How to Sysprep PVS images before they are streamed to Target Devices.

Question: Is needed to run Sysprep on PVS images? Answer: It is not needed to run Sysprep on PVS/MCS images since they both have their own version/method built-in to Sysprep the images. Also, it is not recommended to run Sysprep on PVS or MCS machines since it is not needed...

CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

Description of Problem A heap overflow vulnerability has been identified in Citrix NetScaler Gateway that could allow a remote, authenticated user to execute arbitrary commands on the NetScaler Gateway appliance as a root user. The following vulnerability has been addressed: CVE-2017-7219 High:...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

Enhanced SSO session may experience problem accessing network shares or group policy updates

You have configured configured Enhanced SSO for Citrix workspace app and you are either on Windows 10 or Windows 11 endpoints. When you launch a desktop session and try to access the domain shares you may encounter the below prompt for credentials - You can also repoduce this issue by accessing t...

"An Account is not Configured" Displayed On Startup when AllowAddStore is set to N in Registry

Citrix Workspace app for Windows is being configured via command line arguments and then launched programmatically The following error is displayed: An Account is not Configured. Please contact your administrator...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 3

Package name: xms10.16.0.10318.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: August 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this a...

Netscaler OpenSSH CVEs

Netscaler OpenSSH CVEs CVE-2023-48795 CVE-2023-51384 CVE-2023-51385...

Disable Restart Button While Desktops are Restarting

This article describes how to configure the StoreFront to ignore clicks on “Restart” while desktop is powering off and while it is powering on again. Background When the user’s desktop is restarting, there might be issues if they repeatedly click on the desktop...

Hotfix Rollup Pack 1 for XenApp 5 2008 - Features and Enhancements List

This article describes Hotfix Rollup Pack 1 for Citrix XenApp 5 for Microsoft Windows Server 2008. Hotfix Rollup Pack 1 is cumulative - it can be installed on top of the XenApp 5 for Windows Server 2008 base product, on top of the first Feature Pack, Feature Pack 2, or Feature Pack 3. HRP01...

Profile Management Configuration Checking Tool - UPMConfigCheck

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Profile Management Configuration Check Tool UPMConfigCheck Created Date: February 27, 2012 Updated Date: August 23, 2023 Description...

How to reset Receiver or Citrix Workspace App using the command line

Sometimes it may needto reset Citrix Receiver or Citrix Workspace App to restore the default settings.This article explains how to reset Receiver using the command line...

How to update SAML certificate settings for Sharefile SSO using XenMobile

You can configure XenMobile and ShareFile to use Security Assertion Markup Language SAML to provide single sign-on SSO access to ShareFile mobile apps. For this you need to configure the SAML certificate...

How Do I Load Balance FTPS Servers on a NetScaler ADC

This article describes how to load balance FTPS servers on a NetScaler ADC...

Unable to access Worx Store and getting errors "could not load store"

On iOS Device while accessing store "cannot complete your request" error message. On Android while accessing store getting error message while accessing store "could not load store" SecureHub Logs "2017-02-02T16:09:51.998+0400","SecureHub","ERROR...

How to Change Management IP and Default Gateway Using NetScaler CLI

This article describes how to change management IP address and add new default gateway address using NetScaler CLI. Changing the Default Gateway of the NetScaler appliance can only be done via the CLI. The NetScaler appliance can only have 1 Default Gateway defined at a time...

XenServer Security Update for Multiple Issues

Severity :High Description of Problem Several issueshave beenidentifiedthat affect XenServer 8.4 and XenServer 9. Collectively, these issues may allowa malicious privileged userin a guest VM to compromise or crash the host. Theseissueshavethe following identifiers: CVE-2026-42492XenServer 9 only...

NetScaler Gateway-13.1-Launching ICA session got stuck with client authentication enabled

You may stuck at the ICA session launching process when you enable client authentication in Gateway virtual server...

How to create a PVS master target device on Hyper-V for Windows 11

The objective here is to creating a PVS master target device VM on Hyper-V, which can be used for both installing Windows 11 and also booting via PVS. Windows 11 has installation requirements which need both Secure boot and TPM available. Hyper-V VM options which are relevant here: Secure boot...

