Receiver 4 Upgrade Causing UAC Prompt

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information We are offering Receiver from our SCCM 2012 Self-Service Application Catalog. We followed...

CVE-2016-6493 - Memory Permission Weakness in Citrix XenApp and XenDesktop

Description of Problem A weakness has been identified in Citrix XenApp and XenDesktop. While this issue is not directly exploitable, it could potentially weaken an existing security mitigation, resulting in a loss of defence in depth. This weakness affects the following Citrix products: Citrix...

Troubleshoot Issues that Arise When Joining StoreFront Server to a Group

Complete the following steps to troubleshoot issues that arise when joining a StoreFront server to a group. 1. Validate that all machines are on the same version of Storefront. Open the StoreFront MMC Help About Citrix StoreFront Version. 2. Confirm that all StoreFront servers have the same date...

How to Reset StoreFront to the Initial Factory Settings

This article details how to reset StoreFront to the initial factory settings...

Unable to Change Expired Passwords in Wyse Thin Client

When a user's password expire and they reach out to Internal IT support department,thepassword is changed for the user and ashot password is given. 2. When the user then enters his new password and instead of being allowed to log on and change his password, they get "Citrix Sign on failed". On...

Error:"Unable to launch your app....Cannot connect to the Citrix XenApp server. SSL Error 4... The server rejected the connection."

Error: "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. SSL Error 4: Attempted to connect using the TLS V1.0 | SSL V3.0 protocols. The server rejected the connection" whentrying to launch apps when SSL v3 and TL...

How to fix Citrix DNE Installation and Other Issues

Citrix Gateway, formerly Citrix NetScaler Unified Gateway Citrix Virtual Apps, formerly XenApp, fits the enterprise need to bring legacy apps into a cloud management environment. This article describes how to fix Citrix DNE installation and other issues. Background Citrix Deterministic Network...

Error: TDICA 1005/1007 and Sessions Disconnected/ Not Responding

Usersessions freezing / disconnecting. Network and performance has been checked and no issues found. However, TDICA 1005/1007 events are seen in the logs at the same time the error occurred. This might be a problem with flaky network connections between the ICA clients and the VDA servers Session...

Configuring XenMobile for Certificate and Security Token Authentication

In highly secure environments where usage of LDAP credentials outside of an organization in public or insecure networks is considered a prime security threat for the organization, two-factor authentication using a client certificate and a security token is an option. You can configure NetScaler s...

License Server Crashes After Upgrade to Latest Version When Using XenApp Fundamentals 6.0

Customer installs the Citrix Licensing portion of XenApp Fundamentals 6.0 for Windows Server 2008 R2.The customer then upgrades the Citrix Licensing Server to the newest version from the downloads section ofCitrix's website.After theupgradethe customer then completes theinstall of XenApp...

How to Collect Xcode Logs

You can collect system logs on iOS devices either by using iPhone Configuration Utility tool or Xcode. You can then email the files to Citrix support for help troubleshoot issues with apps...

Win10 - Receiver4.3: Runtime Error for Wfica32.exe when launching app

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Runtime Error for Wfica32.exe when launching app...

StoreFront 3.0: MMC snap in error when attempting to Set Unified Experience as Default

Storefront 3.0 gives an MMC snap in error when attempting to Set Unified Experience as Default...

Configuring KMS Licensing for Windows and Office

This article contains information for administrators about configuring Citrix Provisioning , formerly Provisioning ServicesPVS 5.6 Service Pack 1 or later target devices that are using the Microsoft Key Management Server KMS in their environment. Background KMS can be configured on the virtual di...

HDX Insight Diagnostics and Troubleshooting Guide

Citrix ADM, formerly NetScaler MAS Introduction Prerequisites for Configuring HDX Insight Troubleshooting Issues Related to ICA parsing Error Counter details Checklist before Contacting Citrix Technical Support Information to collect before Contacting Citrix Technical support Known Issues...

Unable to Access StoreFront Portal When TLS 1.0 is Disabled on NetScaler Gateway

Unable to access StoreFront portal when TLS 1.0 is disabled on NetScaler Gateway virtual server...

PVS Targets Displays Blue Screen With Error Code 7B On Xenserver 6.1 and Later

PVS targets give a blue screen error code 7B when on Xenserver 6.1 or later hypervisor...

