Error: "Page Can't be displayed" When Connecting to StoreFront Through NetScaler Gateway

The following error is displayed when connecting to StoreFront through NetScaler Gateway: Page Can't be displayed...

XenMobile: How to enroll MAC OS X to XMS Server

How to enroll MAC OS X device to XenMobile MDM...

ICA Connection Stuck at "Connection in Progress" on StoreFront

When users launch an application from the Receiver for web, after getting the ICA file to the connection, the progress bar gets stuck at"Connection in Progress". The VDAs in this scenario are PVS provisioned machines, which works only for few initial hours post the reboot...

Is it possible to optimize SSH or SFTP connections?

QUESTION: Is it possible to optimize SSH or SFTP connections? ANSWER: SSH and SFTP are encrypted traffic: SSH one-time encrypted data stream and SFTP goes over the SSH port CloudBridge can only optimize with flow-control-only but won't be able to compress it...

How to Publish Windows Explorer.exe with Specific Drives, Folders, or URLs

This article describes how to publish specific drives and folders as it is not recommended to publish Explorer.exe directly. Notes: Microsoft does NOTrecommend running Explorer.exe as a published application because the published Explorer.exe application runs as a separate process with restricted...

How to suppress the Add Account window in Citrix Receiver 4.4 or earlier for Windows

This article describes how to suppress the Add Account window in Citrix Receiver for Windows. Note : This article is applicable for Receiver 4.4and earlier. For Receiver for Windows 4.4.1000,Receiver 4.5and later, refer to CTX135438 -How to Suppress the Add Account Window in Citrix Receiver for...

How to remove policy from devices on XenMobile

This article describes how to remove any policy from the devices from XenMobile...

Error: "App Not Available" when launching iOS XenMobile Apps

When attempting to launch an MDX wrapped application, you will receive the error "App Not Available". This error is due to an invalid iOS Public App Store application description. The description that is pre-populated from Public App Store includes a datalink escape character that is not supporte...

Incorrect Auto launch desktop status is shown in StoreFront Console

The value ofAuto launch desktop , which is configurable from the StoreFront management console under Manage Receiver for Web Sites Configure Client Interface Settings might not represent the true value of this property. This value can be reliably configured from the management console, but any...

Error: "Generate the new security key" on StoreFront

The following error is displayed when connecting to StoreFront: Generate the new security key...

Error: "javax.naming.CommunicationException: simple bind failed" while Binding LDAPS on XenMobile

The following error is displayed when binding LDAPS on XenMobile: LDAP communication error: javax.naming.CommunicationException: simple bind failed: domain-controller-binding-to:636 Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path buildin...

How to configure Desktop or Start Menu shortcuts With Citrix Receiver 4.x

Steps to configure Desktop or Start Menu shortcuts...

How Do I Set Up RSA Keys/Public SSL Certificate on Citrix ADC

...

How to forward client IP to back-end server using "x-forwarded-for" header on Citrix ADC

To forwardClient IP to Back-End Server Using "x-forwarded-for" Header...

Error: "Virtual Disk is Owned By Control Domain" in XenServer

- Storage Repository shows a virtual disk attached to a "Control Domain" - VDIs cannot be deleted with errors that the VDI is not managed by this host. - Multipathing cannot be enable on the SR because the VDIs are not managed by this host...

How to Remove ovs-vswitchd Manager Permanently from XenServer Config

This article describes how to remove ovs-vswitchd manager permanently from XenServer config. Citrix Distributed Virtual Switch/Controller DVSC that connects to the open-vswitchd running on the XenServer DOM0 machines. DVSC is proved to cause some trouble with the Virtual Machines VMs. In...

FAQ: Time-Out with Password Caching on XenMobile

Question : What is the expectations of time-outs with the combinations of Enable Password Caching on XenMobile Server? Answer : Enable Password Cache : false Secure PIN authentication on XenMobile Apps after INACTIVITYTIMER expires. Active Directory password authentication on Secure Hub when...

How to Troubleshoot Multiple HBA Cards Issue in XenServer

How to troubleshoot multiple HBA Cards issue...

Receiver pass through is failing with Storefront when we are trying to launch application across domains/forests.

We have two domains “Domain1.com" and "Domain2.com" in different forest. External two way trust relationship exists between 2 domains. XenApp and XML servers are in “Domain2.com" domain and Store front servers are in “Domain1.com" domain. Few users in "Domain1.com" domain is part of a global grou...

Error: "Cannot Add Account" While Configuring StoreFront Beacons

Using discovery document fails with error"cannot add account"...

How to Reverse Image from a Virtual Disk to a Local Hard Disk with VMware ESX4

This article contains information about how to reverse an image from a virtual disk to a local hard disk with VMware ESX4. Background It is often necessary in a Provisioning Services environment to reverse an image to install a Citrix hotfix, change a driver, or do certain other tasks.To achieve...

NetScaler LOM Version and Support Matrix

This article provides information on Lights out Management LOM and support matrix for NetScaler model and LOM firmware version. Lights out Management LOM Various NetScaler MPX appliances have an Intelligent Platform Management Interface IPMI also known as the Lights out Management LOM port on the...

How to Restore NetScaler SDX to Factory Default Settings

This article describes how to restore NetScaler SDX to factory default settings. Important Points to Note 1. The procedure mentioned in this article is for troubleshooting or a last resort step only. The recommend procedure to restoreNetScaler SDX to factory default settings is using SVM GUI . 2...

How to make a session that spans multiple monitors with Linux Receiver

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. This article explains how to make a session that spans multiple monitors with Linux Receiver...

Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD

BUG0217580 addressed an SSH vulnerability CVE-2008-5161 involving CBC algorithms used in SSH connections CBC Mode Plaintext Recovery Vulnerability. The bug was reported when NetScaler 10.0 was still the newest version as NetScaler shipped with an affected version of OpenSSH. The NetScaler bug fix...

