Error : Certificate is Referenced by a CRL, OCSP Responder, vserver" When Deleting a Cert-key

Error : Certificate is referenced by a CRL, OCSP responder, vserver when trying to delete a cert-key even though it is not bound to any vserver , no links , OCSP present. Symptoms : The Citrix ADC may have broken the cert links and unlinked the certificate from vservers while attempting to delete...

While Launching HDX Applications from Secure Hub WorkStore Getting an Error: "Unsupported file type......."

The hdx applications are enumerated in the secure hub store but while launching the application we get error : "Unsupported file type : the provided ica file is malformed or otherwise invalid. Please ensure that the product you are using for launching is correct. Contact you administrator for...

NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 Builds Temporarily Offline

Citrix SD-WAN, formerly NetScaler SD-WAN UPDATE: New builds are now available. Please seehttps://support.citrix.com/article/CTX227928 for more information. Original article text: Due to an issue found in the builds, NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 builds are not available for download...

Shared device requirements and Prerequisites for Enrolling Shared Devices in XenMobile.

Shared Device Requirements For the best user experience, including silent installation and removal of apps, Citrix recommends configuring shared devices on the following platforms: iOS 10 iOS 9 Android M Android 5.x Android 4.4.x Android 4.0.x MDM-only mode Prerequisites for Enrolling Shared...

Netscaler Gateway Authorization.

After the client login to the Netscaler gateway web, there is an error message when Ping Test on the screen. Error: . If you set the global setting or session policy to allow default authorization, you have successfully pinged. 1. What is the scope of blocking when the default Authorization is...

Enrolled devices continue to show old expiry date certificate even after renewing XenMobile SSL certificate

After renewing the SSL certificates on Netscaler as well on XenMobile, enrolled devices still shows old certificate Note -New devices are getting enrolled successful with the new issuing and root certificates. However already enrolled Devices -- Settings -- General -- Profile & Device Management...

Slow Performance Issues on NetScaler SD-WAN 9.2.1.23

Reports of slow performance with high packet loss and calls intermittently disconnected through the NetScaler SD-WAN due to the following known issues: 1. Max number of new connections per source limitation 2. Encryption key reset issue...

NetScaler 12.0 51.24 Shows Status of Connectivity Between NetScaler SNIP and AppFlow Collector

With the NetScaler Release 12.0 Build 51.24, NetScaler admin can view the status ofconnectivity between NetScaler's SNIP address and Appflow Collector by checking new information called State NetScaler's SNIP address is used to detect network reachability between NetScaler and AppFlow collector. ...

iOS 11 MDM-enrolled Device Issues with XenMobile in Cluster Mode

MDM commands may try to deploy multiple times on an MDM-enrolled iOS 11 device and may fail to complete successfully. An admin attempting to push MDM policies to an iOS 11 device, deploy applications, or carry out security actions such as Lock or Wipe may not be able to successfully to do. The us...

Why RDP Connections To Citrix VDA Consume Citrix Connection Licenses?

NOTE: This only applies to on-prem CVAD deployments. This behavior does not apply to CVAD service. Q. Even if there is no ICA session established on CitrixVDA and only RDP session is established, still Citrix Client License is consumed. A. This is an expected behavior. When we install a VDA, it...

How to to implement Rights Management Service in XenMobile Secure Mail

This article will guide you with the steps to implement Rights Management Service in conjunction with the exchange server on Secure Mail Active Sync Client, 1. Install and Configure Rights Management Service. 2. Validate the Rights Management Service Configuration. 3. Enable Rights Management...

Failed to Delete pvp File Because streamprocess.exe Has it Open

Failed to delete pvp file because streamprocess.exe has it open. You may see SHARING VIOLATION or ACCESS DENIED in the process monitor...

Excluding already redirected folders with UPM

Customers environment has Windows Settings\Folder Redirection setup for Documents or other folders. If UPM is also in use, the redirected folder might get a duplicate copy after UPM processes the logon. This is by design and expected...

PKI entities connection test intermittently fails to connect to CA server via cloud connector

The cloud connectors could not connect to PKI server. The below error is generated: 2017-08-08T13:55:39.253+0000 | 467782B2FC0AB30F | ERROR | http-nio-14443-exec-15 | MsCertSrvConnector | TestConnection to pki url certnew.cer failed with response Headers: null=HTTP/1.1 401 Unauthorized, and...

