Receiver pass through is failing with Storefront when we are trying to launch application across domains/forests.

We have two domains “Domain1.com" and "Domain2.com" in different forest. External two way trust relationship exists between 2 domains. XenApp and XML servers are in “Domain2.com" domain and Store front servers are in “Domain1.com" domain. Few users in "Domain1.com" domain is part of a global grou...

How to Reverse Image from a Virtual Disk to a Local Hard Disk with VMware ESX4

This article contains information about how to reverse an image from a virtual disk to a local hard disk with VMware ESX4. Background It is often necessary in a Provisioning Services environment to reverse an image to install a Citrix hotfix, change a driver, or do certain other tasks.To achieve...

How to Import/Export vDisk

How to Import/Export vDisk...

Secure Flag not set for Cookies generated by Netscaler if Vserver is part of Persistence Group

We need to have the NSC cookies using the Secure and HttpOnly flag set, however Secure flag is not set by NetScaler...

Application Enumeration Fails When Connecting Through Windows App Receiver and NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Application enumeration fails when connecting through Windows App Receiver and NetScaler Gateway...

[FAQ] Netscaler LDAP uses which IP address as source

Netscaler LDAP uses which IP address as source, NSIP or SNIP Answer:- - nsldap.pl is a perl script and will use NSIP as source IP by default. - If the Netscaler has SNIP in the same subnet of the authentication server, Netscaler will communicatethrough SNIP. - And, if Netscaler and the...

Troubleshooting StoreFront propagation issues

StoreFront propagation fails to complete. The issue can manifest itself with any of the following errors: StoreFront Error: "Propagation Failed on One or More Servers" StoreFront Propagation Fails with Event ID: 31 "Could not find a part of the path" StoreFront Error: "Event ID 19 Failed to Get t...

Converting iRules to NetScaler Policies - X-Forwarded For Header Based Persistence

Use Case X-Forwarded-For HTTP header indicates the path where the request came in through and it can have multiple IP addresses as well. You can define persistence based on the value of X-Forwarded-For header received while processing the request on load balancing vserver. F5iRules Name:...

CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections

QUESTION: CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections ANSWER: This is known limitation. We do not support unsigned SMB2 connection with windows 10 as it uses secure dialect negotiation. However performance should be better compare to w/o CB as w...

FAQ: Key Sizes/Certificates Supported by ADC

Q: What are the key sizes/certificates supported by ADC? A : An MPX appliance supports certificates of 512 or more bits, up to the following sizes: 4096-bit server certificate on the virtual server 4096-bit client certificate on the service 4096-bit CA certificate includes intermediate and root...

Support for Multiple Versions of MS Office on a Machine with Terminal Services Enabled

Scenario: We have Multiple Versions of Microsoft Office installed on the Master Image or vDisk and looking forward to activate both versions using KMS This scenario is not supported. Please refer Microsoft's KBhttps://support.microsoft.com/en-us/kb/2784668according to which : "We do not support t...

Users Unable to Connect After Rebuilding Licensing Server With qfarm Showing Load of 20000

After rebuilding the XenApp licensing server users are unable to connect. XenApp Licensing installed without issueand its services are running. Running qfarm /load on any of the XenApp servers in the farm shows a load of 20000 meaning the servers are unable to acquire a connection license for the...

TCP Profiles on NetScaler

TCP configurations for a NetScaler appliance can be specified in an entity called a TCP profile, which is a collection of TCP settings. The TCP profile can then be associated with services or virtual servers that want to use these TCP configurations. Built-in TCP Profiles For convenience of...

How do I Load Balance DNS traffic (DNS proxy) on NetScaler?

Domain Name Servers DNS are the Internet's equivalent of a phone book. They maintain a directory of domain names and translate them to Internet Protocol IP addresses. When you request DNS resolution of a domain name, the NetScaler appliance uses the configuredLoad Balancing method to select a DNS...

Screensaver Not Working in XenDesktop

Screensaver not starting on Virtual Desktop - Desktop OS VDA...

Secure Mail Error: "Cannot Safely connect to the server. The server certificate is not trusted."

New Users: When attempting to connect to Secure Mail, new users encounter the following error message: "Cannot safely connect to the server. The server's certificate is not trusted." Already Enrolled Users: Already enrolled users experience the error message: "Access to your company network is no...

Error: "To Use Desktop Lock Feature, Make Sure Receiver is Installed and is Working Fine With Single Signon" While Installing Desktop Lock

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Trying to install and activate Desktop Lock, but cannot get it to install. "To use Desktop Lock...

