App Layering: Getting AppSense and WebSense to work

You may find that AppSense is not personalizing applications properly or otherwise not functioning. Here are the directions for installing AppSense and/or WebSense in a layer,...

Citrix App Layering: Recipe IBM SPSS 21

Licensing Considerations The following information should be discussed with your IBM licensing contacts: Concurrent user network licensing for IBM SPSS packages. Usage of SPSS in a virtualized environment requires a licensing “addendum” and further cost. A physical server with current Java versio...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

iOS Secure Mail cannot add account, error "Connection Error. Secure Mail cannot access server"

iOS Secure Mail cannot add account, error "Connection Error. Secure Mail cannot access server"...

How To Define Page File Size and Placement in Citrix App Layering 4.x

To provide Citrix customers and users a process to define page file size and location when using Citrix App Layering...

StoreFront 3.7 and Above - XenDesktop access policy rules cannot be applied on Endpoint

After implementing the steps mentioned in https://www.citrix.com/blogs/2015/07/01/rewriting-the-session-clientname-from-storefront/ , XenDesktop access policy rules cannot be applied on client name as the client host name comes up as WRXXXXX when using Receiver for web . The client name can only ...

F5 with StoreFront session timeout closing active sessions

When the StoreFront session times out, it's closing active ICA sessions. We found the issue is only happening when authenticating via F5 frontend. When Authenticating via F5. After 20 minutes the Citrix Desktop and storefront session shuts down. After 17 minutes, a 3 mins countdown starts in the...

Change Password Option in StoreFront Not Shown, Available Only for Admins

Change password option in StoreFront not shown for non-domain admins but is there for domain admins...

Federated Authentication Service High Availability and Scalability

FAS High Availability Q: How can I restrict the FAS servers available to a particular StoreFront? To do this, you edit the GPO which applies to the StoreFront. You remove unwanted FAS FQDNs from the list, but be sure to replace them with a blank space character. This will ensure that the "index"...

PVS target on ESXi hardware v10 and v11, fails to boot at "Starting Windows"

Target Devices Failing to boot,hanging at "Starting Windows" Wireshark trace shows Single IO phase of boot but BNIStack driver does not get loaded and no MIO Phase starts...

Citrix SCOM MP for StoreFront causes high memory utilization on Windows Server 2008 R2

Citrix SCOM MP for StoreFront causes high memory usage as well as can spawn many cscript.exe and conhost.exe processes...

How to Load Balance XenMobile Server Admin Portal

This article will guide you to load balance the XenMobile admin portal running on port 4443. Load balancing the admin portal will ease your XenMobile administration when you have cluster of XenMobile servers with which you can access the admin portal using one single load balancing IP instead of...

USB Devices prompting to connect on each session

USB devices prompting to connect on each session:...

PVS Streamed Desktops are Assigned the Same MAC Address

All desktops created by streamed VM setup wizard are assigned with the same MAC address...

Desktop Not Being Deleted from the Delivery Group

Objects not deleting from Citrix Studio XenDesktop 7.6 after deleting in Unidesk 2.9.6.3 via the UMC...

UPM - "Most used" section on the start menu not populated correctly

The "Most Used" section in the Start menu is not populated correctly in the user profile when logging on to Windows 8 / Windows 10 / Windows server 2012 VDA...

Published desktop is launched in background of local applications

Setting registry key: ForegroundLockTimeout to 0 makes published desktop window to launch in foreground in most cases. HKCU\Control Panel\Desktop name: ForegroundLockTimeout type: REGDWORD data: 0 default: 200000 In some cases, there are applications that set this value to a non 0 value, which...

Unable to send mails with attachment via Secure Mail.

Unable to send mails with attachments. Error in logs : "failed due to http 413" Error on device : "Can't Send Mail. Your message has been moved to the outbox. Please go to the outbox and try again."...

Issues with public store microsoft dynamic application with per app VPN

,Able to launch the application successfully however after entering the url in the application it gives the error "Your server is not available or doesn’t support this application"...

App Layering 4.1 - Failed to Create Layer, 'A specified parameter was not correct. url'

When attempting to create a layer, the error below is displayed: ​Failed to execute the script: vCenter returned an unexpected failure = Fault Code: 'ServerFaultCode' FaultMessage: 'A specified parameter was not correct. url' Details: "attributes":"xsi:type":"InvalidArgument","invalidProperty":"u...

Difference between Fast Clone and Full Clone

Q : When using Machine Creation Services to create a Machine Catalog containing desktop OS VMs, you can now choose whether MCS provisions thin fast copy clones or thick full copy clones. What's the difference between them? Ans Since Machine Creation Services MCS was first released in XenDesktop...

Windows / Office is not activating on App Layering images - "runipkato" file not present

Windows and Office can show as not having activated or not genuine copies of Windows after booting up an image created by Citrix App Layering...

7.13 VDA install hangs installing prerequisites (App Layering)

VDA installation hangs at the prerequisite screen. Depending on your version of the VDA software, it should look similar to this:...

Support Process for Thin Client Related Issues

Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...

XenMobile Server - Identity credential certificates (PKI) do not auto renew

MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...

Client Based Certificate Authentication fails for NS GW with 503 error

The CBA fails with this error : Fetcher : getagclientcert got a fail response 503 - we see the 401 error in the IIS logs below: 10.99.60.190, -, 5/8/2017, 11:22:16, W3SVC1, WIN0215, 10.99.60.31, 170, 1573, 1605, 401, 5, POST, /certsrv/certfnsh.asp, -, 10.99.60.190, -, 5/8/2017, 11:31:44, W3SVC1,...

