BSOD with Error: "STOP 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized"

When attempting to boot Vdisks from Target device a BSOD occurs with the following message: STOP" 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

XenServer Security Update for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143 and CVE-2025-58146

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that collectively may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58146 Affected...

CWA 2503 for MAC - Error “There is no Citrix SSL server configured on the specified address

Issue with a users who is unable to launch applications from Citrix Workspace for Mac. When trying to launch an application, the following error is displayed: “Failed to start. There is no Citrix SSL server configured on the specified address.” Issue only occurring for CWA Mac...

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

Netscaler OpenSSH CVEs

Netscaler OpenSSH CVEs CVE-2023-48795 CVE-2023-51384 CVE-2023-51385...

The Non-Maskable Interrupt Button on a NetScaler Appliance

This article contains information about using Non-Maskable Interrupt NMI button on a NetScaler appliance. Requirements Review the NetScaler MPXHardware Platforms and NetScaler SDX Hardware Platforms page, to verify the NetScaler platforms that have the NMI button. NMI Button If the NetScaler...

PVS - Imaging Wizard fails when creating Vdisk. Error after restart 'Imaging wizard did not restart'

When attempting to create a vDisk, the Imaging Wizard gets as far as requiring a reboot, but after the restart returns the error 'Imaging wizard did not restart'...

How to install custom FreeBSD configuration files on a Netscaler

As a Netscaler is an appliance, the root filesystem which is a RAMDisk is restored from a non-modifiable image during every boot. As such, modifications to any FreeBSD configuration files in /etc will be erased upon reboot. This article shows how to properly install supported modifications to...

Filter Expressions for Wireshark When Using NetScaler Appliance

This article describes how to use filter expression for Wireshark to analyze the network packet trace recorded when using a NetScaler appliance. Filter Expressions for Wireshark NetScaler appliance inserts its own header called NetScaler Packet Trace, in the frame containing NetScaler specific...

CVE-2019-12044 - Buffer Overflow Vulnerability in Citrix ADC and Citrix NetScaler Gateway

Description of Problem A buffer overflow vulnerability has been identified in Citrix ADC and Citrix NetScaler Gateway which could possibly result in a denial-of-service in a specific configuration. This vulnerability has been assigned the following CVE number: • CVE-2019-12044: Buffer overflow...

How to change the customized icon for published apps in Citrix Cloud using Remote PowerShell SDK

In On-prem environment the icon of a published application can be replaced through the Application properties GUI. However in Citrix Cloud customized icon replacement is not possible from the GUI. We can use Remote PowerShell SDK to get it changed...

NetScaler Error: "Unable to complete System File Update request" while saving custom portal theme

On the NetScaler GUI getting the error "Unable to complete System File Update request" while editing and saving the portal theme...

[NetScaler-AAA] MAC address EPA scan on macOS 15 may fail

If you have EPA policies to scan Gateway clients MAC address, it may fail after end users upgrading macOS to version 15. Log says, the MAC address predefined in EPA policy cannot be found. Log sample: 2024-09-26 15:54:30 Epa Failed2024-09-26 15:54:30 Case ID : 9fc302024-09-26 15:54:30 Epa log msg...

Disable Restart Button While Desktops are Restarting

This article describes how to configure the StoreFront to ignore clicks on “Restart” while desktop is powering off and while it is powering on again. Background When the user’s desktop is restarting, there might be issues if they repeatedly click on the desktop...

Error: The Pool Failed to Enable External Authentication in XenServer

When attempting to enable external pool authentication in a XenServer 5.6 Feature Pack 1 pool, the operation fails with one or more of the following errors: “Error: The pool failed to enable external authentication.” “Error: Enabling Active Directory Authentication on pool '' - Could not enable...

Citrix uberAgent Security Bulletin for CVE-2024-6677

Description of Problem A vulnerability has been discovered in Citrix uberAgent, which, if exploited, may result in the escalation of privileges of the attacker. Affected Versions: The following supported versions of Citrix uberAgent are affected by the vulnerability: Citrix uberAgent before 7.2.1...

DDC 2203 - How to manually remove the stale DDC from Database

Old removed DDC is listed under Zones alongside the two current DDCs. "Get-BrokerController" and database table 'chbConfig.Controllers' shows working DDCs...

