How to Bind Certificates to Citrix Gateway Virtual Server

Refer to Citrix Documentation for detailed instruction -To bind the certificate and private key to a virtual server...

Unable to add/install an SSL certificate-key Pair to the CloudBridge: “Error detecting a valid private key file format”

When configuring an SSL Profile the backend server’s ssl certificate/key pair must be uploaded. The following error message is displayed when trying to upload the private key file regardless of the extension i.e .key or .txt Please correct any problems and resubmit your request Execution error...

SNMP v3 System Generated Passwords are Not Accepted by CloudBridge

When SNMP-v3 trap receiver is configured, authentication and privacy passwords assigned to SNMP-v3 management applications are system-generated and contain special characters like: .,,@,$,%, , , “,” and so on. However these system-generated passwords are not accepted on the CloudBridge password...

How to Perform Reverse Imaging on a Provisioning Services Target Device for Windows and its Applicable Usages

When a Provisioning Services Target Device for Windows is booted from Provisioning Services across the network, it is not possible to perform any software updates that affect the network stack, since the network stack changes will drop the connection to the vDisk. The following provides a list of...

How to Use Policy-Based Logging on a NetScaler Appliance to Log HTTP Header

This article describes how to use the policy-based logging on a NetScaler appliance to log an HTTP header not supported by the NetScaler Web Logging NSWL feature...

How to Display Custom Error Pages by Using NetScaler Responder Policies

This article contains information about configuring Responder policies that redirect user requests to custom error pages during a maintenance period of a back end web server farm. Background You can create custom error page and redirect the user requests to it. For example, you might want to host...

Changes in Experimental Support for XenApp and Multiple GPUs

What are Experimental Features? This article covers a product configuration or procedure for which Citrix does not currently offer support. Use of this configuration should only be used in a lab or test environment and not with production deployments. Experimental features are occasionally releas...

Error: "MODIFY FILE failed. Specified size is less than or equal to current size" Appears when Creating Provisioning Services SQL Database Farm

When configuring a newly installed Provisioning Services with a pre-created SQL database, errors during the configuration process and the ConfigWizard.log file contains entries similar to the following: 2010-11-09 10:33:10,337 1 ERROR Mapi.CommandProcessor - Exception of type...

Error: "Management Interface: vDisk Properties were Lost" on Provisioning Services

Creating a vDisk fails before completion and displays the following error message: "Management Interface: vDisk properties were lost."...

Error: "Connection Timed Out (0x4c126035) When Connecting to vDisk on Citrix Provisioning Services

Error 1 : "Connection timed out 0x4c126035 with tftp://0.0.0.0/ARDBP32.bin"" Error 2 :"Could not boot from file name “ARDP32.bin”"...

Best Practices for Upgrading a Hypervisor Tools Version in a Citrix Provisioning Environment

This article describes the steps for upgrading a hypervisor tools version in a Citrix Provisioning environment. Use the following procedure to upgrade a Hypervisor: 1. Reverse image the vdisk. 2. Boot from the local HDD on the VM that has been reverse imaged to. 3. Uninstall the PVS target...

NetScaler Gateway Stuck at cgi/setclient After Log On

NetScaler Gateway stuck at cgi/setclient after log on...

XenMobile New Port Requirement for ADS Connectivity

Overview Citrix is making security enhancements to XenMobile in the form of certificate pinning. This feature includes a new Citrix Auto Discovery Service ADS access requirement that must be enabled in every customer environment whether you choose to use the certificate pinning feature or not. Wh...

BSOD with Error: "STOP 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized"

When attempting to boot Vdisks from Target device a BSOD occurs with the following message: STOP" 0x0000007E and CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

Citrix Provisioning Services Antivirus Best Practices

The environment may experience one or more of the following symptoms if the antivirus client is impacting either the Target Devices or PVS Servers. - Target Devices running the VDA software may appear power state unknown and no longer registered whenlooking at them via Studio or Director. -...

NetScaler Gateway Rejects RADIUS Accept Request

RADIUS authentication is configured on NetScaler Gateway. RADIUS accepts the authentication and sends the correct message however NetScaler rejects the authentication. The RADIUS log files show that the authentication is accepted. The network trace shows that a message is sent from RADIUS server...

How to Obtain SNMP MIB File for NetScaler SDX Appliance

...

CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability

Overview A TLS protocol vulnerability has been recently disclosed that could result in attackers being able to intercept and modify SSL/TLS encrypted traffic to servers that support Diffie-Hellman based export cipher suites. This vulnerability is known as 'LogJam' and has been assigned the...

CVE-2015-0235 - Citrix Security Advisory for glibc GHOST Vulnerability

Overview A vulnerability has been recently disclosed in the glibc gethostbyname function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue is known as the GHOST vulnerability and has been assigned the following CVE...

CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw

Description of Problem The recently disclosed protocol flaw in SSLv3, referred to as CVE-2014-3566 or POODLE, could expose some deployments that support SSLv3 to a risk of an active Man in the Middle MITM attack. A successful attack could lead to the disclosure of the information that is being se...

CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop

Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...

CVE-2014-0160 - Citrix Security Advisory for the Heartbleed vulnerability

Overview A vulnerability has been recently disclosed in OpenSSL that could result in remote attackers being able to obtain sensitive data from the process address space of a vulnerable OpenSSL server or client. The issue has been assigned the following CVE identifier and is also known as the...

CVE-2013-6077 - Vulnerability in XenDesktop 7.0 Upgrade Could Result in Policy Bypass

Description of Problem A vulnerability has been identified in Citrix XenDesktop 7.0 that could prevent policy rules from being correctly applied following an upgrade from earlier versions of Citrix XenDesktop. This vulnerability affects deployments of Citrix XenDesktop that have been upgraded fro...

CVE-2012-5161 - Vulnerability in Citrix XenApp could result in arbitrary code execution

Description of Problem A vulnerability has been identified in the XML Service interface of XenApp that could potentially be used by a remote, unauthenticated attacker to execute arbitrary code in the context of a service account on a XenApp server. The vulnerability could potentially be exploited...