Unable to Enroll Device "Profile Installation Error"

"Profile installation error" occurs while enrolling device. IPCU logs show the following error: Desc : A connection to the server could not be established.US Desc: A connection to the server could not be established.Domain : MCHTTPTransactionErrorDomain Code : 23001 Type : MCFatalError Params :...

How to Set the Time Zone of the NetScaler Appliance to UTC Time Zone

This article contains the procedure to change the time zone of the NetScaler appliance to Coordinated Universal Time UTC if the appliance is set to another time zone. When setting the appliance to the UTC time zone, it can be confusing to refer to a relevant city. To avoid such uncertainty, you c...

Multiple RDS Per Device CALs are issued to the same device when Streaming targets using PVS

License Count is incorrect withRDS Per Device CALswhen Streaming Citrix Virtual Apps VDA or Desktop VDA in Standard Mode. RDS Licensing Manager shows multiple RDS Per Device CALs consumed by same target VDA provisioned using Machine Creation Service MCS and PVS...

Error: "The specified network name is no longer available", Profile Fails to Load and user receives Temporary Profile if NTFS permissions changed on User Store

Under certain circumstances, a user profile may fail to load and the user receives a temporary profile. When this occurs an error "The specified network name is no longer available" appears in the Profile Management Log...

Where can I download the MIB files for Monitoring CloudBridge Linux-based appliances?

QUESTION: Where can I download the MIB files for Monitoring CloudBridge Linux-based appliances? ANSWER: -On version 7.4.x and later you can download the MIB files from Configuration Appliance Settings SNMP -On versions prior 7.4.x you can download the MIB files from CloudBridge Configuration...

Storefront 2.6 - How to Disable Receiver Detection

This article explains how to disable Receiver detection on StoreFront 2.6...

How to Generate SHA2 CSR on NetScaler Using OpenSSL

This article describes how to generate SHA2 Certificate Signing Request CSR on NetScaler using OpenSSL. Background Currently there is no option to create SHA2 CSR from NetScaler GUI however you can leverage the OpenSSL commands for creating SHA2 CSR from NetScaler...

How to Disable SR-IOV on Emulex CNA\HBA on HP Hosts Running XenServer 6.5

To Disable SR-IOV on Emulex CNA\HBA...

SNMP v3 System Generated Passwords are Not Accepted by CloudBridge

When SNMP-v3 trap receiver is configured, authentication and privacy passwords assigned to SNMP-v3 management applications are system-generated and contain special characters like: .,,@,$,%, , , “,” and so on. However these system-generated passwords are not accepted on the CloudBridge password...

Best Practices for Upgrading a Hypervisor Tools Version in a Citrix Provisioning Environment

This article describes the steps for upgrading a hypervisor tools version in a Citrix Provisioning environment. Use the following procedure to upgrade a Hypervisor: 1. Reverse image the vdisk. 2. Boot from the local HDD on the VM that has been reverse imaged to. 3. Uninstall the PVS target...

Citrix Provisioning Services Antivirus Best Practices

The environment may experience one or more of the following symptoms if the antivirus client is impacting either the Target Devices or PVS Servers. - Target Devices running the VDA software may appear power state unknown and no longer registered whenlooking at them via Studio or Director. -...

Citrix DaaS Workspace Core - Domain is unreachable Error

When using DaaS quick create to create directory connection for AWS workspace core , error prompts "Domain not found" and Status shows "Invalid Account"...

Enabling EDT Lost Tolerant Mode using Linux as client.

How to enable EDT Lost Tolerant Mode in the latest VDAs versions when using Linux as client, all requirements needed...

NetScaler 13.1 53.24: iOS "Network Timed Out" with Outlook/Teams Authentication

Users encounter a "Network Timed Out" error on their iOS devices when attempting to authenticate specifically with the following applications: Microsoft Outlook iOS Microsoft Teams iOS This authentication failure is isolated to iOS devices; users on Android, Windows, or macOS versions of the same...

NetScaler -13.1 56.18 - Non-recoverable : potential damage: system hardware in jeopardy or damaged

The Citrix NetScaler SDX 16000 appliance may exhibit the following symptoms: The appliance reports critical voltage errors in the ns.log and system message logs, indicating potential hardware damage. Specific Log Entries: The following log entries, or similar variations, are observed: Mar 9...

PVS Citrix Virtual Desktops Setup Wizard fails to create every other machine

When using PVS Citrix Virtual Desktops Setup Wizard, it creates machines however every other machine fails to be created. This typically means either all even numbers machines or odd numbers machines fails to be created depending on what number you start with...