Resources with names ending with the Published Desktop name not showing up in Receiver

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Resources with names ending with the published desktop name not showing up in Receiver For passthrough...

FAQ: Citrix Virtual Apps and Desktops Long Term Service Release (LTSR)

Table of Contents General LTSR Information LTSR upgrades Mixing LTSR, CR, and Cloud releases Support lifecycles LTSR compliance Citrix Workspace app LTSR Release timing Other considerations and resources General LTSR Information What’s new and what’s changed with the Citrix Virtual Apps and...

Error: The trust relationship between this workstation and the primary domain failed

Users cannot log on to a system using Active Directory credentials and the following error message appears: "The trust relationship between this workstation and the primary domain failed.” This issue is seen when the session logon is attempted through Remote Desktop Protocol, ICA, or directly at...

App Layering/Unidesk: Blue Screen 0xA referencing unifltr.sys

End-user virtual machines and session hosts crash with a STOP 0xA blue screen referencing unifltr.sys. unifltr the the Unidesk and App Layering filter driver...

Smart Access Guide for NetScaler Gateway, StoreFront and XenDesktop

NetScaler Smart Access is an advanced feature of NetScaler Gateway. Usually, it needs to be used in the following 2 scenarios. 1. NetScaler End Point Analysis EPA is used. 2. Restrict user’s app/desktop visibility if the session is from NetScaler Gateway. In this document, I will focus on scenari...

How to refresh the device policy and observe it

This article describes how to refresh the device policy and observe it...

PVS Servers Show Offline on PVS Console - Event ID 11 - Undefined Database Error

PVS server shows offline in the PVS console, although Streaming service is running on occasion: An error in event viewer: Event ID: 11 – Undefined database error/PVS server status is "Down" This is an internal error. Please contact technical support...

App Layering error "A failure occurred while publishing the Layered Image: "Failed scanning a directory for files” because of Microsoft.MicrosoftOfficeHub

App Layering 4.0 - 4.5: The Enterprise Layer Manager ELM fails while publishing an image. Error:"A failure occurred while publishing the Layered Image. Failed scanning a directory for files" Unidesk 2.x/3.x: The CachePoint Appliance fails while creating a desktop. Error: "Failed to copy folders...

App Layering/Unidesk: Published Image or Packaging Machine Blue Screens with Code STOP 0x75640007

Published image or Unidesk desktop or Packaging Machineblue-screens with code 0x75640007...

StoreFront upgrade fails to keep the setting in default ICA file

During the upgrade process of StoreFront, the changes made in the Manually modified files including default.ica and usernamepassword.tfrm are not retained...

Certificate Based Authentication : Troubleshooting Tips

This document specifically addresses some common troubleshooting tips and guidelines that would help in tackling certain issues related with the Certificate based authenticationCBA. Please ensure that the initial configuration is set as per the article: https://support.citrix.com/article/CTX22047...

App Layering: No connection to Layering Service and other web errors

You get unexpected errors and disconnects in the App Layering Management Console. While logged in, you may see "Connectivity Failure" or a status of the ELM saying "No connection to Layering Service"...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

Change Token Signing Certificate Expiration Date

When using ADFS 3.0, the Token-Signing Certificate that is generated during setup is, and can be, a Self-Signed Certificate. By default, the Token-Signing Certificate will expire 1 year after it is created. It will also automatically roll-over 2 weeks before expiration if Certification roll-over ...

App Layering: Recipe for QuickBooks

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

Considerations When Creating a Platform Layer in Citrix App Layering 4-x or higher

The objective of this article is to inform Citrix customers and partners about the best practices when creating a Platform Layer in Citrix App Layering 4.x. The Platform Layer is used to install drivers and software specific to a particular platform like PVS or MCS. The Platform Layer enables App...

HTML5 Receiver Citrix PDF Print Function is Not Working with Chrome Browser v57

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. HTML5 Receiver - Citrix PDF Printer Prints blank document in Chrome 57. IE and FireFox work fine...

F5 with StoreFront session timeout closing active sessions

When the StoreFront session times out, it's closing active ICA sessions. We found the issue is only happening when authenticating via F5 frontend. When Authenticating via F5. After 20 minutes the Citrix Desktop and storefront session shuts down. After 17 minutes, a 3 mins countdown starts in the...

