How to script removing and rescanning "Ghost NIC" devices in Windows

It's sometimes necessary to run DevMgr in "nonpresent device" mode to remove all nonpresent NIC devices, and sometimes the present NIC too, and then rescan the network to fix problems. It's possible, using the Microsoft Windows Development Kit tool DEVCON.EXE, to script this operation if you know...

How to use tagged VLAN Network on management interface

This article introduces the configuration details of using tagged VLAN network on management interface on different use scenarios...

Web Insight Data Not Visible on NetScaler MAS

AppFlow aka Insight has been enabled for the VServer and Services. Enabled Web Insights on NetScaler MAS no data is displayed. Firewall port UDP 4739 is allowed from the NetScaler NSIP/SNIP to the MAS appliance. ULFD was disabled and server was removed...

"An error occurred during the Create Store Wizard. Please check the log in Event Viewer and try again" While Creating Store

The objective of this article is to solve the issue with StoreFront no able to create Stores. Error Message: Here is the error message from event log which is received when trying to create new Store: System.UriFormatException: Invalid URI: The hostname could not be parsed. at...

Receiver Warning: "A Potentially UNSAFE Connection to the Computer Has Been Initiated"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. -Getting warning message:"A potentially UNSAFE connection to the computer has been initiated" when...

SSL Handshake Fails When Server Name Indication (SNI) is Enabled on ADC

SSL handshake fails when Server Name Indication feature is enabled on NetScaler Server Name Indication aka SNI is an extension of the TLS protocol. For SNI to work, the server name in the client hello must match the host name configured on the back-end service that is bound to an SSL virtual...

How to open Secure Mail email links with Native or 3rd party browser on android devices

This article explains how to open secure mail links on a native browser on Android devices...

Error: "One or more issues were detected with your licensing configuration" during XenApp/XenDesktop upgrade to 7.16

When upgrading a Delivery Controller to version 7.16, a Citrix licensing error message might appear "One or more issues were detected with your licensing configuration. If unresolved, such issues will affect users' ability to access applications and desktops after the site upgrade"...

How to Troubleshoot Browser Content Redirection

This article provides an overview of the Browser content redirection BCR feature and use cases before providing general troubleshooting guidelines. It is highly recommended that you first read through the Browser content redirection and Browser content redirection policy settings sections of the...

EDT Session Connection/Reconnection Attempts using UDP and TCP in Parallel

Enhancement to existing EDT feature Starting with 2017 Q4 EDT-compatible versions of Receiver check “Requirements for this feature” section, session connections will be attempted using EDT and TCP in parallel. This will occur during: Initial connection Session roaming from one Receiver device to...

StoreFront 3.7 - Chrome Does Not Detect Receiver on Client

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While launching applications from Chrome, it uses HTML Receiver instead of Locally installed Receive...

How To check Per-App VPN Works on iOS?

The article describes how to validate the proper functionality of Per-App VPN on iOS...

Mouse Offset Behavior During Multiple ICA Session in Receiver for Windows and Windows (Store)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Attempting to run multiple ICA sessions simultaneously, may cause high memory and Disk I/O activity,...

Error: "ProcessAttribute: failed getting 135292-byte attribute"- When Copying Folders Recursively

The import task will fail with this: The CachePoint Appliance could not import the gold image VM to create the Operating System Layer. Error is: Failed to copy folders recursively. Details: Note there are other reasons you could have a failure to copy files recursively.Always check UniSysLibLog f...

Steps to Add Secondary MCN in SD-WAN HA

Configure Secondary MCN in SD-WAN High Availability...

Secure Mail ActiveSync redirect 451

When migrating Exchange server for example from On-Premise Exchange to Office 365. Is it possible to have the Exchange server sending an HTTP 451 ActiveSync Redirect to point Secure Mail to the new server without installing a new instance of Secure Mail? Yes: The HTTP 451 is the supported mechani...

Error "There is a problem with this Windows Installer package........ Contact your support personnel or package vendor" when Installing Windows Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installation of Receiver fails with the following error, "There is a problem with this Windows...

PVS7.15 - PVS configuration wizard "hangs" when configuring new farm

The PVS configuration wizard "hangs" when configuring new farm. This happens in case you have multiple domains...

Creation of Platform Layer fails with a time out error from Vsphere

During creation of Platform layer, Task fails and we get an error on the App layering console as "A timeout occurred waiting for a vsphere task to complete"...

Citrix Provisioned Target Fails To PXE Boot With Infoblox DHCP

When trying to PXE boot provisioning service target Virtual machines, it was failing with the following error Could not start download: operation not supported' Target Virtual Machine able to receive the DHCP IP from Infoblox Appliancebut not able to download ARDBP32.bin from the TFTP server...

Calculate MSS Value for NetScaler SD-WAN Appliances

By default, the MSS value is defined as 1380 bytes in aNetScaler SD-WANappliance, assuming the WAN infrastructure allows a standard IP packet maximum transmission unit MTU size of 1,500 bytes. Some WAN infrastructures might not provide enough space for MSS of 1380 bytes because additional protoco...

Citrix App Layering 4.x: Best Practices

Table of Contents Operating System Layer Operating System Patching Platform Layers Application Layers - Before Install Installation Applications Application Patching Elastic Layers Maintenance Operating System Layer Have one Operating System layer per Operating System Windows 7 32-bit, Windows 7...

WEM Drive Restriction policy will not apply to End User session on WEM Agent

WEM Drive Restriction policy will not apply to End User session on WEM Agent machines...

Authentication Failure When Password Contains £ Character

Authentication for 401 based failure is observed only oniOS devices ,when the password contains £ character, it works for Form based authentication. Authentication for 401 and Form based is working fine without any issue on Android devices ,when the password contains £ character. Coming to RADIUS...

