iOS: Certain Public Apps cannot be installed

When adding a public app store XenMobile server, it fails to install through the Secure Hub store on the end user's devices. No installation prompt is presented to the user and no mention of the application can be seen in XCode logs...

How to clone a XenMobile over Hyper - V 2016?

Clone a XenMobile node over Hyper - V 2016...

The DB user's privilege on XenMobile server

Question: What kind of privilege is required for admin which requires when XenMobile DB configuration is done. Answer: Account needs to have the below privileges or else XenMobile cannot do certain action without the permission on the DB. db owner db creator public...

How to configure, deploy, and troubleshoot StoreFront-based assigned application actions in Workspace Environment Management (WEM)

Feature Overview From WEM version 4.6, assigned Applications actions can be applications published from a XenApp & XenDesktop Site. This feature addresses a common customer request to have WEM include the ability to provide published application shortcuts in desktop sessions and through the WEM...

Receiver install error "DVCRenderingAdapter.dll failed to register"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While installing Receiver, users may encounter an error like: "DVCRenderingAdapter.dll failed to...

FAQ: NetScaler SD-WAN Installation and Upgrade

Q: Can I downgrade a NetScaler SD-WAN 4000/5000 appliance to an earlier software release? A : A NetScaler SD-WAN 4000/5000 appliance cannot be downgraded to an earlier release.The appliance should have to be factory reset and provisioned again from scratch. For example, if an appliance is running...

Unable to Sign On to SecureHub

Enrolled User unable to login to Secure Hub, while 2 users in Active Directory have same UPNUserPrincipalName. The Active Directory Users and Computers MMC ADUC will enforce unique values, However, duplicate values for userPrincipalName can be assigned to the users via code. Consider In AD that 2...

Error: "Network staging validation failed." When Applying Configuration to NetScaler SD-WAN

The following error is displayed when uploading the site configuration tar.gz file on NetScaler SD-WAN: Software package for NetScaler SD-WAN 1000 is missing. Network staging validation failed...

AppLayering 2.x: Increase the Size of an App Layer Disk in Unidesk

This article describes how to increase the disk size of an App Layer...

XenMobile : DEP enrollment failing with an Error "Invalid Profile"

While attempting to reset the DEP device, user gets to the Remote Management page and sees an error: Invalid Profile...

Moving from Unidesk to Citrix App Layering

Although they are based on the same layering technology, Unidesk version 2 and 3 are very different from Citrix App Layering formerly Unidesk version 4. This document lays out the major product differences for exiting version 2 and 3 customers to help them understand those differences and plan fo...

How to Verify Password for an Encrypted SSL Certificate Key File

This article explains how to use OpenSSL to decrypt a keyfile that was encrypted by a password. Background On NetScaler, when creating an RSA Key, you can change the PEM Encoding Algorithm to DES3 and enter a permanent Passphrase. This encrypts the keyfile and protects it with a password or pass...

App Layering 4.X - how to change ELM appliance administrator password

App Layering 4.X - how to change ELM appliance administrator password...

How to configure Pre-loaded bookmarks in Secure Web

XenMobile administrators can configure pre-loaded bookmarks through SecureWeb policies. This article aims to provide the format required for the same...

Secure Web with PAC File unable to authenticate fails with http 407 error

While evaluating XenMobile with Secure Web with PAC File,Webproxy after reading the PAC file request Authentication, but it seems that Secure Web does not provide authentication. Therefore we get an Authentication failure from the Webproxy on the webpage of the Proxy within Secure Web. MDX Settin...

Receiver For Windows - 4.10.1 -  Published application stops immediately after it is launched

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver For Windows - 4.10.1 - Published application stops immediately after it is launched...

PVS 7.15 - Unable to boot target devices due to TFTP timeout error

While booting up PVS 7.15 target devices, it fails with "PXE - E32: TFTP open timeout"...

Configure StoreFront with OKTA

This article illustrates how to configure StoreFront to use OKTA for authentication using SAML metadata exchange...

