Some GPO's fail to apply when elastic layering is enabled

With Elastic Layering Apps Only enabled, gpupdate /force may report an error while applying some group policies...

How to change admin profile on Citrix NetScaler VPX instances configured in cluster

This article provides instruction to change the admin profile of a Citrix NetScaler VPX instance that is configured in a cluster on a Citrix NetScaler SDX appliance. Requirements Two Citrix NetScaler SDX appliances should be provisioned in advance with Citrix NetScaler VPX instances and they shou...

Bookmark missing in iPhone/Android Client after NetScaler upgrade to NS13.0 91.13

After NetScaler upgrade firmware to NS13.0.91.13, in CVPN accessing mode, theBookmark is missing iPhone / Android device...

License and ciphers are missing after upgrading to the latest version on 13.0 and 13.1

License and ciphers are missing after upgrade to the latest version on 13.0 and 13.1...

Workspace App toolbar "Devices" option is missing on specific Windows clients

Regarding to same user and VDA, Citrix Workspace App CWA toolbar "Devices" option can show normally on some Windows clients. But on specific Windows clients, "devices" option is missing...

Unable to provision new target devices when using Xendesktop Setup Wizard

Getting error message when we try to create Target devices using the XenDesktop wizard via PVS console. Error message "Cannot connect to the hypervisor at 'XXXXXX'. Failed to connect to the remote server. Unable to locate server. The underlying connection was closed: Could not establish trust...

Error: "The connection to "xxx" failed with status (Unknown client error 1110). SSL Error 31"

When accessing Applications via Citrix Gateway, the Applications' ICA file download successfully, but launching failed with below errors: "Unable to connect to the server. Contact your system administrator with following error: SSL Error 31: The operation completed successfully" Error 'The...

Unable to start the Net.Tcp Port Sharing service on the Storefront server

The Net.Tcp Port Sharing service is currently unable to start, and as a result, several Citrix services such as Citrix Subscription Store, Citrix Peer Resolution service, and Citrix Credential Wallet service are Stopped. Attempting to start the Net.Tcp Port Sharing service, an error message is...

Fail to add account with "Could not detect the specified account" error on Workspace APP For MAC

"Could not detect the specified account. The server might be invalid or may be unavailable at this time. Make sure the URL is correct and check your network connection. " error happen when adding ADC URL into MAC Workspace APP. MAC workspace current version is 2212. Can successfully launch resour...

Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982

Description of Problem An issue has been discovered in Citrix Hypervisor 8.2 CU1 LTSR that may allow malicious, privileged code in a guest VM to cause the host to crash. This issue has the following identifier: CVE-2023-34319 In addition, Intel has disclosed a security issue affecting certain Int...

External Users Unable to Authenticate via Workspace App

External users unable to authenticate the workspace app after upgrading the firmware to 13.0 build 33.52 but they can login through the web browser. Error : While logging through the workspace by giving the credentials it will again loop back to the same login page by throwing an error : "Incorre...

System user password Encryption method or Hash function type

NetScaler system user passwords are hashed using SHA1 on 11.1 and older releases. 12.0 use SHA512. RPC node passwords are encrypted using AES256 CBC from 11.0 onwards. RC4 is used before that. The keywords encrypted, hashmethod, encryptmethod example ENCMTHD3and kek are added internally based on...

Spoofed IP Addresses for FQDN Based Tunneling

To understand the concept of Spoofed IP address in Split Tunnel of FQDN based tunneling...

Web Application Firewall is blocking a valid image upload

We have observed that files with signature numbers starting with "FFD8 FFE0" are allowed through the Web Application Firewall WAF, but files with signature numbers starting with "FFD8 FFE1" are getting blocked...

Unable to open Citrix license manger console.

Chrome displays the error that "your clock is ahead/behind" and that it cannot validate the certificate when attempting to open the license server console locally on the license server. If you attempt to connect to the license server console remotely, there is no issue...

