XenServer Syslog Rotation and Tuning

Disk space on XenServer's root partition is almost at or is at capacity perdf -h There are numerous compressed "gz" files in /var/log/ from Syslog rotation...

Citrix Receiver Kiosk mode

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. StoreFront 3.6 Question: Often the customers who are in hospital environment have the question that ...

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...

XenServer 6.5 - VM IP configuration switches back to DHCP

XenServer 6.5 - VM IP configuration switches back to DHCP...

Storefront - Enable Return to Last Folder

Enable return to last folder...

NetScaler StoreFront Monitor Probe Fails on StoreFront 3.5

When we bind the StoreFront monitor to our StoreFront 3.5 servers, every hour there is an entry on the dashboard and system log that there is a failure - probe failed...

Citrix Print Manager Service or Microsoft Print Spooler Service Crashes or Hangs

The Citrix Print Manager service cpsvc.exe or Microsoft Print Spooler service spoolsv.exe crashes or hangs. Printers are not auto-created, the default printer is not set correctly in the session, print jobs fail to spool, and so on...

Assigned on First Use (AoFU) desktops are not displayed when filtered using Keywords in Storefront

Assigned on First Use AoFU desktops are not displayed when filtered using Keywords in Storefront. Pooled Desktops and pre-assigned private desktops are correctly filtered as expected...

Storefront upgrade failing

-In the event viewer windows application logs we get "\CitrixStoreFront-x64.msi failed with error code 1603" -And in CitrixDeliveryServices logs we get " error in retrieving synchronization information " -Checked logs on SF and see that it was unable to stop "Citrix Subscription Store" service...

Receiver for windows- Disable Remember password option

Receiver for windows 4.4 - Disable Remember password option...

Could not sign CSR Caused by: java.io.IOException: Could not obtain certificate (template=XenmobileTest). Reason: The format of the specified domain name is invalid. 0x800704bc (WIN32: 1212)

After configuring Client Certificate Authentication for XMS but you do not see an issued certificate on the Issuing Server 2016-08-18T12:49:32.19+0200 | | ERROR | http-nio-10443-exec-8 | EWSession | Exception on certificate issuer com.zenprise.zdm.pki.spi.IssuingServiceException: Could not sign C...

Error: "Cannot complete your request" while accessing on premise XenApp 7.9 Resources by a user from Azure Active Directory.

When users from Azure domain are trying to access resources published via XenApp 7.9 on your premise, they receive this error: "Cannot complete your request". On looking at the Storefront debug logs, you see that storefront does a Callback: 00001779 3:27:23 AM 8248 Authenticate Perform callback A...

Unable to propagate the changes and the configuration replication service crashes at the server.

Under certain circumstances, StoreFront may be unable to propagate the changes between servers and the configuration replication service may experience a crash...

How to Prevent Secure Hub Uninstallation on Android and iOS Devices

This article describes different methods torestrict the Secure Hubapp removal from the enrolled device...

Failed to convert vdisk with error message "BNIStack failed, network stack could not be initialized"

Target device unable to startup with error "BNIStack failed, network stack could not be initialized"...

Unable to Propagate Changes After Upgrade from StoreFront 3.5 to 3.6

Unable to propagate changes after upgrade from StoreFront 3.5 to 3.6. Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Date: 6/27/2016 9:39:26 AM Event ID: 19 Task Category: 2801 Level: Error Keywords: Classic User: N/A Computer: XXXXX.XXXXX.XXXXX Description:...

Provisioning Services: Support Statement for Multiple PVS Farms pointing to different Databases in one Subnet

Question: Can we boot targets using PXE boot in Subnet where we have 2 PVSServer in 2 different farms pointing to different database? Answer: This is not supported because when targets boot using PXE services, it broadcasts a packet and if it contacts a PVS Server which does not have entry for...

Error: "Failed, curl response = Couldn't connect to server. Could not connect to database"

After rebooting the XenMobile Server or configuring database, we see the error on CLI: "Failed, curl response = couldn't connect to server. Could not connect to database"...

Error: "Cannot Start App. Please contact your help desk." When Launching App Through Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when launching app through Receiver: Cannot Start App. Please conta...