How to Install a License on NetScaler VPX on Microsoft Azure During First Log on

This article describes how to install a license on NetScaler VPX on Microsoft Azure during first logon. Requirements Access to the NetScaler VPX on Microsoft Azure management console...

How to Configure NetScaler Gateway with Citrix Receiver for Mobile Devices and Web Interface Backend

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway for use with Citrix Receiver for Mobile...

Error "Citrix License Server unavailable. Check the License Server to Make Sure It Is Running"

When setting up XenDesktop 7.1 or higher, the licensing node displays the following error message, "Citrix License Server unavailable. Check the license server to make sure it is running." Reference Screenshot:...

Error: "This access control list is not in canonical form and therefore cannot be modified."

Error: "This access control list is not in canonical form and therefore cannot be modified."...

Receiver for Mac Support on macOS Sierra (macOS 10.12) Beta Builds

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Citrix Receiver for Mac team is working on product updates to support the upcoming release ofmac...

Citrix ADC Networking and VLAN Best Practices

The ADC uses VLANs to determine which interface should be used for which traffic. In addition, ADC does not participate in Spanning Tree. Without the proper VLAN configuration, the ADC is unable to determine which interface to use and it can function more like a HUB than a switch or router in the...

Netscaler Instances on SDX show less memory than allocated from within the SVM Console

Question: When I allocate RAM to a Netscaler instance on SDX, the Netscaler reports considerably less memory than is allocated. For instance, if I allocate 16gb, the Netscaler instance shows only 12gb allocated. Answer: This is an expected behavior. When NetScaler is started and is initializing t...

Error: "Could Not Create Exchange Provisioning Profile" When Launching Secure Mail in iOS

Users are getting an error "Could Not Create Exchange Provisioning Profile" when they have not logged into Secure Mail for a few hours. Users can click OK and email will sync fine...

StoreFront errors with "Cannot complete your request" & event log "Failed to run discovery"

While users attempt to connect to the Receiver for Web site and enumerate applications published, the page displays an error "Cannot Complete your Request". Below errors will be seen in the DebugView logs: Citrix.Web.DeliveryServicesProxy.ConfigLoader.DiscoveryServiceException: An error occurred...

Connecting XenServer to XenCenter with AD User credentials fails with incorrect username/password

When trying to add a new host to XenCenter console, the process fails with the message "XenCenter has encountered a problem connecting to this server" and "Incorrect username and/or password". A second XenServer pool using the same AD authentication configuration same domain, same AD groups can...

XenMobile Analyzer Tool

The new XenMobile Analyzer Tool is a cloud-based solution that allows XenMobile administrators to diagnose issues proactively and in real time. XenMobile Analyzer environmental checks can identify device issues, user enrollment issues, and authentication issues. Numerous use-cases and deployment...

Error Windows API: There is not enough space on the disk. Error number 0xE00000070

When trying to merge a vDisk, the following error is seen: The error is not seen when adding a vDisk or a new vDisk version to the store, just when merging the vDisk versions. Windows Explorer shows a sufficient amount of free space for the merge process in the vDisk store and running the...

Troubleshooting Checklist: Cannot get required apps on an iOS device

If the APNSpush is not working, ask the following questions: Are port 2195 and outbound port 2196 open from the company network to reach the APNs? Is the APNs certificate valid? Are the APNs and App Store IP addresses are not present hardcoded in the host entry of the XenMobile? If there is a pro...

Troubleshooting Checklist: Cannot send emails using Secure Mail

Do the following: Collect Secure Mail logs from the device. If you see HTTP 413 in the logs, there are client certificate errors. Run the Secure Mail Test Application. Collect Exchange Server logs. For details, see the Microsoft documentation. Additional Resources: FullXenMobile Deployment Handbo...

Troubleshooting Checklist: Users Cannot Browse Internal Websites in Secure Web

Do the following: Collect Secure Web client logs. If you see the following message in the logs, add valid DNS SUFFIXES for the corresponding internal domains on NetScaler: AG policy: Not Intercepting Check if Split tunnel is On or Off on the Netscaler Gateway under session policies: If On - Make...

Troubleshooting Checklist: Cannot enroll and authenticate a device using Secure Hub

If a device cannot enroll and authenticate using Secure Hub, ask the following questions: Is the user synced to XenMobile? Are there multiple domains managed? For details on multi-domain configuration in MAM+MDM mode, see this Citrix blog post. Is the Global Catalog port managed? From which domai...

