FAQ: XenMobile Derived Credentials

What are Derived Credentials? Derived credentials provide strong authentication for mobile devices. The credentials, derived from a smart card, reside in a mobile device instead of the card. The smart card is either a Personal Identity Verification PIV card or Common Access Card CAC. The derived...

How to check PVS target device write cache size remotely

...

XenMobile Policy State Pending or Failed on Windows Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to windows policy deployment failures and also provide additional information on settings up XenMobile server with right values...

Citrix Provisioning: How to update a vDisk – Versioning Method

How to update any vDisk using versions without any downtime...

Office not Activating in App Layering (incl. MCS Image Prep OS Rearm Failed)

Due to the complexity of Microsoft licensing, App Layering utilizes our own set of scripts to ensure Windows & Office activation. These scripts are a part of the "Citrix App Layering OS Machine Tools," and their misconfiguration is the leading cause of the "Image Preparation OS Rearm Failed" erro...

Delivery Controller cannot contact vCenter server after certificate update on vCenter

Delivery Controller unable to contact the vCenter server aftercertificate update onthe vCenter server...

How to Create Web Link for Specific Citrix Secure App in XenMobile Store

This article describes how to create web link for specific Citrix Secure App in XenMobile Store...

Windows / Office is not activating on App Layering images - "runipkato" file not present

Windows and Office can show as not having activated or not genuine copies of Windows after booting up an image created by Citrix App Layering...

7.13 VDA install hangs installing prerequisites (App Layering)

VDA installation hangs at the prerequisite screen. Depending on your version of the VDA software, it should look similar to this:...

FAQ: XenMobile Per App VPN

Can Per App VPN be configured for MAM only devices No, Per App VPN does not support MAM only devices. With the iOS per app-VPN feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed iOS device. There, you can establish an on-demand VPN tunnel to th...

Cannot download the attachment in Secure Mail

Users cannot download the attachment in Secure Mail, and we see the below errors: "The size exceeds the limit set by your Organization's security policies."...

proxy server seeing Android traffic from client IP

Your proxy server may see the client IP from Android devices where as iOS it sees and expects the subnet IP of the NS. How to filter traffic using the Subnet IP address for Android Devices?...

SCOM "StoreFront Store Service Probe Status" failure on credentials

When the store is configured with “Trusted Domains Only”, alerts may be logged in the Operation manager console stating that the Storefront Store Service Probe failed withError description: "Could not get credentials" More information can be obtain about the authentication attempt by enabling...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

Support Process for Thin Client Related Issues

Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...

How to Configure Microsoft MAK Volume Licensing in Provisioning Services Server

Configuration MAK in Provisioning Services Server...

Connection error XMM: An error occurred while getting provider information from the database.

XenMobile Mail Manager XMM when clicking "Test Connectivity" getting "Connection error: An error occurred while getting provider information from the database. This can be caused by Entity Framework using an incorrect connection string. Check the inner exceptions for details and ensure that the...

XenMobile Server - Identity credential certificates (PKI) do not auto renew

MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...

Error: "Stop error code 0x00000074 (BAD_SYSTEM_CONFIG_INFO)" When You Start VDI

The following error is displayed when you boot VDI: Stop error code 0x00000074 BADSYSTEMCONFIGINFO...

Secure Mail gives Error: Your organization does not allow this action

- User opens Secure Mail. - Goes into Contacts. - Selects a contact. - Clicks on the contacts phone number. - Sees error message:Your organization does not allow this action...

Device limit per user in Enrollment profiles not being enforced MAM-only

Enrollment Profiles has been set to limit users on specific delivery groups to a certain limit of devices per user. This should prevent people on these delivery groups from activating Secure Hub on more devices than they are allowed. However, these users are still able to activate with no...

How to Collect Client VPN Logs for ADC Gateway

This article describes how to collect VPN logs from Windows XP, Windows Vista, Windows 7, or Windows 8 for analyzing VPN connection issues in an ADC Gateway appliance...

AD Account Lockouts Due to Citrix PIN Password Caching

After a password change at ActiveDirectory, users are seeing account lockouts. XenMobile was causing these lockouts as the password cached with Citrix PIN was not updated...

Nutanix AHV Connector Failure: "The storage container cannot be accessed"

Error observed: "The storage container cannot be accessed. Please check that the ELM is in the container's 'white list'. " When deploying App Layering to Nutanix AHV: You are able to "check credentials" on the left half of the connector screen successfully, and it enumerate templates and storage...

udadmin -list -a shows incorrect license usage for XenMobile

After migrating from MDM 9 to XMS 10.X used license count exceeds the expected limit If you verify the checked out licenses using udadmin tool in licensing server, you should see licenses checked out for Used ID's as well as usernames. Steps: 1. Run the following command to change the directory t...

XenMobile - Deleting the certificate entries directly from the Database

When we try to upload new SSL cert on XenMobile server, it fails to to get uploadedbecause of present certificate and because of data corruption in DB we are not able to delete the old certificate from the XenMobile console so insuch scenario, we need to delete it from database directly. Note :...

