CVE-2017-14602 - Authentication Bypass Vulnerability in Citrix NetScaler ADC and NetScaler Gateway Management Interface

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the...

CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop

Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

How to Enable Logging for Citrix Director

This article contains information about logging for Citrix Director. To learn about Citrix Director, please visit Citrix Documentation -Director...

Error: "HdxSdkErrorDomain_Session error 8" when launching desktop from iPad device.

Error: "HdxSdkErrorDomainSession error 8" when launching desktop from iPad device. Error message in Japanese: 「接続エラー サーバエラー。サーバはセッションを切断しました。」 「継続的なエラー 次の情報をIT部門にお知らせください：操作を完了できませんでした。HdxSdkErrorDomainSessionエラー8」...

Target device boot failure "EFI system partition (ESP) error: Unsupported, Streaming aborted"

This PC has UEFI instead of BIOS, by leveraging Booting from the NIC using DHCP. PVSNBPX65.EFI is already downloaded. Now the error is:" Boot from local disk. "EFI system partition ESP error: Unsupported, Streaming aborted" The error disappears if PC inserts a local hard drive...

How to Enable and Collect Logging for Citrix Workspace App (CWA) for Mac

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Workspace App CWA for Maclogging This article provides an overview of logging features...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

XenServer Security Update for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143 and CVE-2025-58146

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that collectively may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58146 Affected...

Resource has no available templates defined that are fully accessible by all hosts

When using the Citrx Virtual Desktop Setup Wizard in PVS to create a catalog, you get an error after choosing a host resource. Error : Resource has no available templates defined that are fully accessible by all hosts...

Hotfix XS82ECU1086 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. All customers who are affected by the issues described inCTX693178 - Citrix Hypervisor Security Bulletinshoul...

XenServer - VMs on a Cisco USC host do not receive the DHCP settings

When running VMs on a XenServer 8.4 host running on Cisco UCS hardware, the VMs do not receive the DHCP settings...

Hotfix XS82ECU1085 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

Citrix DaaS - Unable to change Master image for the machine catalog

When attempting to use the "Change Master Image" option in the machine catalog properties, the process may fail with the following error: "Preparation of the Master VM Image failed. Make sure that the selected image is a supported OS and has a valid VDA installed" However creating a new catalog...

UviProcessExcludes registry setting disappears after Citrix VDA upgrade

After upgrading Citrix VDA, the UviProcessExcludes registry setting disappears...

"Error: Not a privileged user” after Citrix Gateway authentication passed

After users input their username and password on the NetScaler Gateway login page, the URL redirects to the StoreFront SF URL. However, the application list fails to display, and an error message stating "Error: Not a privileged user" appears...

Unable to launch ICA session due to wfica32.exe signature validation failure

After upgrading Citrix Workspace App to 2203 CU2 and 2210.5 and above in customer's client machine, ICA session became unable to launch. Specifically, ICA file can be downloaded but wfica32.exe never starts. The issue doesn't occur in the same client machine with Citrix Workspace App for Windows...

Error: Identity Assertion Logon failed Unrecognized Federated Authentication Service

Citrix FAS configured for authentication. Published Desktop or Published Application fails to launch with error: "Identity Assertion Logon failed. Unrecognized Federated Authentication Service"...

How to reset Receiver or Citrix Workspace App using the command line

Sometimes it may needto reset Citrix Receiver or Citrix Workspace App to restore the default settings.This article explains how to reset Receiver using the command line...

CVE-2019-12044 - Buffer Overflow Vulnerability in Citrix ADC and Citrix NetScaler Gateway

Description of Problem A buffer overflow vulnerability has been identified in Citrix ADC and Citrix NetScaler Gateway which could possibly result in a denial-of-service in a specific configuration. This vulnerability has been assigned the following CVE number: • CVE-2019-12044: Buffer overflow...

Recommended Hotfixes for Citrix Hypervisor 8.2 Cumulative Update 1

This article contains the minimum set of hotfixes to install to get your Citrix Hypervisor 8.2 Cumulative Update 1 installation up to date. If you use theAutomated Updatesfeature of XenCenter, this is the set of hotfixes that are installed. Note : Citrix Hypervisor 8.2 Cumulative Update 1 reaches...

CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

Description of Problem A heap overflow vulnerability has been identified in Citrix NetScaler Gateway that could allow a remote, authenticated user to execute arbitrary commands on the NetScaler Gateway appliance as a root user. The following vulnerability has been addressed: CVE-2017-7219 High:...

NetScaler - Error "Registration of device failed" when adding license server.

After recently deploying and registering a NetScaler Console formerly ADM Agent and trying to add it as a license server on a NetScaler device you get the error "Registration of device failed Sending request to mgmtserver failed"...

Citrix License Server - Error "The License Activation Service entitlement could not be retrieved"

After upgrading the License Server to the latest version License Server 11.17.2.0, Build 51000, the following warning message is observed: "The License Activation Service entitlement could not be retrieved. Check your connection to License Activation Service and restart the web services used for...

Start menu may stop responding if December 2024 or newer security updates installed on Windows 11

Start menu within a Windows 11 VDI session may not respond for some users after installing Microsoft's December 2024 or newer security updates TPV-6122 Solution This issue is fixed in the Citrix Virtual Apps and Desktops 7 2503 and newer versions. If users are using LTSR or older versions of Citr...

