Microsoft Security Update Validation Report October 2022

Microsoft’s October 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwar...

Microsoft Teams optimization on Citrix Workspace app for Chrome OS

Pre-requisites/System Requirements Why you should use Teams optimization Configuring Microsoft Teams optimization Caveats Troubleshooting Pre-requisites/System Requirements...

BIOS Based Provisioning Services Target Devices Boot Slow Within VMware ESX

BIOS based Provisioned Target Devices boot slow through single IO. Background This symptom appears random. It may occur on a single vm boot or many, for example: five out of ten vm's may boot as expected and the remaining five may boot anywhere from 5 to 60 minutes later. After boot when the Targ...

More data flow occupies by PVS server after NAS server failover

To improve NAS server high availability,NAS storage controllers are created as failover group to provide fault tolerance for hardware issues and maintenance tasks. Sometimes, if one NAS storage controller needs to shutdown for maintenance or corrupted due tohardwarefailure, it will failover to...

How to check what VDAs are registered to a DDC

List of VDAs registered to a DDC...

Promiscous VLAN Tag Drops: Cause, Symptoms, and Solution

The counter nicerrvlanpromisctagdrops is incrementing. This may also cause performance issues and/or exceed the limits of a bandwidth license, triggering packet loss...

More data flow occupies by PVS server after copy/paste vdisk in use on NAS storage

Since customer need to execute scheduled backup tasks and vdisk update tasks,administrator may copy vdisk, which is in-using for data streaming from PVS server. Sometimes, data flow to NAS storage will increase even vDisk copy operation is finished. As the result, end user will experience pool...

Android Enterprise - How to remove Managed configuration policy from Android device

How to removeManaged configuration policy pushed to Android devices...

ADC is hanging on “Loading your applications“ screen when accessing the gateway page

After gateway authentication passed, gateway page stucked on “Loading your applications“...

Unable to receive email and calendar notifications from Secure Mail on Android 13

customers are unable to receive email and/or calendar notifications on Android 13...

Unable to login HA Secondary ADC with default password after upgrading from 12.1 to 13.0

You may using Citrix HA ADC default password in 12.1/11.1 legacy builds, and upgrading an ADC HA Secondary Node to 13.0, then found you cannot login to Secondary Node with default password. Error: Invalid username or password...

Driver Disk for Qlogic fastlinq 8.70.10.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's fastlinq driver and wish to use the latest version of the following: Driver Module| Version ---|--- qed| 8.70.10.0 qede| 8.70.10.0 qedf| 8.70.10.0 qedi| 8.70.10.0 qedr|...

Server communication timeout error while accessing the vdisk pool after upgrade to 1912 CU5

'Server communication timeout' error while accessing the vdisk pool node in the Citrix Provisioning PVS console after upgrade to 1912 CU5' There were no issues with the other nodes in the PVS Console...

PVS Accelerator - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Update? This PVS Accelerator update is for customers who use the PVS Accelerator provided with Citrix Hypervisor 8.2 Cumulative Update 1. It constitutes the following deliverable: File Name| CitrixHypervisor-8.2.1-pvsaccelerator-1.0.9.iso ---|--- Description| This file...

The license server found at this address is not compatible with this version of Citrix provisioning

Issue when connecting license server on Citrix Provisioning Configuration Wizard. The license server found at this address is not compatible with this version of Citrix provisioning...

ICA session freezes 8-10 minutes after session launch

ICA session freezes 8-10 minutes after session launch. The session remains active, only the display is frozen, for example keyboard typing will continue through to session. Users can successfully reconnect to the session and work again for similar time before the session again appears frozen...

How to update the certificate on Citrix ADC when the certificate is expired.

How to update the certificate on Citrix ADC when the certificate is expired...

App Layering - 2206 WMI applications relying on the Global Assembly Cache (GAC) fail to run.

WMI applications no longer work after upgrading to App Layering 2206. Specifically anything that uses the GACMSIL directory...