XenMobile - Unable to access the GUI console of XMS server over 4443

After building new node to add to cluster, the console address for administration is listed as https://ipaddress/uw which cannot be connected to...

Citrix StoreFront 3.9 Unable to Refresh

Upgrading StoreFront from 3.6 to 3.9 works fine and when we open the Citrix StoreFront gives an error message:"unable to refresh" with error "A PowerShell SDK execution error occurred with exception thrown at defaultDocument"...

RADIUS Group Extraction Failing with Error "Extracted group : Null"

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server"Extracted group : Null" in aaad.debug log...

Receiver 4.10: Grey Screen On Published Desktops After Upgrading To Receiver 4.10

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information After upgrading Receiver from 4.9 to 4.10, some clients cannot access published desktops and apps. On...

How to Collect Diagnostic Data by using the Command Line Interface on a WANOP

This article explains an alternative method for collecting Diagnostic Data by using the command line interface when the Graphical User Interface GUI is not accessible on a NetScaler SD-WAN WANOP appliance or WANOP VPX instance...

XenDesktop Setup Wizard completes without error, but there's no VM has been created in Hyper-V SCVMM

XenDesktop Setup Wizard completes without error, but no VM has been created in Hyper-V SCVMM. And there's noparticular error messages from CDF trace either...

Web Insight Data Not Visible on NetScaler MAS

AppFlow aka Insight has been enabled for the VServer and Services. Enabled Web Insights on NetScaler MAS no data is displayed. Firewall port UDP 4739 is allowed from the NetScaler NSIP/SNIP to the MAS appliance. ULFD was disabled and server was removed...

High Mgmt CPU due to nsaaad process

High management CPU CPU spiked to 100% causing VIPs and LDAP server configuration on NS to go down Issue may be intermittent...

NetScaler 11.1 - Services flap on VPX/Interface hangs observed on XenServer

Services flaps on VPX/Interface hands observed on XenServer...

Upload Failed due to an Internal Error - When Upgrade SD-WAN Center 9.0.0

When a customer attempts to upgrade their SD-WAN Center from 9.0.0 to versions 9.1.0 or above, they face the below error message in the GUI: Customer can also see the below error message in their browsers: Warning: POST Content-Length of 76632859 bytes exceeds the limit of 62914560 bytes in Unkno...

SSL Handshake Fails When Server Name Indication (SNI) is Enabled on ADC

SSL handshake fails when Server Name Indication feature is enabled on NetScaler Server Name Indication aka SNI is an extension of the TLS protocol. For SNI to work, the server name in the client hello must match the host name configured on the back-end service that is bound to an SSL virtual...

How to open Secure Mail email links with Native or 3rd party browser on android devices

This article explains how to open secure mail links on a native browser on Android devices...

EDT Security using DTLS

EDT Security using DTLS As from XenApp and XenDesktop 7.16 VDAs, DTLS is supported refer to the Windows OS VDA 7.16 Schannel library support for DTLS article. This means that backend connection between NetScaler and the VDA could optionally use DTLS. In addition, Receiver could optionally use DTL...

Mouse Offset Behavior During Multiple ICA Session in Receiver for Windows and Windows (Store)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Attempting to run multiple ICA sessions simultaneously, may cause high memory and Disk I/O activity,...

Error: "ProcessAttribute: failed getting 135292-byte attribute"- When Copying Folders Recursively

The import task will fail with this: The CachePoint Appliance could not import the gold image VM to create the Operating System Layer. Error is: Failed to copy folders recursively. Details: Note there are other reasons you could have a failure to copy files recursively.Always check UniSysLibLog f...

How to Upgrade NetScaler SD-WAN WANOP Appliance from 7.x to 9.3.x Version

This article provide steps to upgrade NetScaler SD-WAN WANOP appliance from 7.x to 9.3.x version...

Steps to Add Secondary MCN in SD-WAN HA

Configure Secondary MCN in SD-WAN High Availability...

App Layering: Upgrading to 4.6 Fails to Complete, or Shows Database Errors, or Shows No Layers or Icons

While upgrading to version 4.6, the upgrade does not complete after several hours. If it does complete, after logging in, you see no layers or imag templates. And you will see errors like: "System Error - ComponentActivator: could not instantiate Uni.Appliance.PersistenceLayer.Session.SessionScop...

