FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

How to Set Up Windows ADFS Server to Test SAML Authentication with NetScaler Gateway

This article describes how to set up Active Directory Federation Services ADFS to integrate with NetScaler, test issues with SAML authentication using ADFS and exposes you to SAML authentication with NetScaler Gateway. Requirements Install Windows 2008 SP1 R2 configured in a domain 2008 R2 with S...

How to trigger a memory dump from a Windows virtual machine

This article describes how to trigger and capture a memory dump from a Windows Virtual Machine VM running on a XenServer 8 or Citrix Hypervisor 8.2 CU1 host. Refer to the Microsoft KB article, Generate a kernel or complete crash dump for more information. Troubleshooting unresponsive Windows VMs...

Commands Generated by XenMobile Wizard on Netscaler - SSL Bridge

This was created for customers that need to run the wizard more than once for multiple XenMobile environments...

Error: "Cannot Complete Your Request" When Connecting to StoreFront

The following error is displayed when connecting to StoreFront: Cannot Complete Your Request New Experience Classic Experience...

Commands Generated by XenMobile Wizard on NetScaler - SSL Offload

This article will help you when you need to run the wizard more than once for multiple XenMobile environments. This article assumes that you have the following items already installed and configured on the NetScaler: 1. NetScaler IP address NSIP 2. Subnet IP address SNIP 3. DNS Settings 4...

Troubleshooting StoreFront propagation issues

StoreFront propagation fails to complete. The issue can manifest itself with any of the following errors: StoreFront Error: "Propagation Failed on One or More Servers" StoreFront Propagation Fails with Event ID: 31 "Could not find a part of the path" StoreFront Error: "Event ID 19 Failed to Get t...

Managing Provisioning Services VDisk Versions with VhdUtil Tool

The Provisioning Services VhdUtil utility included in PVS 7.1 and later versions allows for the management of PVS vDisk versions outside of the PVS console, which is completely unaware of the vDisk changes made by this utility. This article will cover two commands included in the VhdUtil utility ...

How to collect ADB and XCODE logs for XenMobile

To make users aware on how they can collect the ADB logs and XCODE logs...

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...

"This page can't be displayed. Turn on TLS 1.0 TLS 1.1, and TLS 1.2. in Advanced Settings And Try Connecting Again" While Accessing StoreFront

Error: "This page can't be displayed. Turn on TLS 1.0 TLS 1.1, and TLS 1.2. in Advanced Settings And Try Connecting Again" While Accessing StoreFront...

Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway

The following error is displayed after logging on to NetScaler Gateway: "403 - Forbidden: Access is denied."...

Converting iRules to NetScaler Policies - HTTP Request Cloning

The iRules to NetScaler conversion guides take you through the process of converting your F5 iRules into policies on NetScaler. If you have been using iRules and would like to create the same functionality on NetScaler these guides simplify the process and gets you up and running faster. Use Case...

Error: "There are no apps available at this time. Please check the server and try again"

Consider the following scenario. There are two sites IN GSLB- production and disaster recovery. Production is already working with the StoreFront integration behind it. Customer wanted to test the disaster recovery site using the same URL that resolves to the NetScaler Gateway VIP, creating the...

Converting iRules to NetScaler Policies - X-Forwarded For Header Based Persistence

Use Case X-Forwarded-For HTTP header indicates the path where the request came in through and it can have multiple IP addresses as well. You can define persistence based on the value of X-Forwarded-For header received while processing the request on load balancing vserver. F5iRules Name:...

SSL VPN Split Tunnel Issue Through NetScaler

Split tunneling does not allow to access internal websites. When WorxWeb is launched "The VPN service has failed to connect" error message is displayed. With split tunneling disabled customer is able to view website fine traffic is routed to internal network. When trying to hit external network...

Dual Password Field wrongly shows in First Authentication Prompt when connecting to NetScaler Gateway using Receiver

Consider the following scenario, you are using LDAP + SMS passcode RADIUS authentication. The behavior is that user will first authenticate to LDAP, and then an SMS passcode is sent to their mobile device, which is used for authentication. Unless the user is authenticated to LDAP first, they will...