Image Preparation fails using MCS on GCP due to Google's deprecated images disk export workflow

Symptoms or Error Customers cannot create new catalogs or update the images of existing catalogs. Solution Citrix is currently working on a fix. Workaround: Customers can update the json files to use a newer image and script.Below is the step-by-step process. There are 2 options to update the...

The Image Does Not Have Layer Data Located In HKEY_CLASSES_ROOT or HKEY_CURRENT_USER

In one use case the published image, with Windows 11 OS, was missing the value, HKEYCLASSESROOT\mailto\Default. The Windows 10 images were ok...

Rendezvous v1 Connections fail after setting PortNumber argument on VDA Command Line Installs

After installing VDA with a custom port number with the commandline argument: /portnumber NNNN where NNNN is the port number, and runningxaxdcloudproxy.exe -VDAPORT NNNN on the cloud connectors, Rendezvous v1 connections to VDA fail. Network traces show that Cloud Connector attempts to reach...

Custom application fails to launch when the command line exceeds 203 characters

Custom application fails to launch when the command line exceeds 203 characters. Application appears to launch and then disappears...

If Workspace Apps is deployed by StoreFront, platformRateLimitPktDrop can be recorded in ns.log.

"platformRateLimitPktDrop" is recorded when the licensed bandwidth is exceeded. Recent Citrix Workspace Apps size is larger than before. If you set "Local files on the storeFront server on Citrix StoreFront", licensed bandwidth can be exceeded...

Spinning wheel during store access for German users, after Storefront upgrade from 2402 to 2402 CU1

Issue: After upgrading Storefront from 2402 to 2402 CU1, German language users may experience a spinning wheel during store access. This does not apply when upgrading from earlier versions of StoreFront, such as from 2203 to 2402 CU1. Symptoms or Error: The developer tool shows Http 404 error for...

LVDA get unregistered randomly after reboot

The customer said their LVDA get unregistered randomly after reboot...

Hotfix XS82ECU1074 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. Note: This hotfix is available only to customers on theCustomer Success Servicesprogram. Where To Get This Hotfix Download Citrix Hypervisor 8.2 Cumulative Update 1 hotfixes from...

App Layering - Changes to Scheduled Tasks do not show up on the layered image

Making changes to an existing scheduled task will not be reflected on the published image. Adding a version to the layer shows the old values and not the changes...

Increase the size of the App Layering boot disk for packaging

When you create/edit layers in App Layering, a packaging machine is created. If you have caching enabled, then a boot disk is created as well as copies of the OS layer and any relevant App Layer. When the packing machine is booted, some system data such as the pagefile is stored on that boot disk...

How to convert MCS provisioned VM’s identity disks to streaming optimized disks.

Description: Support for VMware vSAN8 was incorporated into all current releases of Citrix Virtual Apps and Desktops as detailed in thisblog. With this support, Machine Creation Services MCS creates VMDK files with a stream-optimized format for all VMs. As the blog mentioned, there might be...

How to limit NetScaler Management access

With this document you may limit the NetScaler Management access to certain IP address/es...

User Profile hangs when using CVAD 2203 CU5

Upgrading to CVAD 2203 CU5 found an issue with hanging on loading the user profile. It eventually times out and the session is disconnected/hung...

Poor ICA streaming performance observed when HDX Insights enabled on NetScaler AppFlow policies

Users are facing high latency issue and they are not able to do audio and video calls. Apps and Desktops ICA streams performs poorly and high end-user experience is observed "HDX Latency" calculations made by VDA fluctuate up/down from 10ms to 900+ ms observed using command "ctxsession -v" and...

Black screen after VDA uninstallaion

Customer uninstalled the VDA to upgrade to a later version but now they see a black screen when they try to logon to the console. The event logs show that LogonUI.exe was crashing...

"Check for Available Renewals" may show error banner "citrixservices.citrix.com is unreachable"

When user clicks "Check for Available Renewals" button in Citrix License Server Console, error banner "citrixservices.citrix.com is unreachable. The server might be offline or there might be Internet, Proxy, or Firewall issues. " may appear. Actually, the affected license server is able to reach...

Windows 11 VDA seamless app launches with fullscreen black border behind logon window

The customer uses windows 11 VDAs to provide access to a published application which has desktop operating system requirement. The initial launch of the published application showed the seamless application launch with a full screen black border behind the logon window. This is disruptive to user...