Browser is prompted to install Citrix Workspace lite.

Receiving prompt to install Citrix Workspace lite when accessing store URL When accessing workspace we see that as Citrix workspace lite However, the installed app is Citrix Workspace app...

NetScaler 14.1 - STA server marked down

STA server status is Down on Gateway vserver though it is reachable from the NetScaler...

NetScaler Gateway-13.1-Launching ICA session got stuck with client authentication enabled

You may stuck at the ICA session launching process when you enable client authentication in Gateway virtual server...

NetScaler-13.1-How to remove the "Server" header in the response with rewrite policy

How to remove the "Server" header in the response which exposes the server type information...

NetScaler-How to return a customized error page when the LB is Out Of Service

How to return a customized error page when the LB is Out Of Service in NetScaler...

Session Freeze Randomly During a Teams Video Call

A User's Session may freeze for around 5-10 Seconds while participating in a Teams call with multiple participants with Simulcast enabled. The session will show no issues after rejoining the call after the initial freeze...

NetScaler-13.1-How to implement authorization policy for Oauth user groups

In Oauth response, the user groups can be carried in the response with customized field. However, we can't relate the string of group to the group attribute of the user. We may have question for how to apply authorization policy for Oauth user groups. In this example, the default authorization...

ADC-13.1-How to support multiple domain SSO to StoreFront with user "distinguishedName" attribute

How to support multiple domain SSO to StoreFront from NetScaler with user "distinguishedName" attribute...

DaaS - Change master image it fails with "ProvisioningTaskError"

Unable to update DaaS Machine Catalog - Access Machine Catalog "Change master image" it fails with "ProvisioningTaskError" ErrorMessage - HandleExplicitStorage Failed Error retrieving item from path ""...

NetScaler-13.1-EPA scan failed with "Error while parsing client security configuration"

EPA scan failed with "Error while parsing client security configuration" in EPA log. ---------------------------- 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | token: |^M 2025-02-19 09:03:50.706 | 21708 | DEBUG | D | PRE AUTH EPA | Policy MACADDRanyofF8BXXXXXX28A returned 2004 |^M...

After updating MCS Catalog no changes are made to the VMs in the catalog

MCS catalog can be updated with a new master image with no errors. Howver when the VMs are rebooted from the DAAS console the VMS are not updated with the new image...

SAML URL monitor to login.microsoftonline.com is down

Continuous error logs on the Netscaler dashboard as below "8699 77 PPE-0 DBSMonServiceBindinglogin.microsoftonline.com:443tcp-defaultvpndbssvc1339998057: DOWN; Last response: Failure - Time out during TCP connection establishment stage"...

Citrix Session Printers are not mapped after logon

Unable to connect the printer from user end. Session printers are not mapped with following event in the Application event log: Event id: 1105 Cloud not add printer connection to printer \\, for the user username. Error condition is: The Printer name is invalid...

XenServer - How to change the management IP addresses of all hosts in the pool

This article describes how to change the management IP address of all hosts in the pool...

DaaS-Hosting-Failed to update the master image associated with the provisioning scheme.

While changing Master Image in AWS throwing an error "Failed to update the master image associated with the provisioning scheme." Export of error details: Transaction ID: xxxxxxxxxxxxxxxxx Action Name: MCUpdateMachineCatalog Exception: StudioErrorId : ProvisioningTaskError ErrorCategory :...

FIDO2 Authentication Does Not Work With Webpages Opened Using Microsoft Edge

Users are not able to Authenticate to a website that requires FIDO2 Authentication using a Yubikey when using Edge on VDA Devices. The users are constantly prompted to select a Smartcard device. The same users are able to Authenticate onto the same website using Chrome or Firefox inside the same...

ADC13.1-How to use a data set to evaluate or check the IP address in the X-Forwarded-For header

This article describes how to use a data set to evaluate or check the IP address in the X-Forwarded-For header...

Agent is not appraising the disk space

ADM Agent Disk Space gets full sporadically, and due to which the ADM Agent goes Down...

[Netscaler] Nitro API: Intermittent Incomplete /nitro/v1/config/rnat Responses

You might observe less data than expected in the response from NetScaler when calling the Nitro API /nitro/v1/config/rnat under the following conditions: NetScaler versions before 13.1 Build 53.24 NetScaler versions before 14.1 Build 21.57 Simultaneous 'show' calls are made from different session...

