connections fail after setting PortNumber argument on VDA Command Line Installs

After installing VDA with a custom port number with the commandline argument: /portnumber NNNN where NNNN is the port number, and runningxaxdcloudproxy.exe -VDAPORT NNNN on the cloud connectors, Rendezvous v1 connections to VDA fail. Network traces show that Cloud Connector attempts to reach...

VMware vSphere 8.0 Known Issues

...

CVAD products update for CVE-2024-45817

CVE-2024-45817 In x86's APIC Advanced Programmable Interrupt Controller architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which...

Spinning wheel during store access for German users, after Storefront upgrade from 2402 to 2402 CU1

Issue: After upgrading Storefront from 2402 to 2402 CU1, German language users may experience a spinning wheel during store access. This does not apply when upgrading from earlier versions of StoreFront, such as from 2203 to 2402 CU1. Symptoms or Error: The developer tool shows Http 404 error for...

Teams 2.x missing from start menu on Server 2022/W11 Multi-session when installed in an App Layer

When deploying Teams 2.x in an App Layer on Server 2022/W11 Multi-session, Teams would not show up in the start menu...

LVDA get unregistered randomly after reboot

The customer said their LVDA get unregistered randomly after reboot...

FAS - The RA certificate expiry notification is not displayed in the Cloud console

When the FAS Registration AuthorityRA certificate expires, the RA certificate expiry notification is not displayed in the Citrix Cloud management console...

Published applications open through IE instead of Google Chrome

No local app access or URL redirection has been set up on the site. A published application that uses a browser for launching is being accessed through a server Virtual Delivery Agent VDA...

App Layering - Changes to Scheduled Tasks do not show up on the layered image

Making changes to an existing scheduled task will not be reflected on the published image. Adding a version to the layer shows the old values and not the changes...

How to convert MCS provisioned VM’s identity disks to streaming optimized disks.

Description: Support for VMware vSAN8 was incorporated into all current releases of Citrix Virtual Apps and Desktops as detailed in thisblog. With this support, Machine Creation Services MCS creates VMDK files with a stream-optimized format for all VMs. As the blog mentioned, there might be...

User Profile hangs when using CVAD 2203 CU5

Upgrading to CVAD 2203 CU5 found an issue with hanging on loading the user profile. It eventually times out and the session is disconnected/hung...

Connector new installs fail due to installer is unable to verify the certificate chain

The new installation of Citrix Cloud Connector will result in the following error: "Unable to validate certificate chain while installing connector"...

XenServer Security

Introduction We work hard to keep our product secure and endeavour to remediate any exploitable issues. To this end, we regularly release Security Bulletins for vulnerabilites that might affect Citrix Hypervisor and XenServer and software updates that address these vulnerabilities. Overview of th...

SSL Dashboard in ADM does not show TLS Information of SDX

Don't see TLS details of SDX NetScaler in ADM SSL Dashboard. We can see TLS details of all ADC's in the SSL Dashboard but for SDX it is missing...

Poor ICA streaming performance observed when HDX Insights enabled on NetScaler AppFlow policies

Users are facing high latency issue and they are not able to do audio and video calls. Apps and Desktops ICA streams performs poorly and high end-user experience is observed "HDX Latency" calculations made by VDA fluctuate up/down from 10ms to 900+ ms observed using command "ctxsession -v" and...

The possible power state of the VDA machines

This article describes all the possible power state of the VDA machines...

Black screen after VDA uninstallaion

Customer uninstalled the VDA to upgrade to a later version but now they see a black screen when they try to logon to the console. The event logs show that LogonUI.exe was crashing...