Error "cannot connect to the hypervisor at <ADDRESS> object reference not set to an instance of an object" when running the XDSW

When running the XenDesktop Setup Wizard, it can fail with the following error: "cannot connect to the hypervisor at object reference not set to an instance of an object" The string will contain the actual URL of the vCenter Server. This issue can appear when the DataCenter name on the VMWare sid...

Citrix Director: Could Not Establish Trust Relationship for the SSL/TLS Secure Channel

Director display in License Server section Cannot retrieve the data. Data source unresponsive due to configuration error. View Director server event logs for further information Checking the Application event log on the server running Director- logs event error: Event ID: 8 Level: Error Source:...

Custom 32-Bit Cursors appear with a black box around them using HDX 3D Pro VDA 7.15

When connecting to an HDX3D Pro Desktop VDA from a client running Receiver for Linux, a black box will surround some custom cursors in applications such as Adobe Photoshop...

How to Enable DEBUG Log Level for Syslog Events on the NetScaler

This article describes how to enable DEBUG log level for syslog events on NetScaler. Enabling DEBUG level for syslog events will allow you to capture detailed information that is not recorded by default in ns.log file. Note : The DEBUG level should be disabled upon finishing the troubleshooting...

DEP devices fail to complete enrollment using basic enrollment

XenMobile basic enrollments do not occur when the device is initially activated. The administrator is required to perform an over the air or Secure Hub enrollment. This issue can be identified because "Device Enrollment Program User" a local user" "Device Enrollment Program Group" a local group...

How to View NetScaler SNMP Trap Details on NetScaler MAS

This article describes how to view NetScaler SNMP trap details on NetScaler MAS. Background You can now view the details of each SNMP trap received from NetScaler instances to the NetScaler MAS server on the Event Settings page. For a specific trap received from your instance, you can view the...

StoreFront - Keywords Usage

A spaceis allowed between Keywords when multiple keywords are used. Syntax- KEYWORDS:keyword2 keyword2 Example: KEYWORDS: Auto Featured The default syntax is to have one space between two keywords. However, multiple spaces also do not produce any error. There can be spaces after the colon : in th...

Load Balancing and Monitoring Delivery Controllers

This article describes how to load balance the Desktop Delivery Controller via NetScaler with Connection Leasing...

Troubleshooting Retries on Provisioned Virtual Machines

What is a retry? When a target streams a vDisk image, it does so by requesting blocks of data from the PVS server, which in turn replies with the requested data. This data is broken down into several packets called fragments. A retry occurs when a target device requests data from the PVS server a...

PVS Targets run chkdsk at boot after the vDisk has been modified

Every time a PVS Target Device boots from a vDisk the OS detects problems with the C: drive and automatically runs chkdsk at boot time. The following events might be observed in the Windows Event Log on the Target Device: Event Log: System Source: Ntfs Event ID: 55 Text: The file system structure...

Concepts, Entities and Terms used for nFactor Authentication through NetScaler

nFactor is the new authentication framework that allows an administrator to configure complex authentication scenarios fairly easily. It reduces complexity through flexible and extensible authentication mechanisms. This framework could be used to configure all the authentication modes currently...

How to Remove Crash Dump File From a Crashed Red Marked Xenserver.

Remove Crash Dump File From a Crashed Xenserver...

Deploying enterprise MDX enabled apps from App Store via Volume Purchase

The CEM/XenMobile Server is currently optimized for Volume Purchase distribution of Public App Store apps that are not MDX enabled. While it is possible to distribute MDX enabled apps from App Store via volume purchase, some considerations must be taken into account for optimal performance. This...

Draft folder emails in Secure Mail not syncing with MS Exchange

Q: Users create drafts in Secure Mail but these do not get synced with MS Exchange and viewable in Outlook. After repeated attempts to amend and save the draft it will be deleted without being synced. Is this a known issue? A: With regard to the Draft folder syncing, there are limitation regardin...

How to add a Server Certificate as full chain certificate || XenMobile Server Certificate 10.x

This article shows how a server certificate is made as a full chain certificate...

Setting up a default landing page on Storefront 3.0

The article describes how to set the default landing page in x1 / 3.x on StoreFront 3.x...

"This account is already added. Please select another account to add or press the close button" While Configuring Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When customer attempts to configure Receiver, he gets an error: This account is already added. Pleas...

Citrix Store Front 3.0 Unable to save favourites in Store Front

Unable to save favourites in Store Front...

Storefront 2.6 - users get "Error 500".

users get "Error 500"...

Changing DNS information on App layering ELM - 4.x

In 4.x, you cannot update DNS information by going to port 5480 MAIPAddress:5480...

How does LDAP Authentication work with Kerberos Impersonation SSO?

How does LDAP Authentication work with Single Sign On using Kerberos Impersonation? In this flow, the NetScaler is contacting the KDC after we purged tickets on the KDC, and the NetScaler. 1. The client makes a GET request to the LB vServer. 2. The LB vServer is configured with Form-based...

How to configure ADFS Claim Rules and StoreFront with Multiple Domains

How to configure ADFS Claim Rules and StoreFront with multiple domains?...

License server 11.14 - Cannot display the webpage

Unable to open Citrix License Administration console in IE brower, you will get below error: "The Page cannot be displayed"...