PVS Target Device hangs/freezes when placed under isolation by Windows Defender

The PVS Target VM goes into a hung state...

Machines are powered off even the power management is set to the preset 'always on'

Power management of the DaaS for Azure machine catalog is set to "always on", But after disconnecting the session, the machine may be shut down...

How to get dump file of random crash process with ProcDump tool

ProcDump can be activated as a postmortem debugger in Windows OS. The crash dump file can be automatically generated if a process crashed...

[FAS]Fail to Launch Desktop after Clicking Desktop Icon with Error "Cannot Start *****"

User fail to launch desktop after clicking desktop icon with error "cannot start " In fas server event log, there is error ''S123 failed to issue a certificate for user upn''...

How to convert PFX certificate without importing password to PEM certificate on ADC

This article provides instruction on how toconvert PFX certificate with importing password to PEM certificate in our document using "Import PKCS12" on GUI. Refer to...

No device licenses are currently available error when using Server OS Target Devices

PVS Target devices report"No device licenses are currently Available" Restarting the PVS targets will temporarily make the error go away but it will re-appear after a brief period Under Target Device properties the assigned license will be listed as "n/a" despite licenses being available In the P...

How To Troubleshoot High Packet or Management CPU Issue on Citrix ADC

CPU is a finite resource. Like many resources, there are limits to a CPU's capacity. The NetScaler appliance has two kinds of CPUs in general: The Management CPU and Packet CPU...

How to silent install workspace app for linux

Silent install workspace app for linux package. Use case: installation for multiple users using a script...

How to update password of domain user used In Citrix Virtual Apps and Citrix Virtual Desktops

This article explains how to update the password of domain user account used in Citrix Virtual Apps and Citrix Virtual Desktops...

Delay in adding a store in Citrix Workspace 2203 and higher

Citrix Workspace App delays in adding the Store and enumerating resources when done manually or using a policy. This can also be seen with SSON being used with CWA...

Unable to remove an invalid store from Storefront console

Unable to remove an invalid store from the Storefront console. Error: An error occurred while removing a Store Service...

How to export a VPX instance on an SDX to an XVA file

This article will describe how to export an XVA file of a VPX from an SDX. This file contains the entire contents of the VPX including an image of the VPX's file systems...

Cannot Add Store to Workspace App, Errors "Your Apps are not available at this time."

Cannot add store to workspace app Your Apps are not available at this time. Please try again in a few Minutes or contact your help desk with this information: Cannot Contact Store...

Difference between 'nsconmsg -K ./newnslog -d event' and 'show ns event'

This article explains how 'show ns event' nscli command is different from 'nsconmsg -d event' output...

Netscaler nstcpdump timestamp shows as UTC+0 instead of device local time(e.g. GMT+9).

Starting from version 13.1, when the TCPDUMP command is executed in CLI, GMT+0 time is applied instead of GMT+9 time set in Netscaler. Nstrace is normally applied as GMT+9 time, but only TCPDUMP is applied as GMT+0...

Azure MCS catalog update fails with FailedToStartImagePreparationVm - CreateUpdateVm-1 timed out

Unable to update a machine catalog for an Azure hosted MCS deployment. The MCS process fails early about 15% into the update The error message shows "Error - Terminated", and the action name is "MCUpdateMachineCatalog" The full stack trace is similar to this : TerminatedStack Trace: at...

Citrix Hypervisor Security Update for CVE-2023-20593

Description of Problem AMD has released updated microcode to address an issue with certain AMD CPUs. Although this is not an issue in the Citrix Hypervisor product itself, we have released a hotfix that includes this microcode to mitigate this CPU hardware issue. This issue has the following...

Your Logon Has Expired. Please Log on Again to Continue

Whenspecific users logon to Storefront Workspace App for web without Netscaler gateway, after typing the username/password, the below error appears: Your logon has expired. Please log on again to continue...