LACP Bonding in XenServer - Configuration and Troubleshooting

In XenServer 6.1, LACP link aggregation was added to existing bonding modes for vSwitch. This article describes dynamic link aggregation LACP between a XenServer host and a switch, giving a high-level overview of the 802.3ad protocol, explaining configuration and diagnosis tools. Background LACP...

Citrix uberAgent Security Bulletin for CVE-2024-6677

Description of Problem A vulnerability has been discovered in Citrix uberAgent, which, if exploited, may result in the escalation of privileges of the attacker. Affected Versions: The following supported versions of Citrix uberAgent are affected by the vulnerability: Citrix uberAgent before 7.2.1...

DDC 2203 - How to manually remove the stale DDC from Database

Old removed DDC is listed under Zones alongside the two current DDCs. "Get-BrokerController" and database table 'chbConfig.Controllers' shows working DDCs...

CVE-2019-12044 - Buffer Overflow Vulnerability in Citrix ADC and Citrix NetScaler Gateway

Description of Problem A buffer overflow vulnerability has been identified in Citrix ADC and Citrix NetScaler Gateway which could possibly result in a denial-of-service in a specific configuration. This vulnerability has been assigned the following CVE number: • CVE-2019-12044: Buffer overflow...

CVE-2018-18571 - Authentication Bypass vulnerability in XenMobile Server

Description of Problem A vulnerability has been identified in Citrix XenMobile Server that could permit an attacker to impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device. The vulnerability has been assigned the following CVE number: • CVE-2018-18571:...

CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

Unable to Delete Resources: There is currently an active background action

When attempting to delete hosting infrastructure either a Connection or Resources fromCitrix Studio, the following message appears: "Resources "Local storage" cannot be deleted because they are being used by the following Machine Catalogs and/or background actions:..." Background To avoid...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368

Severity - Critical Description of Problem Vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler ADC and NetScaler Gateway are...

Citrix Workspace app for Windows Security Bulletin CVE-2025-4879

Severity - High Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspace app for Windows...

ADC-13.1-Rate limit gets hit unexpectedly when a rate limit identifier is used in different policies

When we invoke one rate limit identifier from different polices, the rate limit gets hit unexpectedly. The example config is as below: add stream selector IPURLSelector HTTP.REQ.URL CLIENT.IP.SRCadd ns limitIdentifier LIMITIPURL -threshold 3 -selectorName IPURLSelectoradd audit messageaction...

Citrix Licensing - Cannot connect to the license server with error id "XDDS:796F2703"

Citrix Studio cannot connect to the License Server 11.17.2 build 51000. It reports "certificate is not trusted or valid" with Error Id: XDDS:796F2703...

Director: Dashboard not showing correct session count data

Director dashboard showing wrong data Session count in Studio and Director Dashboard is incorrect...

Enabling WPF Rendering for Citrix HDX on Multi-Session VDAs

Overview Windows Presentation Foundation WPF applications can leverage GPU acceleration in Citrix Virtual Apps and Desktops CVAD environments running Windows Multi-session OS. By enabling WPF rendering on the server’s GPU, this reduces CPU load and improves graphics performance for WPF...

CVAD Workspace App (Windows, MAC, Linux)

Introduction This article is a summary of the top support articles related to CVAD Workspace App Windows, MAC, Linux Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points that will be addressed in detail in the linked content...

Unable to Connect the Secure Web with the Error "Cannot open page"

Unable to open the internal pages from Secure Web. Error"Cannot open page"is displayed...

Citrix Cloud - Setting admin timeouts in Citrix Cloud portal

Requirement to know what the current timeout limit is when using Citrix Cloud and if it is possible to change the limit with regards to a Cloud Studio Admin session. Need to be able to force the user to have to login again after a certain amount of time...

Apache vulnerability CVE-2006-20001 CVE-2022-36760  CVE-2022-37436 in License Server version 11.17.2

Apache/2.4.54 contains vulnerabilities and is used in the Citrix License Server version 11.17.2 build 41000. Security scans may raise the following CVEs: CVE-2006-20001 CVE-2022-36760 CVE-2022-37436...