Error: "Profile Installation Failed" When Enrolling Apple DEP Devices

Apple DEP device fails to enroll with the following error: Profile Installation Failed XenMobile logs show "Enrollment authentication failed: User lacks permission to enroll"...

How to Find dom-id or Domain ID of Virtual Machines Running On XenServer

Note : Domain ID or domid is only for Running VMs or Booting VMs. A VM which is powered off will not have a domid of its own Run the following command to obtain the domain ID of a particular VM running on XenServer. xllist | grep -i "VMNAME" OR listdomains | grep -i VMUUID In the above case , the...

Storefront 3.5 - Error: There are no apps or desktops available for you at this time

Storefront 3.5 - Unable to get any desktop show up using the URL of storefront...

"not a PRIVILEGE users" while accessing internal web link through XenMobile

On XenMobile 10 internal websites are published as web link . Proxy is configured in the environment and traffic policies are added on the NetScaler Gateway . Customer wants to send external traffic to go through proxy and skip the internal websites from going through the same. When users are...

Configuring XenMobile for Certificate and Security Token Authentication

In highly secure environments where usage of LDAP credentials outside of an organization in public or insecure networks is considered a prime security threat for the organization, two-factor authentication using a client certificate and a security token is an option. You can configure NetScaler s...

StoreFront 3.0: MMC snap in error when attempting to Set Unified Experience as Default

Storefront 3.0 gives an MMC snap in error when attempting to Set Unified Experience as Default...

How to Install a License on NetScaler VPX on Microsoft Azure During First Log on

This article describes how to install a license on NetScaler VPX on Microsoft Azure during first logon. Requirements Access to the NetScaler VPX on Microsoft Azure management console...

Error: "This access control list is not in canonical form and therefore cannot be modified."

Error: "This access control list is not in canonical form and therefore cannot be modified."...

Netscaler Instances on SDX show less memory than allocated from within the SVM Console

Question: When I allocate RAM to a Netscaler instance on SDX, the Netscaler reports considerably less memory than is allocated. For instance, if I allocate 16gb, the Netscaler instance shows only 12gb allocated. Answer: This is an expected behavior. When NetScaler is started and is initializing t...

Troubleshooting Checklist: In Secure Mail, a "Cannot authenticate to the server <FQDN> because the certificate is not valid” error appears

Do the following: Ensure that the certificate chain is valid and that the configuration is complete on the Exchange Server. Try to connect the native email client with the same Exchange Server. If it works as expected, the issue is with client certificate configuration on the XenMobile server Onl...

Troubleshooting Checklist: In the ShareFile app, Secure Mail, or Secure Notes, the following error appears: "Your connection is unavailable. Only offline files can be accessed."

Do the following: Collect client logs and then open Sharefiledebuglog.txt. Check the logs, if you see the following: The operation couldn’t be completed. Cannot initiate login API call. Is the device connected to the Internet? Added user to DB, success: no If present, the MDX policy related to th...

Troubleshooting Checklist: Users Cannot Browse Internal Websites in Secure Web

Do the following: Collect Secure Web client logs. If you see the following message in the logs, add valid DNS SUFFIXES for the corresponding internal domains on NetScaler: AG policy: Not Intercepting Check if Split tunnel is On or Off on the Netscaler Gateway under session policies: If On - Make...

Troubleshooting Checklist: Cannot enroll and authenticate a device using Secure Hub

If a device cannot enroll and authenticate using Secure Hub, ask the following questions: Is the user synced to XenMobile? Are there multiple domains managed? For details on multi-domain configuration in MAM+MDM mode, see this Citrix blog post. Is the Global Catalog port managed? From which domai...

Troubleshooting Checklist: Cannot send emails using Secure Mail

Do the following: Collect Secure Mail logs from the device. If you see HTTP 413 in the logs, there are client certificate errors. Run the Secure Mail Test Application. Collect Exchange Server logs. For details, see the Microsoft documentation. Additional Resources: FullXenMobile Deployment Handbo...

Troubleshooting Checklist: In Secure Mail, a “Verify your Single Sign-On credentials” error appears

Do the following: 1. Collect the Secure Mail application logs. 2. If you see the following message in the client logs, set clientCertificateMappingAuth to enabled in IIS on the Exchange Server. For more information, refer to the FAQ section of the Secure Mail Test Application. AUTH Request...

