Netscaler High Availability issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with Netscaler High Availability HA. Overview of the Issue NetScaler High Availability HA offers seamless failover capabilities to maintain uninterrupted...

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, if exploited, allow privileged code in an HVM guest VM to compromise or crash the host. These issues only apply in specific configurations; furthermore, Citrix believes that there would be significant difficulty...

CVE-2016-6273 - Denial of Service Vulnerability in Citrix License Server

Description of Problem A vulnerability has been identified in the Citrix License Server for Windows and Citrix License Server VPX that could allow a remote, unauthenticated attacker to crash the License Server. This vulnerability affects all versions of Citrix License Server for Windows and Citri...

Citrix Security Acknowledgements

Citrix would like to thank security researchers who have worked with us to secure Citrix products and services. 2019 Vahagn Vardanian Mohammed Israil Nicholis du Toit Archit Garg of Careem Ismail Tasdelen Andrea Pessione of SKIT Cyber Security Armando Huesca of SKIT Cyber Security Asher Bin Khali...

CVE-2019-6485 - TLS Padding Oracle Vulnerability in Citrix Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the Citrix Application Delivery Controller ADC formally known as NetScaler ADC and NetScaler Gateway platforms using hardware acceleration that could allow an attacker to exploit the appliance to decrypt TLS traffic. This vulnerability...

CVE-2018-18517 - Cross-Site Scripting Vulnerability in Citrix NetScaler

Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in Citrix NetScaler Gateway, formerly known as Citrix Access Gateway Enterprise Edition and Citrix ADC formerly known as NetScaler ADC, that if exploited by an attacker with access to the NetScaler administrative...

Error: "Execute Commands failed" When Enabling AppFlow from NetScaler MAS

Enabling AppFlow from NetScaler MAS fails with the error message: Execute Commands failed. Config logs /var/mps/log/mpsconfig.log: Wednesday, 10 Jan 18 11:55:20.075 -0500 Error 1 SSH Command Timed out on Wednesday, 10 Jan 18 11:56:20.080 -0500 Error Main SSH: Failed to connect on Wednesday, 10 Ja...

How to Remove XenTools for Clean Install

To remove XenTools from VMs if standard uninstall does not work...

[NetScaler-AAA] MAC address EPA scan on macOS 15 may fail

If you have EPA policies to scan Gateway clients MAC address, it may fail after end users upgrading macOS to version 15. Log says, the MAC address predefined in EPA policy cannot be found. Log sample: 2024-09-26 15:54:30 Epa Failed2024-09-26 15:54:30 Case ID : 9fc302024-09-26 15:54:30 Epa log msg...

Citrix Director - Troubleshoot Monitor data source errors

Director reports Monitor data source errors...

| Citrix Workspace App 24.x SSON fails and ssonsvr.exe not running on client

SSON fails with CWA 2402 and 2405.10 The logon to a session stops at the "other user" screen . It is also noticed that the ssonsvr.exe process is not running on the client...

"Connection timeout" error when launching Desktop sessions

Users are unable to connect to Desktop Sessions. All connections fail with status "Connection Timeout"...

How generate a Citrix Cloud bearer token and use it on a PowerShell API query

This article outlines the steps to generate a Citrix Cloud bearer tokenand use it on a PowerShell API query...

Cloud connector disconnected - event id 514

In a resource location with multiple cloud connectors, some of them show as "disconnected" in Citrix Cloud or the Cloud Dashboard page. Other Connectors do not display the problem. All Cloud Connectors in the same VLAN. Cloud Connector Connectivity Check Utility does not detect any problems with...

[Citrix NetScaler] Monitor DOWN with error: "No MIP/SNIP available to send the monitor probe"

You may see services DOWN with error "No MIP/SNIP available to send the monitor probe". 216814 PPE-0 MonServiceBindingXXXXXXXXXX: DOWN; Last response: Failure - No MIP/SNIP available to send the monitor probe. Thu Dec 17 08:45:07 2020...

Cannot join Server Group - Error occurred running the command: Start-DSClusterJoinService

When trying to add Storefront server to existing group, getting error: When checking event viewer logs on Storefront server, we see: An error occurred running the command: 'Start-DSClusterJoinService' Exception of type...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

CVE-2017-5571 - Open Redirect Vulnerability in Citrix License Server for Windows and Citrix License Server VPX

Description of Problem An open redirect vulnerability has been identified in the Citrix License Server for Windows and the Citrix License Server VPX. This vulnerability could potentially be used to facilitate a phishing or social engineering attack. This vulnerability has been assigned the...