Event 4003 on StoreFront Servers

The following eventisdisplayed in the event viewer: First error message: Log Name:Citrix Delivery Services Source:Citrix Store Service Date:7/22/2016 12:05:09 PM Event ID:4003 Task Category: 12346 Level:Error Keywords:Classic User:N/A Computer:StorefrontSrv.Contoso.com Description: All the Citrix...

How to Integrate StoreFront into Clientless Access Page from NetScaler When Using CVPN

This article describes how to use Clientless Access CVPN on NetScaler and integrate StoreFront published applications and desktops into the tabbed list...

NetScaler Remote GSLB Service Shows as DOWN

- A remote NetScaler GSLB Site, have the Site Metric MEP Status showingas DOWN. - Monitor bound to the GSLB Service shows Down...

CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections

QUESTION: CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections ANSWER: This is known limitation. We do not support unsigned SMB2 connection with windows 10 as it uses secure dialect negotiation. However performance should be better compare to w/o CB as w...

Authentication Prompt Not Honoring Inactivity/Session Timeout Values on XenMobile

Authentication prompt is not honoring inactivity timeout value XenMobile 9.0 or the session timeout value specified XenMobile 10.0...

FAQ: Key Sizes/Certificates Supported by ADC

Q: What are the key sizes/certificates supported by ADC? A : An MPX appliance supports certificates of 512 or more bits, up to the following sizes: 4096-bit server certificate on the virtual server 4096-bit client certificate on the service 4096-bit CA certificate includes intermediate and root...

Error:"Office Licensing Rearm failed" while updating or creating new Machine Catalogs with MCS

Install Office 2010 / 2013 into Master Image for XenDesktop. Then, during the Machine Catalog update, the following error is displayed: "Office Licensing Rearm failed."...

Web Cams Not Working Through Published Desktop OS Session | Being Redirected As Optimized USB

The End-Users are unable to use the Web Cam through a Published Desktop OS session launched using Workspace App USB Device Being Redirected As Optimized USB...

How to Change Order of NICs in XenServer

Theinterface-rename is a utility included in Citrix Hypervisor 8.2 Cumulative Update 1 and XenServer 8. This utility allows for granular management of network interface cards to facilitate renaming and reordering of them from the default installed configuration. The interface-rename utility refer...

How To: Review Profile Management Log Files using Microsoft Excel

This article contains steps on how to use Microsoft Excel to review Profile Management log files. This is useful to identify a specific user session, a specific error type, a log level, and so on. Requirements Microsoft Excel with basic understanding of the formatting tools available in Excel...

How to enable Syslog over TCP in ADC

This article describes how to enable syslog over TCP in ADC. Background Syslog is the standard used for logging information. Syslog enables isolation of the system that generates information and the system that stores the information. Syslog usage is quite common in Network implementations today...

Support for Multiple Versions of MS Office on a Machine with Terminal Services Enabled

Scenario: We have Multiple Versions of Microsoft Office installed on the Master Image or vDisk and looking forward to activate both versions using KMS This scenario is not supported. Please refer Microsoft's KBhttps://support.microsoft.com/en-us/kb/2784668according to which : "We do not support t...

APNs Communication Fails

Device APNS communication fails. The following error is reported: INFO com.sparus.nps.ios.push.ApnsHandler - Not using APNS connection pool WARN com.sparus.nps.ios.push.ApnsHandler - Sending message to APNS failed...

NetScaler Gateway Stuck at /cgi/login for a User of a Particular Group

After NetScaler Gateway authentication, logon page gets stuck at /cgi/login for a user of a particular group. Users of other groups have no issue...

Deleting a vDisk version does not delete the physical version file

Deleting a vDisk version does not delete the version's physical file...

Not All PVS Servers Showing On The Replication Status Window

The PVS farm shows all PVS servers under the Servers node. However, when you click Show Replication Status ofthe vDisk does not show all PVS serverslisted. The other servers have the vDisk files .vhd, .pvp but do not show up in the list...

Error: "This version of Citrix Receiver does not support selected encryption" When Launching XenApp Application

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Workspace app is the new universal app for all workspace services, that will encompass all...

Streamed VM Setup Wizard Fails to Create VMs When Specifying an ESX Datacenter as the Hypervisor

Streamed VM Setup Wizard fails to create VMs when specifying an ESX datacenter as the hypervisor. The wizard completes but reports 0 of 5 VMs created. A CDF trace during the failure will report an exception in PVSDllHypervisorPlatform - "the resource vim.dvs.DistributedVirtualPort is not...