How to Enable/Disable Workspace Control in StoreFront

This article describes how to enable/disable workspace control in StoreFront...

XenMobile Cloud Self-Service Auto-Discovery Portal

This article details how to configure auto-discovery for device enrollment in XenMobile Cloud. Refer to Citrix documentation -Device Management...

Error: "1603: Fatal error during installation" When Upgrading StoreFront 3.0.1 to 3.5

The following error is displayed when upgrading StoreFront from version 3.0.1 to 3.5: Error 1603: Fatal error during installation...

How to Import/Export vDisk

How to Import/Export vDisk...

Understanding and Configuring EPA Verbose Logging on Citrix Gateway

CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...

Secure Flag not set for Cookies generated by Netscaler if Vserver is part of Persistence Group

We need to have the NSC cookies using the Secure and HttpOnly flag set, however Secure flag is not set by NetScaler...

Unable to access the Store on the Mobile device if XenMobile is behind firewall

When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...

Error: 403 forbidden | Post authentication when accessing through NetScaler Gateway

We see 403 forbidden error post authentication when accessing the apps through Netscaler Gateway...

[FAQ]: Is ICA or CGP recommended on high latency links when traffic is being optimized?

Question: Is ICA or CGP recommended on high latency links when traffic is being optimized? Answer: CGP is recommended on high latency links because CGP has a fixed buffer size on the server and on long latency links, despite CB TCP optimizations, the server won’t send data faster its waiting for ...

Troubleshooting pointers for TCP monitor showing DOWN

How to troubleshoot an issue related to TCP monitor down reported for services configured on NetScaler...

Error: "Incorrect credentials. Try again." when logging into NetScaler Gateway

Users fail to log on to NetScaler Gateway with the following error: "Incorrect credentials. Try again." Log on through StoreFront is successful. From /tmp/aaad.debug, the following is the logon failure message: /usr/home/build/rs1011296/usr.src/usr.bin/nsaaad/../../netscaler/aaad/ldapcommon.c341:...

Application Enumeration Fails When Connecting Through Windows App Receiver and NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Application enumeration fails when connecting through Windows App Receiver and NetScaler Gateway...

Error: "Intermediate CA or Root CA Certificate Signature Verification Failed" on NetScaler Gateway

Enrollment and authentication works with LDAP policy however unable to enroll devices using CBA client certification authentication. Authentication is denied at NetScaler Gateway.While disabling authentication on NetScaler Gateway, client certificate can be pushed to the device using a device...

How to configure standalone SQL server, Database Mirroring, and Always on High Availability

How to configure standalone SQL server, Database Mirroring, and Always on High Availability...

How to Use sAMAccountName and userPrincipalName at Same Time for User Logon with Active Directory

This article describes how use sAMAccountName and userPrincipalName at same time for user logon with Active Directory. Background While authenticating with LDAP for NetScaler Gateway or any other resource behind the NetScaler, we can only access resources using either 'domain\username' or...

Citrix Known Issues - Hotfixes with SHA-1 Code Sign

This article describes an issue that no longer applies. As a courtesy, Citrix is keeping the article online to prevent broken links for customer who might have bookmarked it. Citrix is committed to complying with the Security Advisories published by Microsoft. Effective January 1, 2016, Microsoft...

CVE-2015-8277 - Citrix Licensing Security Updates

Description of Problem A vulnerability has been identified in Citrix Licensing that could allow a remote, unauthenticated attacker to crash the License Server and potentially execute arbitrary code on the server. This vulnerability affects the following products: Citrix License Server for Windows...

How To Migrate vDisks From One Store to Another in Provisioning Server 7.6

How To Migrate vDisks From One Store to Another in Provisioning Server 7.6...

Citrix ICA Virtual Channels Overview

This article provides details of the design, functionality, and usage of the Citrix ICA Virtual Channels and focuses on the Citrix XenApp Plug-ins/Receiverfor Windows Target Audience Application developers, Citrixserver administrators, and help desk personnel. What are ICA Virtual Channels? A lar...

CVE-2016-2789 - Persistent Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.x Web User Interface

Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in XenMobile Server 10.x. This vulnerability could potentially be used to execute malicious client-side script in the same context as legitimate content from the web server; if this vulnerability is used to execut...

How to Change Management IP and Default Gateway Using NetScaler CLI

This article describes how to change management IP address and add new default gateway address using NetScaler CLI. Changing the Default Gateway of the NetScaler appliance can only be done via the CLI. The NetScaler appliance can only have 1 Default Gateway defined at a time...

How to Configure Single Fully Qualified Domain Name for StoreFront and NetScaler Gateway

This article describes how to configure Single Fully Qualified Domain Name on StoreFront and NetScaler Gateway...

[FAQ] Netscaler LDAP uses which IP address as source

Netscaler LDAP uses which IP address as source, NSIP or SNIP Answer:- - nsldap.pl is a perl script and will use NSIP as source IP by default. - If the Netscaler has SNIP in the same subnet of the authentication server, Netscaler will communicatethrough SNIP. - And, if Netscaler and the...

Error: "Cannot start app 'App/Desktop Name'" on StoreFront 3.5

After successfully upgrading to StoreFront 3.5, users are unable to launch applications or desktops with the following error: Cannot start app "App/Desktop Name"...

DNS queries not getting resolved from Primary node but gets resolved from Secondary node in HA pair

Nameservers are added on Netscaler using the "add dns nameserver" command or with GUI. From CLI in some cases, the DNS Lookup gets failed on the Primary Node but resolves well on the Secondary Non-working Primary We see that the DNS query Request is going to Netscaler DNS cache loop-back IP not t...