DDC 2203 - How to manually remove the stale DDC from Database

Old removed DDC is listed under Zones alongside the two current DDCs. "Get-BrokerController" and database table 'chbConfig.Controllers' shows working DDCs...

Launching Citrix Studio results in Error Id: XDDS:62B4A47D

Launching Citrix Studio results in 'Reenter the Controller address or enter a new address.' withError Id: XDDS:62B4A47D...

How generate a Citrix Cloud bearer token and use it on a PowerShell API query

This article outlines the steps to generate a Citrix Cloud bearer tokenand use it on a PowerShell API query...

EPA Scan failure on MacOS with error message "Error during unzipping libraries"

EPA scan failed on MacOS client withfollowing errors in "/Library/Application Support/Citrix/EPAPlugin/ " logs: Error during unzipping libraries NSAppleScriptErrorAppName = CitrixEndpointAnalysis; NSAppleScriptErrorBriefMessage = "unzip: cannot find or open 1/Library/Application...

[Citrix Gateway] Can't Launch ICA Desktop/App with Error: 2517

You may observe ICA launch failures with error: 2517 through NetScaler gateway ICA proxy vServer. The issue happens when EDTAdaptive transport is enabled randomly...

the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys

The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...

How to check MAC address for interfaces of SDX device

To find the mac address for SDX device interface...

CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

BSOD with Error: "STOP 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized"

When attempting to boot Vdisks from Target device a BSOD occurs with the following message: STOP" 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

Citrix Session Printers are not mapped after logon

Unable to connect the printer from user end. Session printers are not mapped with following event in the Application event log: Event id: 1105 Cloud not add printer connection to printer \\, for the user username. Error condition is: The Printer name is invalid...

How to create a PVS master target device on Hyper-V for Windows 11

The objective here is to creating a PVS master target device VM on Hyper-V, which can be used for both installing Windows 11 and also booting via PVS. Windows 11 has installation requirements which need both Secure boot and TPM available. Hyper-V VM options which are relevant here: Secure boot...

"An Account is not Configured" Displayed On Startup when AllowAddStore is set to N in Registry

Citrix Workspace app for Windows is being configured via command line arguments and then launched programmatically The following error is displayed: An Account is not Configured. Please contact your administrator...

Provisioning Services: Service Account Permissions and Configuration for Accessing PVS SQL Database

This article provides a description on how different service accounts should be configured to grant adequate SQL permissions. Service Account Configuration for Accessing SQL Service users are the accounts under which the Stream and Soap services run on a Provisioning Services PVS server which nee...

How to Configure StoreFront and Smart Card Authentication for Internal Users using Stores

This article describes how to configure Citrix StoreFront 2.0 and Smart Card authentication using Gemalto .NET cards against stores for internal users. Requirements The following components are needed to allow users connectthrough Smart Card to StoreFront: Citrix StoreFront 2.x Citrix Receiver fo...

Citrix uberAgent Security Bulletin for CVE-2024-6677

Description of Problem A vulnerability has been discovered in Citrix uberAgent, which, if exploited, may result in the escalation of privileges of the attacker. Affected Versions: The following supported versions of Citrix uberAgent are affected by the vulnerability: Citrix uberAgent before 7.2.1...

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information .

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information of User Connection Failures, Failed Single-session OS Machines, Failed Multi-session OS Machines data is missing. The following exception can be seen in CDF traces. Error:...

Unable open PVS console: The specified authorization group does not exist

Unable open PVS console:The specified authorization group does not exist...

How to install custom FreeBSD configuration files on a Netscaler

As a Netscaler is an appliance, the root filesystem which is a RAMDisk is restored from a non-modifiable image during every boot. As such, modifications to any FreeBSD configuration files in /etc will be erased upon reboot. This article shows how to properly install supported modifications to...

CVE-2018-18571 - Authentication Bypass vulnerability in XenMobile Server

Description of Problem A vulnerability has been identified in Citrix XenMobile Server that could permit an attacker to impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device. The vulnerability has been assigned the following CVE number: • CVE-2018-18571:...

How to update SAML certificate settings for Sharefile SSO using XenMobile

You can configure XenMobile and ShareFile to use Security Assertion Markup Language SAML to provide single sign-on SSO access to ShareFile mobile apps. For this you need to configure the SAML certificate...

How to Remove XenTools for Clean Install

To remove XenTools from VMs if standard uninstall does not work...

What is the Default Password for App Layering?

Question: What is the default root password for the Citrix Enterprise Layer Manager ELM via console for App Layering Unidesk? Answer: The default username and password sets for App Layering Unidesk are as follows: rootvia the ELM virtual appliance console - two possible defaults: v9Yx6uj OR...

CVE-2017-5933 - Vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway GCM nonce generation

Description of Problem A flaw in NetScaler ADC and Gateway causes GCM nonces to be randomly generated, making it marginally easier for remote attackers to obtain the GCM authentication key and spoof data within a session. The following vulnerability has been addressed: CVE-2017-5933: Vulnerabilit...

Enhanced SSO session may experience problem accessing network shares or group policy updates

You have configured configured Enhanced SSO for Citrix workspace app and you are either on Windows 10 or Windows 11 endpoints. When you launch a desktop session and try to access the domain shares you may encounter the below prompt for credentials - You can also repoduce this issue by accessing t...

Security Bulletins for XenServer

This article lists historic security bulletins published for XenServer 8.4. We recommend subscribing to security bulletin email alerts for timely notification of new bulletins. The bulletins advise about any software updates that have been published to address the issues. We highly recommend that...