Storefront - Storefront URL becomes inaccessible after adding HTTP Response Header

After mitigating the HTTP Security Header Not Detected Vulnerability in IIS by adding HTTP Response Headers, the Citrix Storefront url may become inaccessible. Users might be presented with the "500 Internal server error" message...

Secure Mail calendar Widget on Android

While customer is able to add the Secure Mail calendar widget to the device home screen, they are unable to do so for devices enrolled in WPCOD mode"Work Profile / Corporate Owned Device"...

[CGS] Citrix Cloud Workspace launching Desktop via CSG is stuck at "connecting" and failed

Citrix Cloud Workspace launching Desktop/App via CSG Citrix Gateway Service is stuck at "connecting" and failed. In the Netscaler Gateway Service logs, seen in ns.log: Event "Application launch failed. Connect command sent to Controller."...

Workspace Error "Unable to add account with the given server URL" after enabling WAF on ADC

After enabling WAF on ADC, the following error is seen while adding Citrix Gateway URL on Workspace : "Unable to add account with the given server URL. Ensure that it is correct or enter your email address." Traffic Flow Brief Topo: Workspace LB SSL Virtual Serveron ADC1 , WAF enabled Citrix...

CWA HTML5 shows incorrect version

After upgrading CWA HTML5 from v2101 to any later versionsE.g. v2309 in the storefront server, the About dialog still shows the old version. The Storefront Console however still shows the correct version...

Device enrollment fails with nFactor authentication enabled on latest Netscaler versions

XenMobile device Enrollment fails while authentication with Gateway with nFactor enabled on latest version of NetScaler...

Delay with enumerating resources after logging in to Citrix Workspace App during first login

In an isolated environment where there is no access to external sites ,there is delay when adding account/store in Workspace App...

Unable to update WAF Signatures "File too large"

Customer is unable to update NetScaler AppFw Signatures from the GUI and receives an error "File too large" when attempting the WAF signature update...

How to check write cache disk usage from XenServer Hypervisor

How to check Write Cache Disk usage from XenServer hypervisor...

How to know when VM was created

Determine when a VM was created...

[NetScaler] Graceful disable service may trigger TCP RESET immediately

According to eDoc:Graceful shutdown of services. If we disable an HTTP service with the following command: disable service HTTPSvcName 0 -graceFul YES We expect to see all ESTABLISHED connections alive. But in real cases, we may see partial connections got TCP RST from NetScaler ADC immediately...

CWA for Chrome OS 23.3.0.40 - keyboard is unresponsive inside the Citrix session

Symptom 1: The keyboard is non-responsive when running in Kiosk mode though it is responsive at the Citrix login in kiosk mode users can enter their username and password but becomes non-responsive inside the Citrix session. Symptom 2: 1. Launch CWA for Chrome OS desktop session 2. Go to the full...

Role of Spoofed IP address in FQDN Based Tunneling

What is the role of Spoofed IP address in FQDN Based Tunneling...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 10

Package name: xms10.14.0.11013.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10942.bin, xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and...

Connection Interrupted. Citrix Workspace will try to reconnect in over an hour

Connection Interrupted. Citrix Workspace will try to reconnect in over an hour...

Workspace App for Mac - Known Issue - March 23rd 2023

When using Citrix Workspace App for Mac, users may receive the following errors: - Unable to communicate with Authentication Manager service - The Store doesn't exist. Please retry or contact support. - Citrix Workspace cannot connect to the server. Check your network connection. -Could not...

Anonymous LOGOUT logs explanation

ns.log： Dec 31 16:13:57 172.31.248.107 12/31/2022:08:13:57 GMT PHQCXADC01 0-PPE-0 : default SSLVPN Message 263167 0 : "Created nFactor session for user Anonymous" Dec 31 16:13:57 172.31.248.107 12/31/2022:08:13:57 GMT PHQCXADC01 0-PPE-0 : default SSLVPN Message 263174 0 : "AAAD API:...

No authentication is required when accessing another different Gateway VServer

Two Gateway Vservers with the same FQDN and VIP are created onthe same ADC but listed on the different ports8443 and 9443. If logging into Citrix Gateway1 with port 8443 first, and then open a new browser tab page to access Citrix Gateway2 with port 9443, users can see the published resources...

[NetScaler] LDAP password can be changed with an incorrect Radius Passcode

Below is an example of common 2Factor authentication flow: Root factor: Start Login Schema XML = /nsconfig/loginschema/LoginSchema/DualAuth.xml Adv Authn Policy = LDAPPol Rule = true Action = LDAPAct Next Factor if Success = RadiusFactor Login Schema Profile = LSCHEMAINT Adv Authn Policy =...

The certificate authority is invalid or incorrect

EPA scan error. "Access Denied: your device does not meet requirements for logging on" "The certificate authority is invalid or incorrect." from nspex.txt...

How to increase space on Citrix ADC VPX instance

How to increase space on Citrix ADC VPX instance?...

How to disable StoreFront's http communication

How to disable StoreFront's http communication...

ADM Service: How to identify which VIPs belong to which NetScaler

To quickly identify within ADM / ADM Service in which NetScalers a specific VIP LB/CS/GW,etc. may be configured...

How to disable/enable a service (LB, GSLB, etc.) using the NetScaler's CLI

How to disable/enable a service LB, GSLB, etc. using CLI...

One client failed on installing CWA due to it failed detecting the Edge Webview2 installation

One client failed on installing CWA in an intranet environment due to it failed detecting the Edge Webview2 installation.Manually install Webview2 with full-blown installer again still can't fix this issue...