Cloud Netscaler console security advisory scan stuck on In Progress

Trying to run the security advisory scan from cloud.com but the scan and it looks like the previous three scans are not completing, It is stuck on "In Progress."...

Updating MCS catalog fails with error FailedToUnregisterMasterImageFromMdm

Error updating an MCS catalog in Citrix DAAS Action Name: MCCreateMachineCatalogInitialzation Exception: StudioErrorId : ProvisioningTaskError ErrorCategory : NotSpecified TaskState : FailedToUnregisterMasterImageFromMdm TaskStateInformation : Terminated ErrorId :...

[NetScaler] MPX LCD Display: Understanding Port Status Indicators

This article explains the meaning of the characters/icons shown on the NetScaler MPX LCD display...

XenServer and Citrix Hypervisor Security Update for CVE-2025-27462, CVE-2025-27463, CVE-2025-27464

Description of Problem Issues have been identified in the XenServer VM Tools for Windows that allow an attacker who has the ability to execute arbitrary unprivileged code within a guest Windows VM to compromise that same VM. This issue affects Windows VMs running on either XenServer 8.4 and Citri...

Citrix Workspace App for Windows crash due to .NET 9.0.5

If you have any Current Release of Citrix Workspace App 2409.10 or higher, or LTSR version 2402 CU3 or higher and .NET Desktop Runtime 9.0.5 installed, receiver.exe could crash post session launch. Post crash, the systray icon would show up only two options - Open and Exit...

[NetScaler] Disabled Interface Tx Laser Remains On After Reboot on MPX

You may observe that when an interface on a NetScaler MPX is disabled, and a user subsequently performs a reboot, the transmit Tx laser for that interface might not power off as intended. This can lead to the peer switch detecting the NetScaler's disabled interface as still being UP...

[NetScaler-Responder] Responder policy lead to Client "ERR_TOO_MANY_REDIRECTS"

You may want to redirect clients to a backend server's error page if a specific condition is met. The error page is hosted by the same vServer's backend service. You may configure the responder policy like below: add responder action RespErrorPageAct redirect ""/path/to/errorpage.html""...

NetScaler Console -14.1 43.50: Scheduled 2 stage upgrade fails for NetScaler in HA.

Upgrade Jobs fails for NetScaler when we configure scheduled 2 stage upgrade process from NetScaler Console. The jobs seem to create several subtasks that are failing. It completes upgrade on 1 NetScaler but does not upgrade the second one. This happens after upgrading the NetScaler Console to...

CVAD2203 - MCS catalog update failure with error "Machine <MasterImageVM> is not found"

MCS catalog update failure - Error - Machine is not found Terminating Error: An error occurred while publishing the image. Stack Trace: at Citrix.Orchestration.Base.PowerShellSdk.ProvisioningSchemeService.BackgroundTasks.ProvisioningSchemeTask.ThrowOnTerminatingErrorSdkProvisioningSchemeAction...

Profile Management VHDX auto expansion doesn't work CompactVHDIterations set to 1

Citrix profile Manager is configured with profile containers with the entire profile contained in the container Profile container auto-expansion is enabled Profile container VHD compression is also enabled The number of logoffs to trigger VHD disk compaction is configured to 1 Under the above...

User SID is displayed in Workspace UI after sign-in through SAML authentication

In the use case of SAML using Azure AD and AD identities for Workspace authentication, when end user sign-in Citrix Workspace, Workspace UI just shows a Security Identifier SID, instead of the user’s display name...

Resource has no available templates defined that are fully accessible by all hosts

When using the Citrx Virtual Desktop Setup Wizard in PVS to create a catalog, you get an error after choosing a host resource. Error : Resource has no available templates defined that are fully accessible by all hosts...

Citrix Licensing - Cannot connect to the license server with error id "XDDS:796F2703"

Citrix Studio cannot connect to the License Server 11.17.2 build 51000. It reports "certificate is not trusted or valid" with Error Id: XDDS:796F2703...