Nutanix AHV Connector Failure: "The storage container cannot be accessed"

Error observed: "The storage container cannot be accessed. Please check that the ELM is in the container's 'white list'. " When deploying App Layering to Nutanix AHV: You are able to "check credentials" on the left half of the connector screen successfully, and it enumerate templates and storage...

Secure Mail : Error Processing STA Ticket. Bad Request, Cannot Connect to Company Network

Cannot connect to company network and Error Processing STA Ticket. Bad Request. Seems to be happening when entering passcode. NetScalers went down due to network trouble between datacenters...

AD Account Lockouts Due to Citrix PIN Password Caching

After a password change at ActiveDirectory, users are seeing account lockouts. XenMobile was causing these lockouts as the password cached with Citrix PIN was not updated...

XenMobile - Deleting the certificate entries directly from the Database

When we try to upload new SSL cert on XenMobile server, it fails to to get uploadedbecause of present certificate and because of data corruption in DB we are not able to delete the old certificate from the XenMobile console so insuch scenario, we need to delete it from database directly. Note :...

A solution for the problem that lock screen background image does not appear on Win 10 when Windows Receiver is Installed

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The lock screen background image does not appear when Windows Receiver is Installedon some Win 10...

Citrix Director: Could Not Establish Trust Relationship for the SSL/TLS Secure Channel

Director display in License Server section Cannot retrieve the data. Data source unresponsive due to configuration error. View Director server event logs for further information Checking the Application event log on the server running Director- logs event error: Event ID: 8 Level: Error Source:...

PVS XDSW "Cannot connect to the Hypervisor, object reference not set as an Instance"

When running XDSW, customer encountered generic error "Cannot connect to the Hypervisor, object reference not set as an Instance" This error was encountered just at the stage when the expected screen would be template selection...

How to Configure NetScaler MAS Simplified Audit Log Management

This article describes how to configure NetScaler MAS simplified audit log management. Background Audit logs are generated and stored centrally in the NetScaler MAS server's database for all the changes you make on the NetScaler instances through NetScaler MAS. These logs can be filtered by modul...

StoreFront - Keywords Usage

A spaceis allowed between Keywords when multiple keywords are used. Syntax- KEYWORDS:keyword2 keyword2 Example: KEYWORDS: Auto Featured The default syntax is to have one space between two keywords. However, multiple spaces also do not produce any error. There can be spaces after the colon : in th...

Bnistack error 85 - IOS Socket UNAVAILABLE - not counting retry

Target Devices actively connected to Provisioning Services suddenly exhibit severe performance issues such as: Target completely hangs Performance is extremely slow Number of retries increases dramatically Atthe same time the following error is found in the Event Logs inside the Target Device:...

Error: "StoreFront Store Service Probe Failed" While Using Citrix SCOM Management Pack for StoreFront

While using the Citrix SCOM Management Pack for StoreFront MPSF, you might come across an error, StoreFront Store Service Probe failed, that triggers an alert in the SCOM Console. Let’s troubleshoot and understand the possible causes and solutions for this error. Possible reasons for this issue...

How to add a Server Certificate as full chain certificate || XenMobile Server Certificate 10.x

This article shows how a server certificate is made as a full chain certificate...

How to Configure NetScaler as IDP for SAML Based Integration with 15Five

This article describes how to configure NetScaler as an Identity Service Provider IDP for 15Five SaaS applications, using SAML Security Assertion Markup Language protocol. Introduction 15Five is a company that provides performance management platform that combines employee feedback, objectives...

Changing DNS information on App layering ELM - 4.x

In 4.x, you cannot update DNS information by going to port 5480 MAIPAddress:5480...

Install XenServer tools silently

To silently install the XenServer Tools and to prevent the system from rebooting...

Why does Citrix Receiver send DNS query for nonexistent hostname?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. Question: Why does Citrix Receiver send DNS queries to similar NonExistingSubDomain? Answer: Citrix...

How does LDAP Authentication work with Kerberos Impersonation SSO?

How does LDAP Authentication work with Single Sign On using Kerberos Impersonation? In this flow, the NetScaler is contacting the KDC after we purged tickets on the KDC, and the NetScaler. 1. The client makes a GET request to the LB vServer. 2. The LB vServer is configured with Form-based...

Citrix Receiver: Difference of Logon Experience When Logon StoreFront with a Locked Account by Using Username/password and Smart Card

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes user experience of using Pass-throughwith username and password or smart card log...

Create non-persistent vm on XenServer

You can create a non-persistent XenServer VM by setting the VDI param to on-boot=reset VM will reset to original state after each reboot...

How to Hide a Store from Being Listed During Discovery with Receiver

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information To stop a Store from being listed during the Discovery process with Receiver change the properties of th...

Change of Expired LDAP Password on NetScaler During Log On Fails Intermittently

Changing the expired LDAP password at the time of user login via NetScaler Gateway due to password-expiry may fail and demonstrate itself on the login page as: "Incorrect credentials. Try again." or "Cannot connect. Try connecting again." ifEnhanced Authentication Feedback is enabled: At the time...

XenServer- Server are in maintenance mode

XenServer are not able to connect to XenCenter...

Problems activating PVS Target Devices configured for KMS licensing

Your PVS Target Devices are configured for KMS licensing, and after activating the first PVS Target device, activation of other PVS Target Devices devices fail. When you look more closely at the Target Devices you find that the devices all share the same CMID. This means that when building the...