Adding ADC instance on ADM failed with error - Added unlicensed * that requires HTTPS connection

Adding NetScaler instance on ADM failed with error - Added unlicensed that requires HTTPS connection...

Citrix License Server susceptibility to certain Apache CVEs

Citrix License Server may be flagged by vulnerability scanners as potentially impacted byCVE-2006-20001, CVE-2022-36760, and/or CVE-2022-37436. This is because Citrix License Server uses Apache version 2.4.54 inLicense Server version 11.17.2 build 42000 and older versions of Apache in older build...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

Error: "License server is not connected" in Citrix Director

On the Director site, if you scroll down to check the connectivity of the CitrixLicense server to each of thecontrollers, it shows up as "License server is not connected"...

NetScaler Gateway-13.1-Launching ICA session got stuck with client authentication enabled

You may stuck at the ICA session launching process when you enable client authentication in Gateway virtual server...

Citrix Licensing - Cannot connect to the license server with error id "XDDS:796F2703"

Citrix Studio cannot connect to the License Server 11.17.2 build 51000. It reports "certificate is not trusted or valid" with Error Id: XDDS:796F2703...

Security Bulletins for XenServer

This article lists historic security bulletins published for XenServer 8.4. We recommend subscribing to security bulletin email alerts for timely notification of new bulletins. The bulletins advise about any software updates that have been published to address the issues. We highly recommend that...

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information .

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information of User Connection Failures, Failed Single-session OS Machines, Failed Multi-session OS Machines data is missing. The following exception can be seen in CDF traces. Error:...

Provisioning 2203 : Citrix PVS breaks with Microsoft OLEDB driver v19

When upgrading PVS 2203 servers to mitigate a Microsoft OLEDB driver vulnerability CVE-2023-36728, a customer incorrectly removed Microsoft OLE DB Driver 18 and installed Microsoft OLE DB Driver 19. PVS Server 2203 cannot use Microsoft OLE DB Driver 19 to communicate with the SQL server...

Support for Audio over EDT Lossy protocol

IMPORTANT --- Audio over EDT Lossy loss tolerant mode for audio is currently in tech preview, and currently supported on Windows and Linux directly and with Gateway Service. Audio over EDT Lossy increases the user experience for real-time audio streaming and improves audio quality compared to aud...

Citrix Audio Diagnostic Tool

Citrix Audio Diagnostics tool 1.0.3 What’s new for this release? Support new policy Loss Tolerant Mode for Audio. Optimize the display of network metrics for high round-trip times ICA RTT. Support command-line mode and a runtime option in seconds, allowing the tool to operate in the background fo...

How generate a Citrix Cloud bearer token and use it on a PowerShell API query

This article outlines the steps to generate a Citrix Cloud bearer tokenand use it on a PowerShell API query...

Apache vulnerability CVE-2006-20001 CVE-2022-36760  CVE-2022-37436 in License Server version 11.17.2

Apache/2.4.54 contains vulnerabilities and is used in the Citrix License Server version 11.17.2 build 41000. Security scans may raise the following CVEs: CVE-2006-20001 CVE-2022-36760 CVE-2022-37436...

[Citrix NetScaler] Monitor DOWN with error: "No MIP/SNIP available to send the monitor probe"

You may see services DOWN with error "No MIP/SNIP available to send the monitor probe". 216814 PPE-0 MonServiceBindingXXXXXXXXXX: DOWN; Last response: Failure - No MIP/SNIP available to send the monitor probe. Thu Dec 17 08:45:07 2020...

the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys

The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...

How to update SAML certificate settings for Sharefile SSO using XenMobile

You can configure XenMobile and ShareFile to use Security Assertion Markup Language SAML to provide single sign-on SSO access to ShareFile mobile apps. For this you need to configure the SAML certificate...

App Layering - PVS Blue Screen SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (CVhdMp.sys)

The BSOD SYSTEMTHREADEXCEPTIONNOTHANDLED CVhdMp.sys is seen when booting up a VM in PVS using an App Layering image. It is also possible to just simply get a BSOD with a Stop Code of 0x0000007B. However, this is fairly generic. If you see this stop code and "ERROR: BNIStack failed, network stack...