Citrix Hypervisor Security Update

Description of Problem A number of vulnerabilities have been found in Citrix Hypervisor formerly Citrix XenServer that may: i. Allow the host to be compromised by privileged code in a PV guest VM, ii. allow unprivileged code in a HVM guest VM to cause that guest to crash and iii. under certain...

How to troubleshoot “Cannot Start App” or “Cannot start Desktop” when launching an App or Desktop

Note: This is a master overview article. The solutions for each of the root causes is present in child articles shown in the following tables. The following error is displayed when launching an app “Cannot start App” or desktop: “Cannot start Desktop” Where to Start Troubleshooting Do you get the...

How to change the customized icon for published apps in Citrix Cloud using Remote PowerShell SDK

In On-prem environment the icon of a published application can be replaced through the Application properties GUI. However in Citrix Cloud customized icon replacement is not possible from the GUI. We can use Remote PowerShell SDK to get it changed...

CVE-2017-14602 - Authentication Bypass Vulnerability in the Management Interface of Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition Appliances

Description of Problem A vulnerability has been identified in the management interface of the Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition appliances. This vulnerability, if exploited, could allow an attacker with access to the management interface of the...

Hotfix XS82ECU1072 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. Note: This hotfix is available only to customers on theCustomer Success Servicesprogram. Information About this Hotfix Prerequisite| None ---|--- Post-update tasks| None Content live...

Support for Audio over EDT Lossy protocol

IMPORTANT --- Audio over EDT Lossy loss tolerant mode for audio is currently in tech preview, and currently supported on Windows and Linux directly and with Gateway Service. Audio over EDT Lossy increases the user experience for real-time audio streaming and improves audio quality compared to aud...

EPA Scan failure on MacOS with error message "Error during unzipping libraries"

EPA scan failed on MacOS client withfollowing errors in "/Library/Application Support/Citrix/EPAPlugin/ " logs: Error during unzipping libraries NSAppleScriptErrorAppName = CitrixEndpointAnalysis; NSAppleScriptErrorBriefMessage = "unzip: cannot find or open 1/Library/Application...

High CPU utilization on the WEM Server

Norskale Broker Service.exe 1912 utilizes High CPU...

CVE-2016-6276 - Vulnerability in Citrix Linux VDA (formerly known as Linux Virtual Desktop) Could Result in Privilege Escalation

Description of Problem A vulnerability has been identified in the Linux Virtual Delivery Agent VDA component of Citrix XenDesktop that could allow a local user to execute commands as root on the Linux VDA. The vulnerability affects all versions of the Citrix Linux VDA earlier than version 1.4.0...

CVE-2018-7218 - Vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway leading to arbitrary code execution and host compromise

Description of Problem A flaw has been identified in the AppFirewall feature of Citrix NetScaler Application Delivery Controller ADC and Citrix NetScaler Gateway that could result in arbitrary code execution and host compromise. The following vulnerability has been addressed: CVE-2018-7218...

Event ID: 0 & Event ID:1 - Citrix Store cannot be created or added

Unable to create or add a store. Event ID: 0 & Event ID:1 Checking the event viewer on the Storefront server gives the following events- Also, unable to browse an existing store. "The webpage cannot be found."...

NetScaler Enters Grace Period After Reboot for 5 to 10 minutes

NetScaler Enters Grace Period After Reboot "Running in Grace. System will lose capacity after" for sometime...

"An Account is not Configured" Displayed On Startup when AllowAddStore is set to N in Registry

Citrix Workspace app for Windows is being configured via command line arguments and then launched programmatically The following error is displayed: An Account is not Configured. Please contact your administrator...

Error code 1603 received when trying to upgrade Storefront

An error displays during Storefront upgrade "\CitrixStoreFront-x64.msi failed with error code 1603"...

Error: "HdxSdkErrorDomain_Session error 8" when launching desktop from iPad device.

Error: "HdxSdkErrorDomainSession error 8" when launching desktop from iPad device. Error message in Japanese: 「接続エラー サーバエラー。サーバはセッションを切断しました。」 「継続的なエラー 次の情報をIT部門にお知らせください：操作を完了できませんでした。HdxSdkErrorDomainSessionエラー8」...