How to Configure Storefront for Authentication using NetScaler Gateway

This article describes how to configure authentication at StoreFront using NetScaler Gateway - StoreFront Configuration...

Backend SSL Connection Fails on ADC due to missing extensions

When using Secure-LDAP which uses port 636 TCPs or while making connection to server listening on secure port,it fails in SSL handshake phase...

Unidesk - New desktops show black screens in VMware Horizon View

When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...

WEM Agent Connection error: "Broker Server Name or Broker Port Error"

WEM Agent fails to connect to the WEM Broker and shows the following error when manually refreshing the WEM cache using this command: AgentCacheUtility.exe -refreshcache: "Broker Server Name or Broker Port Error"...

Bitlocker Device Policy

Windows 10 Enterprise includes a disk encryption feature called BitLocker, which provides extra file and system protections against unauthorized access of a lost or stolen device. For more protection, you can use BitLocker with Trusted Platform Module TPM chips, version 1.2 or later. A TPM chip...

How to debug icon cannot be displayed in storefront webpage

This article describes how to debug the issue of icon not be displayed in storefront web page...

Cannot create Store service : An error occurred running the command: 'Install-DSStoreService2'

You might receive an error:An error occurred running the command: 'Install-DSStoreService2' when creating a new Store. Citrix Subscription store service fails to start intermittently...

FAQ: XenMobile Client Properties

Question: What does XenMobile Client properties do? Options to enable/disable client properties Answer : Client properties contain information that is provided directly to Secure Hub on user devices. Client properties are located in the XenMobile console inSettings Client Client Properties. Clien...

Registration Request For Worker Was Rejected Due To An Unknown Error

New machines added to the XenDesktop Site failed to register. From the VDA Application logs it was found that the VDA wasdiscovering the Delivery Controller. On the Delivery Controller the below error is logged in the Application Event logs from Citrix Broker Service : Registration request for...

Secure Web cannot access external websites

Unable to browse external websites. Error " http 1.1 gateway timeout" on Secure Web. VPN mode : Full VPN Internal websites work fine...

Error : Certificate is Referenced by a CRL, OCSP Responder, vserver" When Deleting a Cert-key

Error : Certificate is referenced by a CRL, OCSP responder, vserver when trying to delete a cert-key even though it is not bound to any vserver , no links , OCSP present. Symptoms : The Citrix ADC may have broken the cert links and unlinked the certificate from vservers while attempting to delete...

NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 Builds Temporarily Offline

Citrix SD-WAN, formerly NetScaler SD-WAN UPDATE: New builds are now available. Please seehttps://support.citrix.com/article/CTX227928 for more information. Original article text: Due to an issue found in the builds, NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 builds are not available for download...

To delete two headers in HTTP Response

In certain cases, we do not want to parse the HTTP headers to the end Client. NetScaler can do this job by deleting the HTTP header received from the Server. We can use Rewrite feature of NetScaler to achieve this. Configuration AppExperts Rewrite. Step 1 : To remove HTTP header named "Server" CL...

Provisioning services 7.x vdisk Imaging Procedure

To perform imaging sometimes after performing reverse imaging to create a new vDisk from a virtual machine on any residing hypervisor...

Error: "No Entry Found in Database for Device" While booting Target Device

Target devices are unable to PXE boot with the following error message: "No entry found in database for device."...

Citrix Provisioning Services Boot Process

This article explains Citrix PVS boot process in details...

Unable to Configure Citrix App Layering ELM PVS Connector

The App Layering Agent PVS Agent on the PVS server is registered with the App Layering ELM virtual appliance, and the PVS Server enumerates on the App Layering PVS connector screen. However,clicking "check credentials" an error is displayed stating that the ELM cannot use the credentials on the P...

Shared device requirements and Prerequisites for Enrolling Shared Devices in XenMobile.

Shared Device Requirements For the best user experience, including silent installation and removal of apps, Citrix recommends configuring shared devices on the following platforms: iOS 10 iOS 9 Android M Android 5.x Android 4.4.x Android 4.0.x MDM-only mode Prerequisites for Enrolling Shared...

Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

App Layering: Supporting DFS File Shares

The ELM can only access a DFS namespace if SMB 1.0 is enabled on the servers. If SMB 1.0 is disabled, as is becoming more common, the ELM cannot access a DFS namespace directly. Attempts to test the connection will fail...

Netscaler Gateway Authorization.

After the client login to the Netscaler gateway web, there is an error message when Ping Test on the screen. Error: . If you set the global setting or session policy to allow default authorization, you have successfully pinged. 1. What is the scope of blocking when the default Authorization is...

UPM usage with Windows junction, hard and directory symbolic links

The user reports that some of his documents and files are not syncronised. After checking the missing folders or files types, it is found that they are of type symbolic there are three type of symbolic links: hard links, junction links and directory links. More information:...

Error Cannot get apps from the store on Storefront

Upgraded Storefront from 3.9 to 3.11. During the test conducted I am able to successfully: - Log in via browser Chrome internally and externally and launch applications. - Open Citrix Receiver internally, log in and launch apps. What no longer works is external receiver access. On launching the...

How to install public store APP via Baidu Store

Users in China wants to know how to install public store APPs from Baidu stores...

"Missing intermediate certificates or root anchor" While Scanning Vulnerablity of MDM IP

While customer uses 3rd-party security scanner to scan MDM IP, there is warning:"Missing intermediate certificates or root anchor"...

Use XenMobile Mail Manager to block all email clients except Secure Mail

Using XenMobile Mail Manager to Block Non Secure Mail clients from accessing mails...