Microsoft Security Update Validation Report July 2022

Microsoft’s July 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

[CEM] Optional Solutions after Citrix QuickEdit EOL

You may need an alternative solution for securely editing documents on managed devices after Citrix QuickEdit EOL...

Microsoft Security Update Validation Report June 2022

Microsoft’s June 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Citrix Hypervisor 8.2 : MCS Catalog update deletes Target base disks.

Xenserver audit.log throwsERROR:NOTSUPPORTEDDURINGUPGRADE Mar 30 02:38:59 XXXXX xapi: 20220330T00:38:59.214Z|audit||8715 HTTP 10.1.XX.XX-:::80|VDI.setonboot R:780016cf9118|audit 'trackid=39b4363b70f699b0ab419280ab8b4fe2' 'S-1-XXXX-XX-XX-8' 'XX\\XXXXX' 'ALLOWED' 'ERROR:NOTSUPPORTEDDURINGUPGRADE :...

App Layering - (400) Bad Request with ImportOsLayer.ps1

ImportOsLayer.ps1 script PS C:\windows\Setup\Scripts .\ImportOsLayer.ps1 -ElmAddress -IgnoreCertError ModuleType Version Name ExportedCommands ---------- ------- ---- ---------------- Script 0.0 DynamicModule1cbe0359-cdf4-45... New-CALOperatingSystem, New-CALSession Failed to call API at and Meth...

HTML5 CWA configuration.js file is overwritten post the Storefront upgrade

The customized configuration.js file is overwritten under the path C:\Program Files\Citrix\Receiver Storefront\HTML5Client post Storefront upgrade...

How to Create Application Firewall Policy for Chunk Requests to Bypass Application Firewall on Citrix ADC 8.1-9.3

This article describes how to create application firewall policy for chunk requests to bypass Application Firewall module. Background In NetScaler software release 8.1 to 9.3 the Application Firewall module does not support chunked request. As a workaround you can create an Application Firewall...

Citrix - Gateway as a service - Error Codes For Session Launch Failure

Multiple Error codes during session launch failures...

Gateway 12.1 55.247- after reboot/restart the Gateway is not working need to Enable/Disabled MBF for get access to the Gateway page

After ADC reboot/restart Customer unable to access Citrix Gateway page. Customer had to toggle MBF mode on ADC for restore access to Citrix Gateway Page...

CVAD Setup Wizard Fails To Complete When Using Citrix Cloud - Index Was Out Of Range

Running the Provisioning Services CVAD Setup Wizard to create or add new machines to a Citrix Cloud catalog fails to create the devices. Upon clicking finish, after specifying wizard parameters, the wizard closes and the following error appears: Error: Index was out of range. Must be non-negative...

Driver Disk for Qlogic qla2xxx 10.02.06.03-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Version ---|--- qla2xxx| 10.02.06.03-k Note: If you use Dell hardware, ensure that you...

MvpnExcludeDomains fails to take effect on iOS when using Citrix WebSSO micro VPN with Microsoft Endpoint Manager MAM (Intune)

Microsoft Edge or Citrix Secure Mail for iOS is configured with 'MvpnExcludeDomains'. When a user browses to a website that is listed under'MvpnExcludeDomains', the traffic is still sent through Citrix Gateway. This traffic is instead expected to be sent directly to the website not through Citrix...

screen sharing on applications (Teams, WebEx and GoToMeeting) will not display screen properly until Workspace is minimized.

screen sharing on applications Teams, WebEx and GoToMeeting will not display screen properlyblack screen until Workspace is minimized...

Active Sync Gateway Connector isn't working with new devices since Update to 10.14 RP4

After upgrading from 10.14 RP3 - 10.14 RP4 any new enrolled device can't access to our Exchange Server via Active Sync Connector. After rebooting XenMobile server during the update process, we observe errors in the RemoteConfigService.log file as follows: Error |...

How to resolve certificate errors encountered after an upgrade of the ELM

Unable to create layers after an upgrade, One of the below errors is seen. "The issuing certificate does not have a usable private key" "Certificate doesn't contain private key"...