How to move VDA storage on Citrix Hypervisor

Move VDA disks to another storage on Citrix Hypervisor...

CtxMTHost.exe error "A referral was returned from the server" when launching a published application

Users report that they are receiving a non-blocking but annoying CtxMTHost.exe popup when launching published applications since the 2203 CU3 update. Error message : A referral was returned from the server...

Launch failure with CDViewer.exe crash on kernelbase.dll .Net Runtime with Workspace App 2305

Launching a published app or desktop using Workspace App for Windows version 2305.0 23.5.0 might fail with the following error seen in the Application event logs of the affected client, Exception 1 : CDViewer.exe ... System.Runtime.InteropServices.COMException ... Exception 2 : Failing applicatio...

Shortcuts to apps not seen in the start menu of the published desktop

Shortcuts are not visible in the published desktop or windows start menu even after the correct policies have been applied Enable Desktop shortcut...

How to restrict connections from clients\endpoints with specific versions of Citrix Workspace app

This article describes how to control connections to published applications or published desktops from specific versions of Citrix Workspace app for Windows. In the steps below, configure local group policies using the Windows Group Policy Object administrative template for Citrix Workspace app...

Upmoutlookhook64.dll error launching a Published Desktop session

Error "C:\Program Files\Citrix\User Profile Manager\upmoutlookhook64.dll is either not designed to run on Windows or it contains an error" when launching Outlook from a Published Desktop...

VDA machines stuck at Initializing for Hybrid Azure AD join

For Citrix MCS provisioned Hybrid Azure AD joined machine catalogs, the VDA machines might be stuck at “Initializing” status after startup. And when you login to the VDA machines and execute the “dsregcmd /status /debug” command, you will find below error message under “Diagnostic Data” “Server...

PVS target BSOD on CVhdMp.sys

The VMWare based PVS target boots from the vdisk to message "Attempting to set IP address on Boot NIC..." and 60 seconds later BSODs. The vdisk will boot successfully on the master target device, but not on other devices...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467

Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler Gateway13.1before13.1-49.13...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 3

Package name: xms10.15.0.10327.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: July 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this...

How to Convert a NetScaler MPX Appliance to a NetScaler SDX Appliance

This article contains information about converting NetScaler MPX appliances to NetScaler SDX appliances. Requirements You can use a field conversion kit to migrate a NetScaler MPX appliance to a NetScaler SDX appliance. The following table lists the details of the SDX Field Replaceable Unit FRU...

Citrix Secure Access for Windows fails to allow traffic through VPN after an upgrade to 23.x.x.x

After a successful connection to the Citrix Secure Access CSA client in full tunnel, none of the traffic passes through the VPN. Access to the applications using an IP address or DNS over the tunnel is blocked. The issue is limited to domain-joined machines where the Intranet IP address is...

Nested Virtualization Statement for Citrix Hypervisor

Query of "Does Citrix Hypervisor support Nested Virtualization in VMs"...

Driver Disk for Bnxt en 1.10.2_223.0.183.0 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Bnxt's en driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- bnxten| Ethernet/NIC| 1.10.2223.0.183.0 Issues resolved in this driver disk...

Citrix Cloud - Setting admin timeouts in Citrix Cloud portal

Requirement to know what the current timeout limit is when using Citrix Cloud and if it is possible to change the limit with regards to a Cloud Studio Admin session. Need to be able to force the user to have to login again after a certain amount of time...

User unable to open ICA file - No Error Reported

When end users access their Storefront and click on the desired published resource, the ICA file is downloaded as per customer configuration but nothing happens when the ICA file is double-clicked...

WEM Policy For Users Account to Restrict the CPU & Memory Usage

WEM Policy For Users Account to Restrict the CPU & Memory Usage. We need to some percentage CPU & Memory only to use the CPU & Memory where users are accessing the chrome browsers , etc applications in citrix...