WEM 2203: Citrix WEM Service Citrix.Wem.Agent.Service.exe crash

After installing WEM Agent version 2203, the following system events are logged in the VDA: Event ID 1026: .NET Runtime Application: Citrix.Wem.Agent.Service.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. and Event ID 1000: Faulting...

Error: "Invalid connection address" when adding XenServer host connection

The following error is seen when attempting to add a Citrix Hypervisor XenServer hosting connection: Error Id: XDDS:49D3D465 Exception: Citrix.Console.Models.Exceptions.ScriptException Invalid connection address. Check that the address is valid and that it references a host in the XenServer pool...

CWA for Android: Users cannot upload file in Websites delivered through Secure Private Access

File upload options in websites published via Secure Private Access are disabled when accessed via CWA for Android...

How to view the current EPA Plug-in version on ADC

This article describe how to view current EPA Plug-in version on ADC...

Communication ports used for ADC, ADM

Customer's security team has scanned unusual traffic originated from SNIP from ports 4899,12345 etc.. Customer wanted to investigate on this...

Citrix Provisioning Console communication error while running on Azure

The Citrix Provisioning Console fails to communicate with Azure after TLS 1.0 has been disabled. This prevents the use of CVAD Setup Wizard or power management in Azure using the Citrix Provisioning Console or Citrix Provisioning PowerShell interfaces. This affects all version of Citrix...

Start Menu not responding with User Personalization Layer enabled

Win10 20H2 start menu stops responding to mouse left click...

PVS : Failed to created machines using CVAD wizard , error : Cannot create BDM partition for device

PVS : Failed to created machines using Citrix Virtual Apps and Desktop wizard , error : Cannot create BDM partition for device xxxxxxx PVSDllHypervisorPlatforms,,0,,5,EntryExit," targetFolder: Rxxxtestxxx Esx.cs5185: UploadFile",""PVSDllHypervisorPlatformsAO,,0,,5,Information," httpUrl:...

Driver Disk for Qlogic qla2xxx 10.02.07.00-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Version ---|--- qla2xxx| 10.02.07.00k Note: If you use Dell hardware, ensure that you...

PVS Accelerator - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Update? This PVS Accelerator update is for customers who use the PVS Accelerator provided with Citrix Hypervisor 8.2 Cumulative Update 1. It constitutes the following deliverable: File Name| CitrixHypervisor-8.2.1-pvsaccelerator-1.0.9.iso ---|--- Description| This file...

CWA Android : Citrix Workspace could not verify server or email address, Error code 437

CWA Android : Getting an error "Citrix workspace app could not verify the specified server or email address error code 437". when trying to logon to Workspace app for second time it shows this error...

Citrix ADC occasionally not sending SNI to backend server in Client Hello

When enabled server side SNI + Common Name on ADC by SSL service configuration or SSL Profile, you may sporadically find ADC not sending SNI to backend server, which may cause backend SSL handshake failure...

Cannot create CS vServer via GUI - Error "Invalid argument [disallowserviceaccess]"

Cannot create CS vServer via GUI - Error "Invalid argument disallowserviceaccess"...

When connected to Windows welcome/lock screen, the keyboard layout will revert to the system default

When presented with welcome/lock screen of Windows, the keyboard layout will revert to the system default layout of VDA on windows station. This is particularly problematic when changing passwords...

Driver Disk for Cisco fnic 2.0.0.85 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's fnic driver and wish to use the latest version of the following: Driver Module| Version ---|--- fnic| 2.0.0.85 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27509

A vulnerability has been discovered in Citrix ADC and Citrix Gateway which enables an attacker to create a specially crafted URL that redirects to a malicious website. This vulnerability has the following identifier: CVE-ID| Description| CWE| Pre-conditions ---|---|---|--- CVE-2022-27509|...

The license server found at this address is not compatible with this version of Citrix provisioning

Issue when connecting license server on Citrix Provisioning Configuration Wizard. The license server found at this address is not compatible with this version of Citrix provisioning...

What is Citrix ADC TCP retransmit timeout (RTO) value

You may need to know Citrix ADC's TCP retransmit timeout RTO for troubleshooting retransmission issues...

Troubleshoot Gray or Black Screen

Troubleshooting steps for gray / black screen: Problem| Solution ---|--- Check the event log when gray screen appears or seamless apps fail to launch| Error ID 1002CTX220418 Error ID 1005 and 1003CTX312452 Gray screen when launching Citrix Virtual Desktop with Citrix WEM Service Agent | CTX312240...

Citrix Cloud: Unable to create Host Connection in Azure cloud Error: "No Citrix CC was found"

While creating host connection on Citrix Cloud user receives: Error "No Citrix CC was found, either on the site or for the required zone. At least one CC is needed for the site."...

Driver Disk for Cisco enic 4.2.0.26 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.2.0.26 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Cannot activate Microsoft Pinyin IME in Windows server 2016/2019/2022

Cannot activate Microsoft Pinyin IME in Windows server 2016/2019/2022 VDA if client keyboard layout set “sync only once” mode Following are the details of the error, 1. VDA OS is a Windows server 2016/2019/2022 English version. 2. CWA Windows set the keyboard layout to “Sync only once – when the...

ICA session freezes 8-10 minutes after session launch

ICA session freezes 8-10 minutes after session launch. The session remains active, only the display is frozen, for example keyboard typing will continue through to session. Users can successfully reconnect to the session and work again for similar time before the session again appears frozen...

What is the Recommended Way of taking a Trace on Citrix ADC.

Recommendation While taking a Trace on Citrix ADC...

How to update the certificate on Citrix ADC when the certificate is expired.

How to update the certificate on Citrix ADC when the certificate is expired...