NTP time sync issue on VPX running on VMware platform

For Citrix ADC VPX instances deployed on VMware ESXi hypervisor, the Citrix ADC system time might go out of sync and consequently network time protocol NTP synchronization is lost. This problem occurs due to an issue with VMware ACPI timer emulation. tail -f ntpd.log 6 Dec 01:06:23 ntpd42663:...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 5

Package name: xms10.13.0.10528.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin Date: December 2021 Languages supported: English US Important notes about this update As a best...

Secure Hub- Minimum required ciphers for connecting Xenmobile and NetScaler

Secure Hub- Minimum required ciphers for connecting Xenmobile and NetScaler...

Citrix Workspace app for Windows fails with "Your Apps are not Available at this Time"

Configurations for Citrix Workspace app for Windows and SSON apply correctly to registry, but on intiial logon attempt, user receives the error "Your apps are not available at this time."...

How to add new XenMobile nodes in environments with Rolling Patches installed

Step by step on how to add new XenMobile nodes when the the environment already has Rolling Patches installed...

User stays logged into Citrix Workspace for more than a day

When a user uses Citrix Workspace app to log into a Citrix Workspace store, user remains logged in for more than a day without having to re-enter their password...

SD-WAN: ICMP are denied by Firewall to monitor WAN links VIPs

ICMP are denied by Firewall to monitor WAN links VIPs...

Citrix IME might not be set as active IME automatically while using Local IME in Chinese, Japanese, or Korean

Citrix IME might not be set as active IME automatically at the VDA sidewhile using Local IME in Chinese, Japanese, or Korean. For example, when users enable the keyboard layoutoptions of dynamic sync and Local IME and start a VDA session with Japanese IME, the IME at the VDA side should be switch...

Citrix Branch SD-WAN shows offline on SD-WAN Orchestrator

Citrix Branch SD-WAN appears offline on Orchestrator...

Unable to add Store in Native Workspace/Receiver App from External Machines

On adding Store error "Your account cannot be added" or "Could not detect the specific account" appears On Storefront no errors in event viewer Wireshark trace on NetScaler shows, NetScaler senta request to Storefront server for "/Agservices/Discover", storefront server returns "500 : Internal...

MDM Profile on iOS 15/iPadOS 15 and macOS 12 devices shows as “Not Verified” or “Unverified”

Currentenrolleddevices that were upgraded from iOS 14/iPadOS14 or earlierto iOS/iPadOS15ornewly enrolled devices on iOS/iPadOS15may show “Not Verified” under the device“Settings General VPN & deviceManagementCitrix Workspace MDM Profile” Currentenrolled devices that were upgraded from macOS 11or...

Hotfix XS82E032 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX325319 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Disabling Enhanced Graphics for sessions launched with Citrix Workspace app for Chrome OS 2108.2

In case you observe graphics distortions with the sessions launched with the Citrix Workspace app for Chrome OS 2108.2, please follow the steps below...

Config sync may fail after upgrade in HA/Cluster deployments

After upgrading to 13.0 74.14+ from older releases sometimes it was observed that config sync is continuously failing in HA/Cluster deployments. Failure can be because of multiple reasons like: 1. Internal user login is disabled but nscommkey is not configured 2. Sshhostrsakey private and public ...

Endpoint Management | Issues deploying Credential policy with Discretionary CA - PKIs

After trying to deploy a credential policy, the device Assigned Policies section shows the following error from the Failed Column: Path: Dashboard Manage Devices %Device% Edit Assigned Policies - Type: Credentials - Comment: Command preparation failed:...

How to Configure NetScaler in a HA Setup to Communicate in Two-Arm Config with Different VLAN Tags

This article describes how to configure the appliances in a high availability setup to communicate in a two-arm configuration with different 802.1q VLAN tags on each arm. In some network topologies, administrators enforce a security policy where VLAN traffic through their switching equipment must...

Custom URL type for host to client redirection not working

To redirect a custom URL jnlp using host to client redirection...