How do I Configure Unified Gateway for Common Enterprise Applications

This article describes how to configure Unified Gateway for common enterprise applications. Use Case To do AAA and single sign-on for common enterprise applications like SharePoint or Exchange at NetScaler Unified Gateway. Unified Gateway is a single point of access for all corporate applications...

How do I Customize Unified Gateway Portal?

Use Case Portal is the first interaction point for end users and hence important to have correct representation of an organization. Customize the look and feel, color, logo and labels on the Gateway portal to brand the portal as per organizational standards. Introduction to Portal Customization...

How to Configure PVS vDisk Update Management Using SCCM

This article explains how to configure PVS vDisk Update Management using SCCM.It is assumed that SCCM is installed and configured. It is highly advised to designate an OU for the PVS auto update client and limit SCCM access to this OU only...

Users Unable to Connect After Rebuilding Licensing Server With qfarm Showing Load of 20000

After rebuilding the XenApp licensing server users are unable to connect. XenApp Licensing installed without issueand its services are running. Running qfarm /load on any of the XenApp servers in the farm shows a load of 20000 meaning the servers are unable to acquire a connection license for the...

TCP Profiles on NetScaler

TCP configurations for a NetScaler appliance can be specified in an entity called a TCP profile, which is a collection of TCP settings. The TCP profile can then be associated with services or virtual servers that want to use these TCP configurations. Built-in TCP Profiles For convenience of...

Error: "Please check your credentials you may have mistyped them" on XenMobile

XenMobile enterprise migration is completed successfully from 9 to 10.1. Enrollment begins OK, MAM side errors out. Customer initiates enrollment and when Secure Hubagain is connecting to MAM and user is expecting to enter PIN prompt they see the following error: Please check your credentials you...

How do I Load Balance DNS traffic (DNS proxy) on NetScaler?

Domain Name Servers DNS are the Internet's equivalent of a phone book. They maintain a directory of domain names and translate them to Internet Protocol IP addresses. When you request DNS resolution of a domain name, the NetScaler appliance uses the configuredLoad Balancing method to select a DNS...

How Do I Configure Framehawk Support on NetScaler Gateway?

This article describes how to configure Framehawk support on NetScaler Gateway. Use Case With the increase of mobile users adopting tablets and smartphones, it is critical to ensure a rich virtual application and desktop user experience on Wi-Fi and cellular networks where network quality may be...

Screensaver Not Working in XenDesktop

Screensaver not starting on Virtual Desktop - Desktop OS VDA...

FAQ: Connection Leasing in XenApp/XenDesktop 7.6

Q: What is Connection leasing? A: It allows users to connect to recently used published applications or desktops launchedwithin the last 2 weeks or less during a site database failure using a combination of a license lease and cached information on the Delivery Controllers. The Delivery...

Citrix Credential Wallet Service and Citrix Peer Resolution Service do not start

On the Citrix storefront services console, the Citrix Peer Resolution Service and the Citrix Credential Wallet services stay in stopped state, wouldn't start even if we start manually...

Change Password Option Not Working for Users Connecting to StoreFront

Users are able to log into StoreFront 2.5 successfully, but are unable to change passwords. Once a user clicks the change password menu option, they get error:Cannot complete your request. The user is then presented with a logon button. Event logs do not indicate issue. The StoreFront 2.5...

Secure Mail Error: "Cannot Safely connect to the server. The server certificate is not trusted."

New Users: When attempting to connect to Secure Mail, new users encounter the following error message: "Cannot safely connect to the server. The server's certificate is not trusted." Already Enrolled Users: Already enrolled users experience the error message: "Access to your company network is no...

Error: "To Use Desktop Lock Feature, Make Sure Receiver is Installed and is Working Fine With Single Signon" While Installing Desktop Lock

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Trying to install and activate Desktop Lock, but cannot get it to install. "To use Desktop Lock...

Stop Error "0x0000005D" or "0x000000C4" Appears When Installing Windows Server 2012 in XenServer 6.x

Stop Error "0x0000005D" or "0x000000C4" appears when starting a Virtual Machine from the Windows Server 2012 ISO, in order to install the system. The error occurs right after loading the setup files, before the actual setup starts...