Citrix Hypervisor Security Bulletin for CVE-2022-3643, CVE-2022-42328 & CVE-2022-42329

Several security issues have been identified in Citrix Hypervisor 8.2 LTSR CU1, each of which may allow a privileged user in a guest VM to cause the host to become unresponsive or crash. These issues have the following CVE identifiers: CVE-2022-3643 CVE-2022-42328 CVE-2022-42329...

Clean up stale Azure AD devices with script

Under normal circumstances, when powering off Azure Active Directory AAD joined non-persistent VM, MCS agent inside VM will perform Azure AD leave and remove device record from Azure Active Directory. Occasionally, the action may fail, it will leave stale device in Azure AD. Recently, Azure AD...

Microsoft Security Update Validation Report December 2022

Microsoft’s December 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Driver Disk for Microsemi smartpqi 2.1.20-035 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.20-035 Issues Resolved In this Driver Disk Includes general...

Auto desktop launch feature is not working for receiver for web

The auto desktop launch feature is not working...

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites

Storefront Console crashes when clicking configuration at node Manage Receiver for Web sites.The Store Front has successfully upgraded from 7.15 to 2203 LTSR...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518

A vulnerability has been discovered in Citrix Gateway and Citrix ADC, listed below, that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance. CVE-ID| Description| CWE| Affected Products| Pre-conditions ---|---|---|---|---...

Low PVS boot throughput

A customer observed that PVS target device boot statistics, viewed in status tray tool, showed low throughput and a long boot time on existing target devices. Testing a new vdisk, minimal install with just PVS target device software and not domain joined, showed much quicker boot time and higher...

Devices tab was missing from toolbar when launching desktop

Devices tab missing when launching desktop...

How to get the installation date of XenServer

How to get the installation date of XenServer...

Failed to Publish FAS Certificate Template with "RPC server unavailable. 0x800706ba"

Failed to publishFAS certificate Template with"An error occurred: CCertAdmin::GetCAProperty:RPC server unavailable. 0x800706ba". On Domain Controller,there is an error message in Event Log "RPCCAUTHNLEVELPKTINTEGRITY"and EventID is 10036...

Mac OS input source not synchronized correctly to remote applications or desktops

With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...

Driver Disk for Qlogic fastlinq 8.70.12.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware who are running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's fastlinq driver and wish to use the latest version of the following: Driver Module| Version ---|--- qed| 8.70.12.0 qede| 8.70.12.0 qedf| 8.70.12.0 qedi| 8.70.12....

Windows 11 VDA machines stuck at Initializing for Azure AD or Hybrid Azure AD

For Citrix MCS provisioned Azure AD or Hybrid Azure AD joined machine catalogs that use Windows 11 22H2 or 23H2 as master VMs’ OS, the VDA machines might be stuck at “Initializing” status after startup. And when you login to the VDA machines and execute the “dsregcmd /status” command, “Provider:...

Enable Screen sharing for BYOD Chromebook devices using Citrix Cloud

Users who use bring your own device Chromebook require teams and the ability to screen share...

XenMobile Sever - iOS Devices failing to deploy apps and policies - TOPIC MISMATCH Error

Devices not getting latest changes, and on the XMS Console we see the device information is not up to date last login, OS version, App Inventory On the logs see entries like: TOPIC MISMATCH errors 2021-10-04T16:03:42.153-0600 | Basic XXXXXXXXX| WARN | http-nio-10443-exec-3752 |...

Citrix Analytics shows many 'Not Categorized' items under Performance Tab

Citrix Analytics will show manyNot Categorized items Citrix Cloud Monitor will show RTT asN/A...

Checking PVS targets for processes with high disk reads

In PVS environments when weak target device performance is encountered, slow boot, slow application opening, there are a several places to check for insights into the source of the problem. One common source ofweak target device performance is an unexpected volume of read requests from target...

Error "Please login: Server has encountered error, please try again or contact your administratror"

After input username and password in Gateway login page, below error message displayed:. "Please login: Server has encountered error, please try again or contact your administratror"...

ADM License warning - "Licenses will be reduced to 2"

ADM warning message showing Licenses will be reduced on VIPs from 30 down to 2. Error message appears post upgrade to13.1-12.x or later...

CWA for Mac: How to disable Auto-Launch of CWA on MacOS

How to disable Auto-Launch of CWA on MacOS?...

Windows Auto Logon Issue with latest Windows 10,11 Updates

TheAlways-On VPN before Windows Logonformally Always On service feature enables users to establish a machine level VPN tunnel even before a user logs on to a Windows system. The tunnel remains active until the machine shuts down. After the user logs on, the machine-level VPN tunnel is taken over ...

ADC-13.0-Issue is with unable to upgrade ADC VPX

During Upgrade of VPX you are faced with error message, "License server version 11.14.0.2 not compatible with client version 11.16.6.0 Either upgrade the ADM to ensure that it is running", during upgrade process...

Unable to Launch the Webex and Teams Meeting from Citrix Secure Web on Android

Unable to Launch the Webex or Teams Meeting from Citrix Secure Web on Android Error message "Blocked. Access to this site is restricted by admin policy" or blank page...

Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway

Post external log on to Netscaler Gateway you receive a server error with the following text: Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway...

VDA upgrade service fails when upgrading CU version

VDA does not upgrade when upgrading to next CU version. In Studio the upgrade starts, goes into In-Progress and moves to completed however, the installed version does not change. After a minute or two, the status moves back to upgrade available...

PVS: Targets fail to boot since it attempts to boot from wrong PVS servers

PVS created a new PVS site and updated option 66 and 67 in the DHCP servers, but Targets failed to connect to the PVS servers in the new PVS site during boot, and it continued to use the PVS servers in old PVS Site...

