Vulnerability in Citrix Broadcast Server could result in SQL injection

Description of Problem A vulnerability has been identified in the Web-based management interface of Citrix Broadcast Server, a component of the Citrix Application Gateway, that could result in arbitrary SQL query execution. This vulnerability affects the following products: • Citrix Application...

MetaFrame Password Manager "reveal password" policy bypass

Description of Problem Citrix MetaFrame Password Manager allows administrators to control which users can view their own secondary passwords. Versions 2.5 and earlier allow users to view their secondary passwords even if they should be prohibited from doing so by the administrator defined policy...

LBDiag - XenApp Load Balancing Diagnostic Tool

LBDiag Created Date: March 17, 2010 Updated Date: March 23, 2012 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location...

Smart Scale to Autoscale Migration

Table of Contents Manual Migration --- Automated Migration Prerequisites Migrate Good to know Important: This article is applicable only if you have the Sites section in Smart Scale. Sites that use the Virtual Apps and Desktops service appear as “Cloudxdsite” by default. To view Sites, go to Citr...

Citrix App Layering 4.x: PVS Connector Script to Convert VHD to VHDX

Introduction When publishing an image to PVS the Citrix App Layering PVS Connector allows for running a PowerShell script after an image in uploaded to the PVS Store and Added as a vDisk. This sample script is intended to show Citrix customers how this scripting can be used to increase...

Gateway: Cannot connect to the Citrix XenApp Server. Protocol Driver Error.

Launch Fails with Error: "Cannot connect to the Citrix XenApp Server. Protocol Driver Error."...

NetScaler Appliance System Limits

This article contains information about various system limits for a NetScaler appliance with NetScaler software release 13.1 installed on the appliance. LSN Entities and Bindings Base System Limits Base Networking Limits Load Balancing and Monitoring Limits Advanced Policy/Expression Limits Rewri...

Traffic Management Logout Functionality on NetScaler

This article covers the Traffic Management TM logout functionality on NetScaler which is added in 10.0 and 9.3.e releases. The TM logout functionality triggers AAA session logout on traffic action hit. NetScaler can be configured for "Initiate Logout" option in the TM traffic profile. The followi...

How to collect data for ADC Gateway VPN issues

To provide a comprehensive guide on how to properly collect data for issues with ADC when these issues are related to Full VPN...

Error: "Failed with status 1110" When Launching Desktops or Apps Through NetScaler Gateway

Citrix Gateway, formerly Citrix NetScaler Unified Gateway The following errors are displayed when launching desktops or apps through NetScaler Gateway: Failed with status 1110 "The connection to Desktopfailed with status Unknown client error 1110"...

Configure "-denySSLReneg" Parameter to Disable Client Side and Server Side SSL Renegotiation on ADC

This article describes the configuration and use of -denySSLReneg parameter that is recently added to Citrix ADC appliance firmware and Citrix Gateway application software...

Selection of Accounts with more than one Store in Workspace App is not getting retained

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If you select All accounts from the UI of the CWA for Windows for version 1909 or higher, the...

After Upgrading to iOS 14 And Opening MDX Wrapped Apps Prompt Displays - "Compliance Error - Your device is out of compliance...MDX Encryption is not supported"

After Upgrading to iOS14 and opening MDX Wrapped Apps or Citrix Secure Mail/Hub/Web Displays - "Compliance Error - Your device is out of compliance. Please contact your administrator. MDX Encryption is not supported beyond iOS 13. Please reinstall the app."...

Elastic layers are disconnected and not accessible in session host

Environment before 20.52005 observed theElastic layers were disconnected on the VDA abruptly and were not available for exiting user connections or for new users.. The below errors are seen though the layers had been attached by a prior domain user. --ulayersvc.log-- 2020-03-23 13:23:02,140 WARN...

HTTP/HTTPS proxy support on NetScaler based on Traffic Policies Secure Web

This article describes how to configure NetScaler to proxy the traffic from MDX apps through a Proxy server like Squid, Bluecoat. Enterprises can proxy traffic configuring simple traffic rules on NetScaler box...

Workspace App for Windows 1912 LTSR - Second icon displays in the system tray

Second icon displays in the system tray and unable to open the Workspace App using the second icon...