Workspace error "Unable to add account with the given server URL"

Afterentering Citrix Gateway URL on Workspace and thenenteringthecredentials, the user encounters the following error: "Unable to add account with the given server URL. Ensure that it is correct or enter your email address"...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security issues have been identified within Citrix XenServer. These issues could, if exploited, allow a malicious administrator of a PV guest VM to compromise the host. The issues have the identifiers: CVE-2017-8903 High: x86: 64bit PV guest breakout via pagetab...

Upcoming changes for Citrix DaaS to remote hypervisor communication

Citrix DaaS service is migrating the communication channel used to access some Hypervisors. This migration will result in a more stable and higher performing connection. This transition will be performed on a rolling basis starting in Q1 2025...

PVS server fail to boot with error “Login request timed out”

High percentage of PVS provisioned desktop servers fail to boot. This is the sequence of the events: 1. The servers boot with an ISO. 2. The tsbbdm.bin is downloaded from the 1st PVS on the site. 3. The streaming process fails. 4. Error pops up :“Login request timed out”. Rebooting the PVS server...

Citrix Cloud Error: "Invalid username, password or token"

A user cannot login to Citrix Workspace and receives the following error message: “Invalid username, password or token” when logging in...

Citrix Secure Access client for Ubuntu Security Bulletin for CVE-2023-24492

Vulnerabilities have been discovered in Citrix Secure Access client for Ubuntu previously Citrix Gateway VPN client for Ubuntu. The following supported versions are affected by the vulnerability: Versions before 23.5.2 The issue has the following identifier: CVE ID| Affected Products| Description...

How to Enable StoreFront Verbose Logging

This article explainshow to use PowerShell to enable the native verbose logging and how to use Microsoft’s DebugView tool to collect traces. Requirements Basic knowledge of PowerShell...

SSON not working with Microsoft Edge, Google Chrome and Firefox . Message "No logon methods are available on this platform" is seen.

After logging on to Chrome,Edge or Firefox this message is seen. No logon methods are available on this platform" After browsing to the Storefront URL a screen appears asking to detect if Citrix Workspace App ininstalled . Then this screen is seen...

Citrix Workspace app showing white screen, screen does not refresh, app resize issues on client machines running Intel Iris Xe-Treiber video driver

-Citrix Workspace App won’t load/refresh, it stays just white screen -It is possible to refresh the apps by resizing the workspace app, but that is not a viable solution. -All version of Citrix workspace app is affected 20, 21.3, 21.4 TP...

Filter Expressions for Wireshark When Using NetScaler Appliance

This article describes how to use filter expression for Wireshark to analyze the network packet trace recorded when using a NetScaler appliance. Filter Expressions for Wireshark NetScaler appliance inserts its own header called NetScaler Packet Trace, in the frame containing NetScaler specific...

CVE-2014-8580 - Authentication Flaw in Citrix NetScaler Application Delivery Controller and NetScaler Gateway Could Result in Unauthorised Access to Network Resources

Description of Problem An authentication flaw has been identified in certain configurations of Citrix NetScaler ADC and NetScaler Gateway that could allow an authenticated user to obtain unauthorised access to network resources for another authenticated user. This flaw affects the following...

Citrix SD-WAN Center Security Updates

Description of Problem A command injection vulnerability has been identified in the management console of Citrix SD-WAN Center and NetScaler SD-WAN Center. This vulnerability could allow an unauthenticated attacker with access to the management console to compromise the host. A low severity...

Event id 1 "An error occurred running the command: 'Install-DSFeatureClasses' " while propagating changes after adding StoreFront Server to a Server Group

You may be unable to propagate changes after adding StoreFront Server to existing Server Group. The propagation fails with following event inCitrix Delivery Services event log: Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Date: dd/mm/yyyy hr:min:sec AM/PM...

CVE-2017-9231 - XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.x and 9.x

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix XenMobile Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number:...

Error: "Power State Unknown" "CDS_EVENT_HOSTING_FAILED_POWER_ACTION" in XenDesktop

Machines in Desktop Studio or Desktop Director display a Power State of Unknown. CDSEVENTHOSTINGFAILEDPOWERACTION The Citrix Broker Service detected that power action '%1' on virtual machine '%2' failed. This problem is most likely due to a host issue. Check that the configuration of the virtual...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

XenServer Security Update for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143 and CVE-2025-58146

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that collectively may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58146 Affected...