Using a SafeNet Network HSM to protect the Citrix FAS Authorization (RA) Key

Introduction Citrix Federated Authentication Servers FAS are security-critical and should be treated like Domain Controllers. Protecting the FAS server’s Authorization / Registration Authority RA key is one of the measures that help protect FAS server integrity. We published an official eDocs pag...

Write Cache to Hard disk fails when BDM Partition is used

Write cache set to RAM with Failover to hard drive fails and is writing to the PVS server. BDM partition used to boot...

Receiver install error "The requested operation has failed"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Unable to install Citrix receiver on a new computer. Error "The requested operation has failed"or "A...

Alt+Tab Does Not Pass Through the VDI in ICA Session

When pressing Alt+Tab while on a VDI in ICA session Full Screen, the apps show up from the endpoint and not from the VDI...

XenServer Fails to Boot with Boot from SAN Root Disk Multipathing:"Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)"

The XenServer host has recently been updated with a hotfix that updates the kernel. After patching the XenServer host is in a boot loop. During startup there is a message"Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block0,0" followed by a call trace: The initrd file size i...

PVS 7.6: Target device not responding to boot command from PVS Console

PVS 7.6 Target device not responding to boot command from PVS Console...

Unable to Reset Citrix PIN without re-enrolling with Certificate Based Authentication enabled

Question: With Certificate Based Authentication configured as the only authentication method on the NetScaler Gateway, when attempting to reset the Citrix PIN in Secure Hub, the user is required to re-enroll the device. Answer: With Certificate Based Authentication as the only authentication...

How to Manually Create Hyper-V GEN2 Provisioning Services Target Devices

This article describes how to manually configure Hyper-V GEN2 virtual machines for usage as target devices on Provisioning Services PVS 7.8 through to PVS 1912. Note: Since product updates in PVS 2112, the steps below are not required. So these steps are not required on the latest PVS current...

How to Migrate PVS created machines to another host

To be able to power manage machine post migration. The machines in this case should be created using PVS and the catalog type should be Streamed...

Provisioning Services 7.6 :vDisk Imaging using P2PVS

PVS 7.6 : Assistance with Imaging process...

How to Enable Debug Logging on Workspace Environment Management Agent manually, if no connectivity to Broker exists

The Workstation Environment Management Agent and related service feature an optional debug level of logging.This additional level of logging is significantly more verbose than the standard logging levels and is disabled by default and only enabled to troubleshoot specific issues. Under normal...

Receiver Crash: A Fatal Error Cccurred. Would You Like to Restart Citrix Receiver?

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Receiver gives a fatal error intermittently to all users. Trying to uninstall/install Receiver produces...

Print screen fails in ICA/HDX session

Print screen fails in ICA/HDX session...

After upgrade to Provisioning Server 7.6 a vdisk does not stream to all PVS servers; Load balancing not working.

After upgrade to Provisioning Server 7.6 a vdisk does not stream to all PVS servers. Load balancing not is working...

Error "Cannot Connect to Server" when configuring receiver externally

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While configuring the receiver; We may get the error message still beacons are perfect to connect...

Error: "One or more intermediate in the chain are missing" When Updating Expired Certificate on StoreFront

The following error is displayed when updating an expired certificate on StoreFront: "One or more intermediate in the chain are missing"...

Error: "FullAdmin or MachineAdmin Permission Required" in XenDesktop Setup Wizard

XenDesktop setup wizard fails with permissions error. "XenDesktop FullAdmin or MachineAdmin permission required"...

Error: You Have not Chosen to Trust "Certificate Authority" from MAC Devices

SSL Trust issue on Mac...

Cloud Bridge: Upgrading Virtual WAN MCN from 8.1 to 9.0

An error occurred while transfer software to change management system. ret =-1, file = /tmp/CB-VW-PKG-9.0.1.31.UPG...

Citrix Virtual Apps and Desktops - Black or Blue Screen connecting to Published resource

Users may notice that when launching a published application or a published desktop, the session gets stuck on a black screen or a blue screen...

How to Perform a Backup of License File of Legacy CloudBridge Platforms and VPX Appliances

This article describes how to perform a backup of the license file of legacy CloudBridge platforms and VPX appliances...

Error: "Your sign on has expired. Please sign on again to continue." When Accessing XenMobile Store

Error message on SecureHub while accessing WorxStore "Your sign on has expired. Please sign on again to continue.". Screenshot below. Note : This is affecting both iOS and Android users. Error Message in SecureHub Logs "Secure Hub","WARNING 3","AuthControllerImpl:getKeyManager is going to return...

Full Control Permissions Granted to All Users in Profile Management

The Full Control permission has been granted to each user. For example, when a new user is created in Active Directory and logs on for the first time, a folder is created for that user in the user store. However, all users have permission to access that folder and perform operations on it...