Citrix Cloud - Hosting connection to VMWare vCenter Server fails after certificate update

Hosting connection to VMWare vCenter Server fails after certificate update...

How to Install Virtual License Server Appliance

How to import Virtual License server Appliance on XenServer Pool...

How to Install and Configure License server VPX on Hypervisor

Note: Citrix Hypervisor formerly XenServer...

Collecting smaller Server-side Wireshark traces on PVS

PVS Wireshark traces can get very large and could use up a lot of resources. Here is a method that can be used to reduce the size of the traces and the impact on the PVS server. With the smaller trace file and lower impact, the trace can run longer and the resulting files are easier to handle...

While Installing Receiver, Users May Encounter an Error: "Setup Cannot Continue Because This Version of Receiver is Incompatible With a Previously-installed Version"

Under certain conditions the installation of a new version of Citrix Receiver may fail and the following error maybe displayed by the Instaler: “Setup cannot continue because this version of Receiver is incompatible with a previously-installed version”...

CWA for Android: Workspace App crashes when you hit try to cast using a Workspace Hub.

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. CWA for Android crashes with following trace when attempted to cast using Hub. Casting is successful...

Secure web on iOS devices getting error: Cannot Open Page too many HTTP redirects

When user opens web link with secure web on iOS devices, below error comes up. Error:Cannot Open Page too many HTTP redirects. Secure web log from iOS device: ==================== NSLocalizedDescription = "too many HTTP redirects"; NSUnderlyingError = "Error Domain=kCFErrorDomainCFNetwork...

Binding the certificate gives error "certificate is not a server certificate"

While binding the certificate you might get theerror "certificate is not a server certificate"...

WebCam Redirection - Mac OSX - Microsoft Teams

Mac OSX devices such as MacBook Pros with imbued webcams utilizing Microsoft Teams...

Citrix PKI troubleshooting Guide.

How to use this Guide: First go through the checklist to determine the type of problem. Then review client testing information to narrow down the scope. If a Certificate installation is needed on the IIS Server or ADC, The directions are given below for various scenarios. Checklist: √ DNS:...

Creating a HAR file from your browser to share with support

IMPORTANT: Please note that HAR files contain sensitive clear text data including content of pages while recording, such as user names, passwords, keys, etc, and should only be shared with trusted recipients via secure channels such ashttps://cis.citrix.com.Sharing files via email is not...

Storefront 3.12 - SAML authentication is not working.when using IDP like Forge Rock

Storefront 3.12 - SAML authentication is not working with IDP like Forge Rock. Error Message on Store Front Page Error Message: "There was a Failure with mapped account." Following Error message is thrown in the Event Viewer The security token failed validation...

Accessing Citrix Cloud using Multi-Factor Authentication

Requirements Existing Citrix Cloud Adminlogin credentials Should have set up Multi-Factor Authentication...

Some Receiver Components Fail to Install and Function After Windows 10 Update

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After upgrading Windows 10 to a new feature update and attempting to install Citrix Receiver or the...

CVAD1912 - Wfica32 crash pointing to vdcdm30n.dll

When connecting from a client machine with CVAD 1912 LTSR installed, customers may notice that the ICA Connection stops at a White Screen with the message "Connecting". This problem is noticed with CWA 1911 and 1912 LTSR. Client side event logs indicate crash of wfica32 process. Log Name:...

How to Add WEM Group Policy Files to Use in a Local or Domain-based GPO

This article explains how to add the required ADM or ADMX/ADML files to have them appear in the local GPEDIT policy editor...

How to Disable "Remember my password" Checkbox - Citrix Receiver for Windows

For security reasons, users might want to disable Windows Receiver "Remember my password" checkbox toprevent an automatic logon without credential required...

Receiving "Legacy System Extension" Dialog Box After Upgrading To macOS Catalina 10.15.4+

After upgrading macOS to Catalina 10.15.4, a dialog box will prompt the end user with the following message: Existing software on your system loaded a system extension signed by "Citrix Systems, Inc." which will be incompatible with a future version of macOS. Contact the developer for support...