Users experience undesirable behaviour like profile corruption, data loss with Profile Management

Users may Experience Profile corruption, slow logons, data loss or unexpected behaviour if using profiles from differing Windows version as Roaming or UPM profiles...

Restrict StoreFront to Only Use TLS 1.1 and Above

To restrict StoreFront to only use TLS 1.1 and above, complete the server OS registry modification as mention in the following Microsoft TechNet article - https://technet.microsoft.com/en-us/library/dn786418.aspxBKMKSchannelTRTLS11...

Where to Locate and Download Citrix Product Software

This article provides instructions on where to locate and download product software. Requirements To acquire software for products purchased you must log in to your Citrix My Account with a username and password associated to the account that the product resides in. Background Most products requi...

How To perform Emergency Network Reset on Citrix Hypervisor/XenServer

To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...

How To: Configure UPM to save password in Internet Explorer

Users are unable to save passwords in Internet Explorer if their profile is managed by UPM...

Unable to Log on to XenMobile Admin Console Using Administrator Account

Not able to log on to XenMobile Server web console with administrator account. The following errors are noticed in the logs: 2016-04-06T09:31:08.358+0800 | EDC68337B8501EEC | WARN | http-nio-14443-exec-9 | ZDMAuthenticationProvider | Could not find administrator 2016-04-06T09:31:08.359+0800 |...

Is it possible to optimize SSH or SFTP connections?

QUESTION: Is it possible to optimize SSH or SFTP connections? ANSWER: SSH and SFTP are encrypted traffic: SSH one-time encrypted data stream and SFTP goes over the SSH port CloudBridge can only optimize with flow-control-only but won't be able to compress it...

How to suppress the Add Account window in Citrix Receiver 4.4 or earlier for Windows

This article describes how to suppress the Add Account window in Citrix Receiver for Windows. Note : This article is applicable for Receiver 4.4and earlier. For Receiver for Windows 4.4.1000,Receiver 4.5and later, refer to CTX135438 -How to Suppress the Add Account Window in Citrix Receiver for...

Incorrect Auto launch desktop status is shown in StoreFront Console

The value ofAuto launch desktop , which is configurable from the StoreFront management console under Manage Receiver for Web Sites Configure Client Interface Settings might not represent the true value of this property. This value can be reliably configured from the management console, but any...

FAQ: Time-Out with Password Caching on XenMobile

Question : What is the expectations of time-outs with the combinations of Enable Password Caching on XenMobile Server? Answer : Enable Password Cache : false Secure PIN authentication on XenMobile Apps after INACTIVITYTIMER expires. Active Directory password authentication on Secure Hub when...

NetScaler LOM Version and Support Matrix

This article provides information on Lights out Management LOM and support matrix for NetScaler model and LOM firmware version. Lights out Management LOM Various NetScaler MPX appliances have an Intelligent Platform Management Interface IPMI also known as the Lights out Management LOM port on the...

Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD

BUG0217580 addressed an SSH vulnerability CVE-2008-5161 involving CBC algorithms used in SSH connections CBC Mode Plaintext Recovery Vulnerability. The bug was reported when NetScaler 10.0 was still the newest version as NetScaler shipped with an affected version of OpenSSH. The NetScaler bug fix...

Error: "1603: Fatal error during installation" When Upgrading StoreFront 3.0.1 to 3.5

The following error is displayed when upgrading StoreFront from version 3.0.1 to 3.5: Error 1603: Fatal error during installation...

[FAQ]: Is ICA or CGP recommended on high latency links when traffic is being optimized?

Question: Is ICA or CGP recommended on high latency links when traffic is being optimized? Answer: CGP is recommended on high latency links because CGP has a fixed buffer size on the server and on long latency links, despite CB TCP optimizations, the server won’t send data faster its waiting for ...

Troubleshooting pointers for TCP monitor showing DOWN

How to troubleshoot an issue related to TCP monitor down reported for services configured on NetScaler...

Error: "Incorrect credentials. Try again." when logging into NetScaler Gateway

Users fail to log on to NetScaler Gateway with the following error: "Incorrect credentials. Try again." Log on through StoreFront is successful. From /tmp/aaad.debug, the following is the logon failure message: /usr/home/build/rs1011296/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldapcommon.c341:...