How to specify command line parameters when distributing a WEM application

To deploy applications via Workspace Environment management with additional command line parameters...

Active TLS1.1 and Weak Ciphers Causing environment Vulnerabilities

This Tech Paper aims to convey what someone skilled in ADC would configure as a generic implementation to receive an A+ grade atQualys SSL Labs...

Microsoft Security Update Validation Report March 2023

Microsoft’s March 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Virtual Application Launch Failure with error "The published resource is not available currently"

Launch virtual app failure via Gateway with error :"The published resource is not available currently"...

"pb_op_longer_hb for critical process NSPPE-00 (1285) 150 secs" related log explanation

ns.log: Mar 9 22:29:11 gash-vpx-uat2 nssync: NSSYNC: SYNC started.... Mar 9 22:29:11 10.168.253.225 03/09/2023:14:29:11 GMT gash-vpx-uat2 0-PPE-0 : default EVENT STATECHANGE 4713434 0 : Device "self node 10.168.253.225" - State "SYNC start " Mar 9 22:29:12 gash-vpx-uat2 nssync: Send HA File sync ...

Citrix Secure Access setup failed in Windows11 (ARM64 based)

CitrixSecure Accesssetup failed in Windows11 ARM64 based with the below error "Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network ConfigurationOperators group......"...

Workspace App 2203 LTSR CU2 displays a blank white box after login

Citrix Workspace App displays a blank white box after login. Issue does not happen when testing older versions of Citrix Workspace App such as 1912CU3...

Syslog not being sent to external syslog server from Citrix Cloud Gateway Service (Adaptive Auth)

Configure external syslog server when using Cloud Gateway as a Service for Adaptive Authentication...

How to configure ARM templates using the new Azure App Layering Azure connector

How to configure ARM templates using the new Azure App Layering Azure connector...

CWA displaying apps differently depending on which Storefront server you connect to

When connecting to a new Storefront server, customer is seeing icons that are displayed differently then they do when connecting to another Storefront server running the same version. Connected to the 1st server, the apps looked like this: Connected to the 2nd server, the apps looked like this:...

How to Hide HTML5 Workspace App Toolbar Download Option?

Hide 'Download' option in HTML5 Workspace App toolbar...

Updating Expired DigiCertSHA2SecureServerCA Certificate in Citrix Workspace app for Linux

Users may face issues while connecting to an HDX session...

Cannot complete request when accessing HTTPS Storefront URL

When users access the storefront webpage they get an error saying "cannot complete request" on the detect workspace app / receiver web page...

PVS - Imaging Wizard fails when creating Vdisk. Error after restart 'Imaging wizard did not restart'

When attempting to create a vDisk, the Imaging Wizard gets as far as requiring a reboot, but after the restart returns the error 'Imaging wizard did not restart'...

PVS server lost the connection to vDisk after storage failover.

vDisks are located in NAS storage which is created as failover group. After storage failover occurs, PVS server loses the connection to the vDisks and does not automatically recover it. Target devices freeze during that time since the vDisk I/O to NAS storage stops...

Several PVS target devices can not be registered

One or several PVS targets can not be registered even after rebooting while other targets are registered with DDC successfully...

Citrix PVS target device BSODs upon installing Zscaler client.

Installing the Zscaler client on Citrix PVS target device causes a blue screen of death. Target device crashes with exception code 7e caused by access violation of Citrix Virtual Hard Disk driver,CVhdMp.sys...

Citrix Workspace App Fails to Upgrade with an Error 0x800951C2

Citrix Workspace App fail to upgrade with an error 0x800951C2 when upgrading Server VDA from 1912 CU4 to 2203 CU2...

Requirement to update Virtual Hosting Pool ID after moving machines to new host connection

After moving virtual machines from an old host connection to a new host connection, you may experience issues with power managing machines from the PVS console or if VMs have been created with BDM Boot Partition, you may not be able to update the BDM Boot partition when you add an additional PVS...

Service 'Citrix Workspace Updater Service' (CWAUpdaterService) Failed to Start When Installing CWA

Failed to install CWA. Error message shows:Service 'Citrix Workspace Updater Service' CWAUpdaterService failed to start, Verify that you have sufficient privileges to start system services...

Unable to use port 8080 for Citrix Cloud WEM Services connectivity

When setting up Cloud WEM Services in your environment, you may have a requirement to use a different port than port 8080 for communication as it may be blocked due to internal policies. An alternative port is required to be used both for the local agent and for listening on the Cloud Connector...

Virtual Servers and Service Groups DOWN after secondary ADC upgrade

Virtual Servers and Service Groups DOWN after secondary NetScaler upgrade...

How to migrate an existing ADM instance to a newly deployed ADM server.

To demonstrate how to migrate an existing ADM instance to a newly deployed ADM server...

Web log client "login unsuccessful" using nsroot

C:\NSWL\binnswl -start -f c:\nswl\etc\log.conf Debug log file is ./nswl.log-130620221156 & Log level is 1 NetScaler weblogging configuration file c:\nswl\etc\log.conf is correct Login unsuccessful nspe=redacted IP:user=nsroot!!!...

Provide a report that can display all applications installed on a device

Customer looking for a way to get a list or inventory of all apps from a device. The app inventory policy is not sufficient or detailed enough. Or is there a way to get the list of all apps installed on all devices, so the customer can filter out the apps. Reporting Devices and apps section only...