Citrix Provisioned Target Fails To PXE Boot With Infoblox DHCP

When trying to PXE boot provisioning service target Virtual machines, it was failing with the following error Could not start download: operation not supported' Target Virtual Machine able to receive the DHCP IP from Infoblox Appliancebut not able to download ARDBP32.bin from the TFTP server...

StoreFront 3.x MMC Crashes When Editing Multi-Site Aggregation

MMC crashes when trying to remove controller from Multi-Site Aggregation Configuration. This only happens when trying make changes on Multi site aggregation Configuration...

How to Publish XenMobile App Store apps using iOS Volume Purchase Program (VPP)

The Apple iOS Volume Purchase Program VPP solution allows the customer to manage iOS app licensing, therefore simplifying the process to find, buy, and distribute apps and other data in bulk for an organization. With VPP, you can use XenMobile to distribute public app store apps. VPP is not...

Citrix App Layering 4.x: Best Practices

Table of Contents Operating System Layer Operating System Patching Platform Layers Application Layers - Before Install Installation Applications Application Patching Elastic Layers Maintenance Operating System Layer Have one Operating System layer per Operating System Windows 7 32-bit, Windows 7...

SSL Handshake Failure on ADC Because of Unsupported Ciphers

SSL connection failsbetween the client and the ADCappliance ADC responds with a fatal alert. The description of the alert message is “Handshake Failure 40”. The above screenshot is from a NetScaler trace packet capture. Procedure to run a trace on the ADC is explained in the following document:...

How To Change The Default Password of nsroot User of a NetScaler SD-WAN WANOP Edition Appliance

The objective of this article is to provide the correct procedure to change the default password of nsroot user of a NetScaler SD-WAN WANOP Edition Appliance. SVM and XS instance can be accessed via CLI and customers can potentially change the password via the CLI. In this case the SVM password c...

WEM Agent does not place icons on desktop at first logon

When first logging into a VDA, the WEM Agent does not push out all the Desktop Icons that are assigned to the user. The WEM agent must be manually refreshed to make the Icons appear: Initial Login with no application Icons: Manually refresh the WEM Agent by right clicking the Wem Agent Icon from...

Error while creating WEM database: "Database creation error!"

Database Creation Wizard produces the following error while creating a new WEM database: "Database creation error!". The Citrix WEM Database Management Utility Debug log file located in "C:\Program Files x86\Norskale\Norskale Infrastructure Services" reports the following error when attempting to...

How to Configure Authentication at StoreFront using NetScaler Gateway - NetScaler Configuration

This article describes how to configure authentication at StoreFront using NetScaler Gateway - NetScaler Configuration...

Unidesk - New desktops show black screens in VMware Horizon View

When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...

WEM - Some Agents are not showing in WEM Console Agent List

Only one machine at a time within a particular group of WEM Agent machines is showing in the Agent list inside the WEM Administration Console. All machines in this group are receiving policies from WEM whether they appear in this list or not 1: Upon first enumerating the Agent List from inside th...

Seamless application window incomplete display in Dual-Monitor Windows 10 client

Customer launched a seamless application in a Dual-Monitor Windows 10 client. However, half of the application window is filled with black image...

Bitlocker Device Policy

Windows 10 Enterprise includes a disk encryption feature called BitLocker, which provides extra file and system protections against unauthorized access of a lost or stolen device. For more protection, you can use BitLocker with Trusted Platform Module TPM chips, version 1.2 or later. A TPM chip...

Error "Could not update master user list" while saving the LDAP Configuration on XenMobile server

Unable to save LDAP configuration and getting Error "Could not update master user list" For sample logs: 2017-08-21T09:21:30.411-0700 | 3811F15F6AE686BC | INFO | http-nio-14443-exec-11 | com.citrix.cg.identity.ldap.LdapManager | Given baseDN 'dc=domain,dc=example,dc=com'is valid:true...