Recommended Hotfixes for Citrix Hypervisor 8.2 Cumulative Update 1

This article contains the minimum set of hotfixes to install to get your Citrix Hypervisor 8.2 Cumulative Update 1 installation up to date. If you use theAutomated Updatesfeature of XenCenter, this is the set of hotfixes that are installed. Note : Citrix Hypervisor 8.2 Cumulative Update 1 reaches...

How to reboot or shutdown NetScaler MAS using CLI

Citrix ADM, formerly NetScaler MAS There is an option on MAS GUI to reboot it but what is the equivalent CLI command for it. Do not use the REBOOT command as it is not a clean reboot and will need a Database recovery...

CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

How to create a PVS master target device on Hyper-V for Windows 11

The objective here is to creating a PVS master target device VM on Hyper-V, which can be used for both installing Windows 11 and also booting via PVS. Windows 11 has installation requirements which need both Secure boot and TPM available. Hyper-V VM options which are relevant here: Secure boot...

Citrix DaaS - Unable to reconnect to a disconnected session

Users attempting to reconnect to their previously disconnected ICA sessions while accessing Citrix Virtual Apps and Desktops CVAD via Citrix Workspace App CWA are unable to do so. The reconnection process fails, potentially leaving users with a frozen or unresponsive application or desktop sessio...

Unable to run WSL2 on the W11 VDI machine

When customers attempt to install the WSL 2 Ubuntu distribution on Windows 11 VDIs , they encounter the following message: Installing, this may take a few minutes. Error observedWslRegisterDistribution failed with error: 0xe000020b Error: 0xe000020b null...

How to Find Maximum Size of IP Data Payload that can Traverse WAN Environment Without Fragmentation

Citrix SD-WAN, formerly NetScaler SD-WAN This article describes how to find out the maximum size of IP data payload that can traverse a WAN environment without fragmentation. Background The CloudBridge acceleration parameters are sent through TCP options, which use the space in the IP data payloa...

Probe Agent can not communicate with Citrix Gateway with port 5000

Error "Failed to authenticate Citrix Gateway credentials" raises if non 443 port is used in the FQDN of Citrix Gateway URL...

After upgrade to VDA 2308, users getting message "You'll need a new app to open this ctxgeoloc link"

After upgrading to VDA 2308, when a user logs on, they receive a windows message stating: "You'll need a new app to open this ctxgeoloc link"...

"Internal Server Error 43549" response from Gateway with malformed request "/epatype?Param"

Security scanning report vulnerability on ADC: Web Server Misconfiguration - Server Error Message when http request url includes "/epatype?"...

Citrix Cloud Error: "Invalid username, password or token"

A user cannot login to Citrix Workspace and receives the following error message: “Invalid username, password or token” when logging in...

Migrate Citrix Virtual Apps and Desktop databases to a new SQL server

Please follow these steps. 1.Close all instances of Citrix studio. Any configuration changes even through powershell to be stopped while following the stepsYou can power down DDCs to be extra cautious Take VM snapshot or take backup of all Delivery Controllers. 2. Take full backup of Site, Monito...

CVE-2019-9548 - Citrix Application Delivery Management (ADM) Agent Security Update

Description of Problem A vulnerability has been identified in Citrix Application Delivery Management Agent that could allow an unauthenticated attacker with network access to the management agent interface to obtain sensitive information. Disclosed information could be used for privilege escalati...

CVE-2014-1910 - SSL Certificate Validation Vulnerability in the Citrix ShareFile Mobile Application for Android and the Citrix ShareFile Mobile for Tablets Application for Android

Description of Problem A vulnerability has been identified in the Citrix ShareFile Mobile application for Android and the Citrix ShareFile Mobile for Tablets application for Android that could result in SSL certificates being incorrectly validated. This vulnerability has been assigned the followi...

CVE-2018-18571 - Authentication Bypass vulnerability in XenMobile Server

Description of Problem A vulnerability has been identified in Citrix XenMobile Server that could permit an attacker to impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device. The vulnerability has been assigned the following CVE number: • CVE-2018-18571:...

ADC SAML Error : “Malformed Assertion sent to NetScaler; Please contact your administrator”

End user getting the error message : “Malformed Assertion sent to NetScaler; Please contact your administrator” after authenticating at IDP ADFS v3...