WEM Agent refresh causes Desktop and Taskbar icons to flicker after Registry Value Actions are processed

Each time the WEM Agent refreshes the icons on the taskbar and desktop flicker...

Windows 10 start menu modern apps are missing after log off

The TileDataLayer model %LOCALAPPDATA%\TileDataLayer\Database that worked on previous versions of Windows 10 has been removed from fall creator v1709 and our current Citrix User Profile Manager customization to make Start screen/Modern Apps work are no longer applicable...

Changes to Citrix Insight Services (CIS) and Customer Uploads

On March 18, 2020 we had a service disruption with Citrix Insight Services CIS platform which hosted the customer portal at cis.citrix.com, along with Call home, CEIP and few other services. Over the last few days, we have been in the process of bringing up most of the affected services and also...

Slowness in Presenting Citrix Gateway/AAA Login page on Client Browsers

Sometimes Citrix Gateway login page takes a long time to be presented on the client’s browsers. When this issue occurs, you might observe any of the following conditions. The number of established connections to Apache counter has hit the default configured limit of 30 or a customized value, if...

The Supplemental Grace Period is active and all installed licenses are currently in use

This alertisseen on the Director andCitrix Studio. The Supplemental Grace Period is active and all installed licenses are currently in use License server status on Director shows "not connected"...

Citrix ADC: TLS 1.3 is not working if enabled through SSL profile

ADC: TLS 1.3 is not working if enabled through SSL profile. When enabled on vserver SSL parameters it works...

Citrix Gateway Native OTP not working with Citrix IOS Workspace Client

1. Native OTP configuration done as per https://docs.citrix.com/en-us/netscaler-gateway/12/native-otp-support.html 2. Android / Windows Workspace Clients and Browser work able to authenticate, enumerate and launch APPs 3. IOS Workspace Client is unable to authenticate, if user enters the...

Citrix ADM Ports and URL's That Need To Be Opened for Communication

Additional notes: If using ULFD LogStream: The -logstreamOverNSIP option is available from Citrix ADC 13.0 41.x and 12.1 55.x onwards to alter the SRC IP. Default is SNIP. This is a global setting. set appflow param -logstreamOverNSIP If using IPFix AppFlow: The -IPAddress parameter can be used t...

Unable to add Store to Workspace App on Windows - Your account cannot be added using this server address

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Unable to add Store to Workspace App on Windows and Mac Client machines...

User Profile Management and Microsoft Store Apps (UWP Apps)

When a user installs an app from the Microsoft Store UWP app onto a Windows 10 VDA with Citrix Profile Management, after a logoff and logon, the application does not persist and must be reinstalled...

Provisioning Services | Unable to Reverse Image A vDisk Using P2PVS, Getting "The Destination Disk Is Too Small"

Reverse imaging error - Unable to reverse image a vDisk using P2PVS getting "The destination Disk is too small"...

StoreFront 3.13 - Propagation fails An error occurred running the command: Add-DSFeatureInstances

Both StoreFront servers are Server 2012R2 fresh install and fully updated. Clean install of SF 3.13 completed successfully on both servers. Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Level : Error Description : An error occurred running the command:...

Out of licenses error on License Administration Console

An Out of licenses alert message is received on the License Administration Console LAC...

Basic Citrix Licensing Information

How does Citrix licensing work? Citrix product goes through a three-step process to check out licenses; information on Licensing overview, visit Citrix Documentation athttps://docs.citrix.com/en-us/licensing/current-release.html Available License types? Visit Citrix Documentation...

Cannot access Licensing Node in Citrix Studio. “An error occurred with the Citrix License Server..”

It is not possible to change the License Server from within Citrix Studio. The error appears, “An error has occurred with the Citrix License Server….” On clicking View error details, the following information appears: Error Id: XDDS:CFA44753Exception:...

Failed to launch session with the error code “<AppName> is no longer available. Do you want to remove the shortcut?” on Citrix Workspace App during App/Desktop Launch

When a user tries to launch published application or Desktop by double clicking the shortcut of published applications or Desktops created on user’s Desktop or Start menu, launch fails with error “'AppName' is no longer available. Do you want to remove the shortcut?” Note: This error only applies...