Citrix Workspace App - RemotePC ICA session freezes intermittently

Users may experience a session freezing issue while working on the ICA session to Remote PC. They may also see black screen on the console of the Remote PC with unresponsive keyboard and mouse after disconnecting from the ICA connection. The machine can be recovered only by rebooting the Remote P...

CVAD 2402 - Citrix Storefront SSO failed after change the Base URL

After the customer modified the Base URL setting to use a different hostname, single sign-on SSO functionality stopped working for all users across the environment. However, when the Base URL is reverted back to the original hostname of the StoreFront server, single sign-on resumes normal operati...

There are no apps and desktops available to you at this time [Incomplete DDC Certificate Update]

Storefront: There are no apps and desktops available to you at this time - Event logs ID: 4012: None of the Citrix XML Services configured for farm are in the list of active services, so none were contacted...

NetScaler HA sync on AWS fails when using Policy Based Routing (PBR)

HA sync between Primary NetScaler node and Secondary NetScaler node will fail when Policy Based Routing is configured, when NetScaler is hosted on Amazon Web Services AWS...

Citrix PVS Console and Server Not Visible to Other Admins After Installed via CLI

After installing the Citrix Provisioning Services PVS Console and server version 2402 CU2 on a Windows Server 2019 machine using command line, the application is only visible to the user who performed the installation. Other administrators logging into the same server do not see the Citrix PVS...

ELM 2409 || SMB share not working after ELM upgrade from 2403 to 2409

After migrating to new release and upgrading to version 2409 the SMB share is not longer connecting, this appears to be causing lots of crashfiles to generate which overt he week caused the applayering platform to stop functioning all together until the crash files were cleared...

NetScaler Gateway - App launch failure Error: "Session reconnection timeout"

Users attempts to launch an application externally via NetScaler Gateway and observed the below error Application launch fails consistently and the behavior is same with both web browser and the Citrix Workspace Application...

When Elastic layers are assigned to VDAs they may fail to attach if VDA's are launched from shutdown

Elastic layers intermittently fail to attach during session launch. Layers are assigned to VDAs not users Ulayersvc logs show the different group membership is determined during each launch Working: ActiveDirectoryInfoService: Machine Group SIDs: test\Domain Computers, test\group1, test\group2...

GACS - App Configuration settings not being applied to HTML5 Client

App Configuration service GACS settings to disable options in the Toolbar for HTML5 client are not applied...

NetScaler Error: "Unable to complete System File Update request" while saving custom portal theme

On the NetScaler GUI getting the error "Unable to complete System File Update request" while editing and saving the portal theme...

Update NetScaler Console certificate

NetScaler Console allows you to replace the default inbuilt database certificates with your own certificates from a trusted certificate authority. You can also configure your own cipher suites in the NetScaler Console database. This feature provides greater flexibility and security for your...

Graphical Issues with Citrix Workspace App 2503 and Intel GPUs

Customers using the Citrix Workspace App for Windows version 2503 or later on Windows endpoint devices, like the Microsoft Surface Pro laptops equipped with specific Intel GPUs using older Intel drivers, may encounter graphical anomalies. These issues can manifest as visual artefacts or black box...

Microsoft Security Update Validation Report May 2025

Microsoft’s May 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

DaaS - Client IP detection for Network Location Service

How is actual Client IP determined for Network location detection, when traffic from both internal and external Clients is routed through a Proxy? This is important when Clients access the Cloud Workspace through a Proxy, irrespective of Client's location - inside or outside corporate network...

Citrix NetScaler Automated backup job is failing after recent upgrade.

After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...

NetScaler Reset with Code 9222

Users report being unable to access a specific application. Investigation reveals that the NetScaler is resetting the packet with Reset Code 9222 when the server responds to the client’s request...

[NetScaler-AAA] The Radius action cannot be performed in nFactor auth

In nFactor auth, the Radius action is the second factor but cannot be performed. nFactor flow is simple and is like below: AAA vServer: DomainRadiusvS Login Schema: DualAuthSchema Authn Policy: DomainLDAPPol Expression: true Action: LDAPAct Next Factor if Success: RadiusPollable Login Schema:...

NetScaler - Error "Registration of device failed" when adding license server.

After recently deploying and registering a NetScaler Console formerly ADM Agent and trying to add it as a license server on a NetScaler device you get the error "Registration of device failed Sending request to mgmtserver failed"...