Secure Mail Issues with Android Push Notifications

SecureMail on android devices was not getting background push notifications, therefore users had to manually open SecureMail to check for email. When examining network traces from the ADC, we observe connections to certain Google owned IP addresses are being blocked...

STIG V-218773 - Recycling IIS App Pools on Storefront Servers

Address STIGV-218773 compatibility with Citrix Storefront vis a vis of the virtual memory an application pool uses...

Microsoft Security Update Validation Report July 2022

Microsoft’s July 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

App Layering - 2206 WMI applications relying on the Global Assembly Cache (GAC) fail to run.

WMI applications no longer work after upgrading to App Layering 2206. Specifically anything that uses the GACMSIL directory...

Citrix Hypervisor Security Bulletin for CVE-2022-23825 and CVE-2022-29900

AMD has disclosed an issue that affects AMD CPU hardware and may allow code inside a guest VM to infer the contents of RAM memory elsewhere on the host. Although this is not an issue in the Citrix Hypervisor product itself, Citrix is releasing hotfixes that include product changes to mitigate thi...

Login schema unable to be configured and the SELECT button grayed out

When configuring nFactor authentication, user is unable to select login schema xml in GUI page. The "SELECT" button is greyed out. Like below screenshot...

CWA for Android: We were unable to tunnel through the proxy

Viewer of CWA for Android fail to establish connection to VDA with below given error message We were unable to connect through the proxy. Error - 0 Logs show following error logs 02-10 05:44:55.989 1117 28821 W System.err: Caused by: android.system.GaiException: androidgetaddrinfo failed: EAINODA...

How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance

This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...

Configure Enterprise File Shares to Use Microsoft Hidden Shares on Windows Server 2008

This article describes how to configure Enterprise File Shares on Access Gateway Enterprise Edition appliance to use Microsoft hidden shares and the %username% environment variable on Microsoft Windows Server 2008. Requirements Remote Desktop Protocol RDP or console access to the Windows Active...

How to Manually Configure Certificate Trust in Web Interface for NetScaler

This article describes how to import a root Certificate Authority CA into the NetScaler's trusted certificate store using the CLI. Setting up the certificate trust is necessary when deploying Web Interface for NetScaler in Gateway Direct Mode with the Authentication Point set to Access Gateway: A...

Citrix ADC MPX/SDX Fortville NIC Err-Disabled when LLDP Is enabled on Peer Switch/Router

If Citrix ADC is connected to a switch/router via Fortville NIC For example 10G port on MPX 8900, interface will show UP for a moment then go to Err-Disabled state. Running "show interface" command on ADC, you can find ADC Fortville NIC is in Err-Disabled State, along with TX Stall andHang counts...

Shadow Options are Unavailable in the ICA Listener or Management Server Consoles

The shadowing options on the Advanced Connection Settings dialog box of the listener are unavailable or restricted. If the shadow options are unavailable, all options were restricted during installation. If some of the options appear and some do not, the missing options are the ones restricted...

While using FAS application launch fails with error "Cannot start app <Application Name>"

Application launch fails with error "Cannot start app ", Event ID 1 and 28 are logged on Storefront servers. Event ID: 1 Description: The Federated Authentication Server at: returned a server error: 1 for method AssertIdentity...

PVS : Failed to connect to the PVS API, error : Unable to connect to the remote server

PVS : Unable to connect to the PVS API, error - Unable to connect to the remote server...

How to add pooled capacity licenses to ADM Service

This article provides information on how to add pooled capacity licenses on ADM Service...

VDA Registration in Citrix Cloud Explained

This article explains how to register your cloud VDA...

How to apply pooled licenses to Citrix ADM

This article contains information on how to apply pooled licenses to Citrix ADM...

[CEM] Optional Solutions after Citrix QuickEdit EOL

You may need an alternative solution for securely editing documents on managed devices after Citrix QuickEdit EOL...

VDA Registration Step by Step and Troubleshoot common VDA Registration Failures

This article explains step by step process of VDA registration and troubleshoot common VDA registration failure issues...

[CEM] MAM enrollment Fails in Authentication - Password window pops-up Repeatedly

When you enroll MAM to CEM server through Citrix Gateway, you may observe password box pops-up repeatedly without any error. It means your password is correct but SSO from Citrix Gateway to CEM server fails. Follow is the sample of Secure Hub's debug log. " 2022-06-22T14:50:06.638+0800 ",,DEBUG1...

Unable to access ADC GUI while CLI is accessible.

ADC GUI is inaccessible. Ping and CLI is working. /Var folder was normal. Internal services are UP. GUI is enabled for NSIPif not use command : set ns ip -gui enabled...

Intermittent Session Launch Failure with Active/Active StoreFront Server Groups

Users intermittently fail to receive ICA files from StoreFront when trying to launch a new session in the following circumstances all of the below conditions must apply: Multiple active StoreFront server groups are in use, connected by GSLB, configured either for direct access or authentication...

[Citrix ADC] How to change password for local user

This article describes the method to change password of local user on Citrix ADC...

Citrix Hypervisor Security Update

A security issue has been identified in Citrix Hypervisor 7.1 LTSR CU2 that may allow privileged code in a PV guest VM to compromise the host. Citrix believes that there would be significant complexity in performing this attack in Citrix Hypervisor. The issue has the following CVE identifier:...

[Citrix Gateway] "Cannot complete your request" error after adding EPA configuration

In Citrix Gateway deployment, You may encounter "Cannot complete your request" error if adding a new EPA policy in AAA vServer. For example, you have the following existing configuration to implement post EPA scan based on group name: add authentication Policy NoAuthGroup01 -rule...