Microsoft Security Update Validation Report November 2022

Microsoft’s November 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

WEM - Exception: Failed to determine site for agent machine

WEM Agent does not get registered. Agent log 4:41:56 PM Exception - VuemAgentServiceConfigurationHelper.UpdateConfigurationSet : Failed to determine site for agent machine. 4:41:56 PM Exception - VuemAgentServiceConfigurationHelper.ReadRepositorySettings : Error happened while getting global...

Citrix Gateway and Citrix ADC Security Bulletin for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516

Vulnerabilities have been discovered in Citrix Gateway and Citrix ADC, listed below. Note that only appliances that are operating as a Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy are affected by the first issue, which is rated as a Critical severity vulnerability. CVE-ID| Description| CWE| Affect...

Citrix ADC - HTTP Request Smuggling Reference Guide

HTTP request smuggling is a type of attack that takes advantage of differences between the way sequences of HTTP requests are processed by a web server and one or more intermediate devices, like a Citrix ADC load balancer or other Traffic Management features. HTTP Request smuggling attacks are...

Driver Disk for Qlogic qla2xxx 10.02.08.01-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Version ---|--- qla2xxx| 10.02.08.01k Note: This driver version applies to all hardware including Dell...

Upcoming changes in XenCenter

To provide you with greater security, the Citrix Insight Services CIS website has extended its multi-factor authentication requirement to applications, like XenCenter, that use the API to upload data. As a result, we are making changes to how XenCenter interacts with CIS. Important : XenCenter...

Driver Disk for Intel ice 1.8.8 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Intel's ice driver and wish to use the latest version of the following: Driver Module| Version ---|--- ice| 1.8.8 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Cannot complete your request on Gateway URL after adding new domain to trusted domains

After adding a trusted domain to Storefront. when you go to "Manage Authentication Methods", click on the settings, click on "Configure trusted Domains" and add new domains, when users try to go to the gateway URL, you may get either "Login Expired" or "Cannot Complete your Request|" error messag...

Citrix Hypervisor Security Bulletin for CVE-2022-42316, CVE-2022-42317 & CVE-2022-42318

Description of Problem Several security issues have been identified in Citrix Hypervisor 8.2 LTSR CU1, each of which may allow a privileged user in a guest VM to cause part of the management service to become unresponsive, resulting in the inability to create new guests or modify the configuratio...

How to configure Email OTP without email ID registration

This article covers two kind of Email OTP authentication methods, which deployed in Citrix ADC Nfactor AAA virtual server. How to configure standard withemail ID registration email OTP How to configure simple without email ID registrationemail OTP...

PVS : The Stream service restarts periodically

Stream service restarts periodically...

PVS - Unable to add new machines to existing Catalog

Unable to add new target devices to existing catalog using Virtual Desktop setup wizard/Streamed Wizard...

How to manually upload Telemetry data to CIS

This article explains the steps required when manually uploading the Telemetry data to CIS. Prerequisites V11.17.2 build 40000 license server or newer You must disable the automatic data upload before choosing to upload manually. Perform the following steps on your IT-managed/on-prem license serv...

A System Reserved partition is visible in a vDisk when it is created using the Imaging Wizard.

Using the Imaging Wizard a new vDisk is created. A drive letter is assigned to the System Reserved partition and it is visible in the new vDisk. It is expected behavior by design. The System Reserved partition should be invisible to users. Before publishing the vDisk to target devices, the drive...

Error connecting to PVS Farm with Credentials from trusted domain using Selective Trust

When connecting to the PVS Farm "localhost" with credentials from a trusted domain, an error is thrown that reads: "Error Domain Controller" and "unable to connect to the domain Controller if any or the default rootDSE. Error code: 60075030, message: Access is denied Exception from HRESULT:...

DNS resolution issue with new 13.0.86.17 client

ADC version 13.0.86.17, with 'Citrix Secure Access' VPN client the same version, shows as version 22.2.1.103 in the client. The old client was 13.0.58.30 shown as 21.3.1.2 1. Some users report that on the new client they cannot resolve any DNS record...

Responder policy cannot be evaluated for Citrix Gateway "/cgi/login" request

Responder policy cannot be hit for Gateway "/cgi/login" http requst even policy expression is evaluated as TRUE...

Error: "File too large" when upload customized login schema xml file to ADC

1. When add login schema via ADC cli, below erro will prompt: 2. When add login schema via, below GUI error will show:...

http request is blocked by http callout policy with blank web page

If the customer bind responder policy that refered http callout policy to ADC appliance global bind point. User's access to LB Virtual server will show blank page...

ERROR : Dotmim.Sync.SyncException: SQLite Error 14: 'unable to open database file'.

On Broker machine event viewer : Dotmim.Sync.SyncException: SQLite Error 14: 'unable to open database file'. --- Microsoft.Data.Sqlite.SqliteException: SQLite Error 14: 'unable to open database file'. à Microsoft.Data.Sqlite.SqliteException.ThrowExceptionForRCInt32 rc, sqlite3 db à...

[NetScaler] Black Screen in launching ICA when enabling HDX Insight

Launching ICA through Citrix Gateway with HDX Insight enabled, you may see black screen issuerandomly for about 3040 seconds in the beginning of desktop view on Citrix Workspace App...

How to Generate a support file for ADC

This article shows users how to generate a support bundle from there ADC device...

Joining new DDC to Multi-Zone CVAD Site fails

New DDC join process to a multi-zone CVAD site spread across different datacenters fails. This happens at the step when each service on the new DDC tries to register with Citrix Configuration service...