Citrix License Server susceptibility to certain Apache CVEs

Citrix License Server may be flagged by vulnerability scanners as potentially impacted byCVE-2006-20001, CVE-2022-36760, and/or CVE-2022-37436. This is because Citrix License Server uses Apache version 2.4.54 inLicense Server version 11.17.2 build 42000 and older versions of Apache in older build...

How to configure Microsoft Edge in an App Layering Environment

App Layering 2409 As of release 2409 of application layering Microsoft Edge is now only updated and managed from the OS layer revisions. You must keep Edge up to date when you are updating versions of Windows in the OS layer. Also, if customers had previously deployed Edge in an application layer...

CVE-2014-1910 - SSL Certificate Validation Vulnerability in the Citrix ShareFile Mobile Application for Android and the Citrix ShareFile Mobile for Tablets Application for Android

Description of Problem A vulnerability has been identified in the Citrix ShareFile Mobile application for Android and the Citrix ShareFile Mobile for Tablets application for Android that could result in SSL certificates being incorrectly validated. This vulnerability has been assigned the followi...

CVE-2017-5933 - Vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway GCM nonce generation

Description of Problem A flaw in NetScaler ADC and Gateway causes GCM nonces to be randomly generated, making it marginally easier for remote attackers to obtain the GCM authentication key and spoof data within a session. The following vulnerability has been addressed: CVE-2017-5933: Vulnerabilit...

Citrix policies filtered by Client IP address not applying after 2411

Citrix policies are applied using as filter IP address of the client The IP addresses defined are the ones of the endpoints who has Citrix Workspace App installed The policy worked correctly before upgrading VDA to version 2411 However, when the VDA is upgraded to version 2411 or newer, the...

Unable to run WSL2 on the W11 VDI machine

When customers attempt to install the WSL 2 Ubuntu distribution on Windows 11 VDIs , they encounter the following message: Installing, this may take a few minutes. Error observedWslRegisterDistribution failed with error: 0xe000020b Error: 0xe000020b null...

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information .

“Cannot Retrieve Data” on Citrix Director Dashboard error. Unable to see session information of User Connection Failures, Failed Single-session OS Machines, Failed Multi-session OS Machines data is missing. The following exception can be seen in CDF traces. Error:...

Probe Agent can not communicate with Citrix Gateway with port 5000

Error "Failed to authenticate Citrix Gateway credentials" raises if non 443 port is used in the FQDN of Citrix Gateway URL...

After upgrade to VDA 2308, users getting message "You'll need a new app to open this ctxgeoloc link"

After upgrading to VDA 2308, when a user logs on, they receive a windows message stating: "You'll need a new app to open this ctxgeoloc link"...

PVS Configuration Wizard Crashes applying configuration

The PVS Configuration Wizard crashes and exits when applying configuration settings at the end of the wizard. This is visible in PVS Server application event logs, event IDs 1026 and 1000. Faulting application name ConfigWizard.exe...

Migrate Citrix Virtual Apps and Desktop databases to a new SQL server

Please follow these steps. 1.Close all instances of Citrix studio. Any configuration changes even through powershell to be stopped while following the stepsYou can power down DDCs to be extra cautious Take VM snapshot or take backup of all Delivery Controllers. 2. Take full backup of Site, Monito...

Get-BrokerController : Insufficient administrative privilege when ran via Remote POSH SDK

Issue using Get-BrokerController command when using remote POSH SDK with Citrix Cloud. Error : Insufficient administrative privilege...

Citrix PVS soap server service does not start and crashes after installing Microsoft January 2022 Updates (E.g. KB5008877 or KB5009546)

Since installing Microsoft January 2022 Updates like KB5009546 or KB5008877 the Citrix PVS soap server service doesn't start anymore. When trying to start this service it crashes right away. While this happens the Citrix PVS API service also stops working. Soapserver.exe crashes Event 1000 .net...

the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys

The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...