Secure Mail Error: "Access to company is not currently available"

Worx/Secure Mail Error: "Access to your company is not currently available" Errors found in the client logs: AGTunnel fails to start when attempting to proxy traffic from the NSG " 2016-11-14T11:22:11.535+0000 ",AGTunneler ,WARNING 3,"Failed to read in AGSOCKSClient, err = -8000...

Some Workspace Environment Management security settings are not getting applied

Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...

Secure Mail - Error: Access to your company network is not available

Secure Mail Client when entering the Mail Server FQDN for first time sync returns the Error "Access to your company network is not available"...

Java Properties not Saved to the User Profile

Under certain circumstances Java properties might not save to the User Store on Logoff...

Android devices cannot launch apps after updating VDA agent to version 7.11

After upgrading VDA to v7.11; Receiver for Android users cannot launch published Apps or Desktops. The following error message is observed on the Android devices: "The common name on the ID certificate is not what was expected" In addition, the receiver logs shall contain similar stack trace: 09-...

Microsoft Excel 2010 crashes when Profile Management is enabled

When a user launches Microsoft Excel 2010 when Profile Management is enabled, Excel crashes and the application closes...

XenServer Host become responsive In Reboot/Shutdown

XenServer hangs on reboot with following message in serial logs Sending all processes the TERM signal... Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time Turning off swap: Unmounting pipe file systems: Unmounting file systems: Please stand by whil...

SF Web Page inaccessible after changing Base URL

- Once the SF is configured, there might be a need to change the Base URL. However, the SF page becomes inaccessible and throws below error - You might also get "Cannot complete your request" on this page...

XenMobile Duplicate MAM ID issue

Deployments of XenMobile 10.x may encounter an issue where Enterprise enrolled devices are not correctly associated with the appropriate MAM ID for the device. This results in issues where devices end up in a state of ‘MDM no MAM’ or ‘Cannot install applications, despite seeing them listed in...

pvcreate --restorefile fails "/dev/sdx device not found or ignored by filtering" in XenServer

When trying to restore the lvm metadata on a Physical volume from backup using the command pvcreate --restorefile, it is failing with the error /dev/sdx device not found...

How to Verify Active Users or ICA Users on Citrix Gateway

This article describes how to verify Active Users or ICA User on Citrix Gateway...

XenMotion Compatibility Requirements

When migrating a VM with XenMotion or Storage XenMotion, the new VM host must meet the followingcompatibility requirements in order for the migration to proceed: • XenServer Tools must be installed on each VM that you wish to migrate. • The target host must have the same or a more recent version ...

Error when trying to disable HA on XenServer

When trying to disable HA for the pool, we are getting the following error xe pool-ha-disableThe uuid you supplied was invalid.type: VDIuuid: 87ca6afc-b0ad-4e54-bb5e-313dddd77ea2...

How to check the bond status with OpenVswitch

When the bond status are flapping, it might be necessary to check what the kernel sees. This article describes some useful commands to check Bond status around OVS...

Measure storage performance on XenServer using dd ?

dd is a native linux command also available on XenServer that can be used to measure the performance of a block device like /dev/sda at a block level. We can use this command to troubleshoot storage performance issues within the Host as well as the guest while clubbing it with other tools like...

All paths in multipath are not visible in XenServer after a reboot

After a XenServer Host reboot, some of the paths are not visible when typing the command multipath -ll...

Error- "cannot contact store" from receiver for internal users

Users are not able to connect to Storefront store internally via Citrix Receiver. However, users are able to access the store externally via the Netscaler...

Error: "Untrusted Enterprise Developer" When Launching Secure Apps on iOS

Users who have upgraded their Apple devices to iOS 9 are unable to launch Secure Apps. The apps appear to be greyed out. When the user clicks on Secure Apps, the following error message is displayed: “Untrusted Enterprise Developer” Users with older iOS versions are prompted to trust the...

Error: "SSL Error 61: You have not chosen to trust 'Certificate Authority'..." on Receiver for Linux

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information For Firefox certificate...

XenServer Syslog Rotation and Tuning

Disk space on XenServer's root partition is almost at or is at capacity perdf -h There are numerous compressed "gz" files in /var/log/ from Syslog rotation...

Unable to add account in Receiver using SHA512 certificate

Unable to add account in Receiver using SHA512 certificate...

Troubleshooting Authentication Issue Through Netscaler when Using LDAP and RSA

Authentication fails when using Dual auth LDAP+RSA on NetScaler...

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...

How to configure Receiver to a Store that is not advertised

to demonstrate how to configure / connect to a Store when such store is not advertised...

Storefront - Enable Return to Last Folder

Enable return to last folder...

Receiver for windows- Disable Remember password option

Receiver for windows 4.4 - Disable Remember password option...

Could not sign CSR Caused by: java.net.SocketTimeoutException: connect timed out

After configuring Client Certificate Authentication for XMS but you do not see a Client Certificate Request on the Issuing Server 2016-06-27T13:01:11.409+0000 | | ERROR | http-nio-10080-exec-1 | EWSession | Exception on certificate issuer com.zenprise.zdm.pki.spi.IssuingServiceException: Could no...