How to Upgrade Citrix Endpoint Management (XenMobile) Servers in a Cluster

This document explains how to upgrade Citrix Endpoint Management XenMobile servers in a clustered environment...

Change Password Option in StoreFront Not Shown, Available Only for Admins

Change password option in StoreFront not shown for non-domain admins but is there for domain admins...

Federated Authentication Service High Availability and Scalability

FAS High Availability Q: How can I restrict the FAS servers available to a particular StoreFront? To do this, you edit the GPO which applies to the StoreFront. You remove unwanted FAS FQDNs from the list, but be sure to replace them with a blank space character. This will ensure that the "index"...

During New MAM Enrollment End User Receives - "An error occurred. The enrollment will stop"

During enrollment MDM proceeds successfully, but the MAM enrollment fails with "An error occurred. The enrollment will stop". OnAndroid you may experience the following: Enrollment will successfully complete, however Secure Hub is enrolled only in MDM mode not MAM. Scenarios that Identify failed...

How to Load Balance XenMobile Server Admin Portal

This article will guide you to load balance the XenMobile admin portal running on port 4443. Load balancing the admin portal will ease your XenMobile administration when you have cluster of XenMobile servers with which you can access the admin portal using one single load balancing IP instead of...

Failed to Promote vDisk from Remote PVS Server

Failed to promote vdisk version from remote PVS server due to error "DeviceIoControl error: A device attached to the system is not functioning." And this vDisk Remote Mount error does not prevent Promotion of a vDisk Version, which will leave the vDisk in an unusable state. Customer will encounte...

Allow iOS MDM Exchange profile to be set as DEFAULT, and other iOS apps to interact with MAIL

Inform XenMobile Administrators how to allow iOS enrolled users the ability to set the MDM provisioned Exchange profile to be set as default mail account. Users may not see the Exchange account listed in the iOS Mail settings. Additionally users will not be able to send email with this account fr...

UPM - "Most used" section on the start menu not populated correctly

The "Most Used" section in the Start menu is not populated correctly in the user profile when logging on to Windows 8 / Windows 10 / Windows server 2012 VDA...

Desktop Not Being Deleted from the Delivery Group

Objects not deleting from Citrix Studio XenDesktop 7.6 after deleting in Unidesk 2.9.6.3 via the UMC...

With StoreFront Authentication only gateway users stuck detecting Citrix workspace app

When the gateway is configured for "Authentication only", when the user goes to the store in their web browser, after opening Citrix Workspace Launcher it gets stuck and does not proceed to the next screen...

How to resolve "Failed to probe partitions from virtual disk" error while importing an OS Layer

When importing an OS layer, you get this error: Failed to attach the disk /mnt/repository/Unidesk/OsImport Disks/Windows 10.vhd. Failed to probe partitions from virtual disk This is most often seen when importing a XenServer Windows 10 Gold VM that was exported as an OVF. However, it could happen...

Published desktop is launched in background of local applications

Setting registry key: ForegroundLockTimeout to 0 makes published desktop window to launch in foreground in most cases. HKCU\Control Panel\Desktop name: ForegroundLockTimeout type: REGDWORD data: 0 default: 200000 In some cases, there are applications that set this value to a non 0 value, which...

How do I Set Specific SSL Protocols on XenMobile Server 10.6

With our strong emphasis in security, the ability to specify the SSL protocols supported by XenMobile Server is critical to our customers to help them to control which SSL Protocols they allow to access XenMobile. With XenMobile Server 10.6, we introduce a new CLI option that allows the...

Difference between Fast Clone and Full Clone

Q : When using Machine Creation Services to create a Machine Catalog containing desktop OS VMs, you can now choose whether MCS provisions thin fast copy clones or thick full copy clones. What's the difference between them? Ans Since Machine Creation Services MCS was first released in XenDesktop...

Windows / Office is not activating on App Layering images - "runipkato" file not present

Windows and Office can show as not having activated or not genuine copies of Windows after booting up an image created by Citrix App Layering...

Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...

FAQ: XenMobile Per App VPN

Can Per App VPN be configured for MAM only devices No, Per App VPN does not support MAM only devices. With the iOS per app-VPN feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed iOS device. There, you can establish an on-demand VPN tunnel to th...

proxy server seeing Android traffic from client IP

Your proxy server may see the client IP from Android devices where as iOS it sees and expects the subnet IP of the NS. How to filter traffic using the Subnet IP address for Android Devices?...