Troubleshooting Checklist: In Secure Mail, a “Verify your Single Sign-On credentials” error appears

Do the following: 1. Collect the Secure Mail application logs. 2. If you see the following message in the client logs, set clientCertificateMappingAuth to enabled in IIS on the Exchange Server. For more information, refer to the FAQ section of the Secure Mail Test Application. AUTH Request...

Troubleshooting Checklist: In Secure Mail, a "Cannot authenticate to the server <FQDN> because the certificate is not valid” error appears

Do the following: Ensure that the certificate chain is valid and that the configuration is complete on the Exchange Server. Try to connect the native email client with the same Exchange Server. If it works as expected, the issue is with client certificate configuration on the XenMobile server Onl...

Troubleshooting Checklist: In the ShareFile app, Secure Mail, or Secure Notes, the following error appears: "Your connection is unavailable. Only offline files can be accessed."

Do the following: Collect client logs and then open Sharefiledebuglog.txt. Check the logs, if you see the following: The operation couldn’t be completed. Cannot initiate login API call. Is the device connected to the Internet? Added user to DB, success: no If present, the MDX policy related to th...

Troubleshooting Checklist: Emails are not syncing in Secure Mail, or email folders are not found, or Secure Mail is prompting users for a password multiple times

Do the following: Run the Secure Mail Test troubleshooting tool that finds issues with Active Sync policy configurations. For details, see Secure Mail Test Application. Collect Exchange Server logs. For details, see the Microsoft documentation. Collect Secure Mail logs. In the Secure Mail logs, i...

How to Define VMware vSphere User Privileges for XenApp and XenDesktop

This article lists the user privileges required to successfully create and manage VMware vSphere machines through XenApp and XenDesktop. Note :Create AppDisksandDelete AppDisks sections of this article are valid onlyforVMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7...

Personalization Settings, Such as Outlook Signatures, Are Not Retained

Users report that certain registry settings and personalization, such as Outlook signature settings among others, are not retained after they log off and log in again...

Users experience undesirable behaviour like profile corruption, data loss with Profile Management

Users may Experience Profile corruption, slow logons, data loss or unexpected behaviour if using profiles from differing Windows version as Roaming or UPM profiles...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

Cannot change the IP address of the XenMobile server on VMware

Cannot change the IP address of the XenMobile server on VMWare. This mostly arises in the following scenario. Customer clones a XenMobile Server for a cluster, then changes the IP address of the clone in the CLI, reboots the cloned XenMobile Server and the IP reverts back to the IP of the origina...

CVE-2016-5433 - TLS Certificate Validation Vulnerability in Citrix iOS Receiver

Description of Problem A vulnerability has been identified in Citrix iOS Receiver that could result in TLS certificates being incorrectly validated. This vulnerability has been assigned the following CVE number: CVE-2016-5433: TLS Certificate Validation Vulnerability in Citrix iOS Receiver. This...

XenApp 6.5 - Unable to install the hotfix

XenApp 6.5 - Unable to install the hotfix installation fails because CDFSVC fails to start If you compare a working and non-working machine you'll see some registry keys missing for cdfsvc If you search theAppID, you might not find it on the problematic machine HKCR in dcomcnfg you will not be ab...

Error: "Gateway data from the request and the authentication token are not matching"

The following warning is displayed in the Event Viewer: Gateway data from the request and the authentication token are not matching...

CVE-2016-5302 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in XenServer 7.0 that may allow an attacker on the management network who is in possession of Active Directory credentials for an AD account that is not authorised to manage a XenServer host to compromise that host. The following...

XenMobile 10.x how to update SQL server password on Xenmobile

XenMobile 10.x -How to update SQL server password on Xenmobile server...

XML Parser and Core Services upgrade

Question: Security scan detected obsolete software Microsoft XML Parser and Microsoft XML Core Services MSXML 4.0. Do we need & use XML for Xenmobile? Can we remove or update XML? Answer: This specific item is a very common scan error that likely does not have anything to do with XenMobile. In fa...

How to Create a Desktop Appliance Site in StoreFront

This article details the steps on how to create a desktop appliance site within StoreFront...

How to Use Listen Policy to Create Virtual Servers with Same IP and Perform Selective Dual Authentication

You can use the Listen Policy feature of Citrix ADC NetScaler to use the same IP and FQDN and have selective authentication on the basis of the IP range. Example : Single authentication for internal users and dual authentication for external users...