Citrix Hypervisor Security Update

A security issue has been identified that affects Citrix Hypervisor. This issue may allow privileged code in a guest VM to cause the host to crash or become unresponsive. The issue only affects systems with Intel CPUs where the malicious guest VM has had a physical PCI device assigned to it by th...

Support Services Program Terms and Guidelines

This article is part of the Legacy Worldwide Support Services Delivery Guides, which focuses on delivery of support services. Please gohereto view the latest guides updated in 2024. Citrix reserves the right to make updates to its Customer Success Services packages and requirements, at its sole...

Unable to launch desktop via Gateway in invoked mode ( Client Detection done and selected workspace to Always Open ICA file )

Unable to launch desktop via Gateway in invoked mode. ICA launch works downloading the file, non invoked mode and clicking on it works In the non-working response for ICA file download, we see Riverbed headers highlighted and the "Connection: close" header being stripped...

Citrix PVS Configuration Wizard fails after upgrading from 1912 CU5 to 2109 or higher

After updating the PVS version to PVS 1912 Any CU to PVS 2109 or higher Including 2203 LTSR the Citrix CVAD Wizard will fail to create any new devices. A CDF trace would show the following errors in the logs: 3453,0,2022/03/29 11:31:53:91395,8044,8652,1,PVSDllMAPIAO,,0,,1,Error,"SqlException...

Gateway page stuck after authentication on Chrome browser v100

- Citrix Gateway integration with Storefront -Custom Themes based on RFWEBUI, but may appear with others too - Observed at CVPN and Regular Storefront Integrations. -Chrome Version updated to 100.0.4896.60 Official Build 64-bit or later triggers the issue. - Page is stuck spinning circle...

How to Create Application Firewall Policy for Chunk Requests to Bypass Application Firewall on Citrix ADC 8.1-9.3

This article describes how to create application firewall policy for chunk requests to bypass Application Firewall module. Background In NetScaler software release 8.1 to 9.3 the Application Firewall module does not support chunked request. As a workaround you can create an Application Firewall...

Failed to add device when registering with OTP

Failed to add device when configuring OTP One Time Password...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 5

Package name: xms10.14.0.10521.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: March 2022 Languages supported: English US Important notes about this update As a best...

Gateway Callback and / or XML Communication fails after upgrade to Storefront 2203

The issue occurs when customers upgrade from Storefront 1912 to 2203 and had TLS1.0 disabled prior to upgrading Does not occur on a clean install, or with TLS 1.0 enabled. In this scenario customers will encounter a TLS communication issue between Storefront and ADC / Storefront and Citrix Delive...

How to disable the tls1.1 and tls1.0 by SSL Profile

This article is to record a method to disable the specific tls version by SSL Profile for SSL Vserver...

Citrix - Gateway as a service - Error Codes For Session Launch Failure

Multiple Error codes during session launch failures...

Linux CWA2109 - KeyboardLayout=(Server Default) setting not work as expected

KeyboardLayout=Server Default in Linux CWA2109 is not working, while Linux CWA2108/2106 is working well...

Unable to launch published apps through the Gateway, no errors

-The customer cannot launch apps when logging in to the NetScaler gateway -The applications enumerate but won't launch, the progress popup comes up and disappears with no errors...

CWA for Chrome: Unable to copy-paste cells from Published Excel App to Google sheets opened locally

When you copy multiple cell values from Excel App via ICA to Google Sheets accessed from Local PC the values fail to get pasted to Google Sheets...

Published application hangs during Session Reconnect

The user logs on to the Receiver for Web site by a browser and Launch the Published application. The Client is configured to enter into Hybernation Sleep while it is not used. When the client resumes from sleep, the application is in hung state...

Drive state on SDX shows as degraded

Drive state is observed as clean, degraded under SDX RAID logical drives Checking the physical drive status shows the drive in in the slot state as Not Present...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

Citrix virtual app - You have exceeded your profile storage space

Some users report getting message "You have exceeded your profile storage space"...

Getting error: Couldn't agree a key exchange algorithm when accessing ADM CLI

Getting error: Couldn't agree a key exchange algorithm when accessing the ADM CLI after upgrading to 13.0.64.35...

Citrix Gateway and StoreFront Error After Upgrade "There are no apps or desktops available to you at this time."

Customer had upgraded ADC firmware to 13.0.71.44 from 13.0.58.30 during a change window. Post-upgrade when they authenticate and login to their Citrix Gateway URL and land on StoreFront, they get a blank screen with no applications and desktops being displayed. The issue is seen on all browsers...

Citrix-ADM using localhost IP 127.0.0.1 to send syslog traffic to Splunk server

Citrix-ADM 13.0 76.29 is noted to be using localhost IP to send Syslog traffic instead of ADM IP to external Syslog server. As a result, Citrix ADM is not able to send the Syslog traffic to Splunk server successfully as seen below. A tcpdump on Citrix ADM also shows traffic is generated and sent...

ADC 13.0 - Error : Please log on. The server met an error. Please try again or contact your administrator

Error after login to Citrix Gateway: "Please log on The server met an error. Please try again or contact your administrator" Logging in works fine internally through StoreFront server, but fails when trying to log on through Citrix Gateway. The session policy was noted to be looking for a referer...

How to add secure attribute for citrix_ns_id cookie to Citrix Application Firewall Profile

Adding secure attribute for citrixnsid cookie...

Power actions fail for all target devices from PVS console

When attempting to power manage Target Devices via Citrix PVS, the power actions for Restart and Shutdown are failing., i.e. right click Target Device Restart or Shutdown, the process starts but fails with status "Failed". No errors are reported in the event logs...

VDA not registered with the cloud connector Clock sync error

The VDA logon server reaching to different Geo Domain controller...

Unable to upgrade the Storefront from 7.15 LTSR CU7 to CU8; fails with "An error occurred during installation. Please ensure all the required prerequisites have been installed and run the installer again."

Unable to upgrade the SF from 7.15 LTSR CU7 to CU8; fails with "An error occurred during installation. Please ensure all the required prerequisites have been installed and run the installer again."...

How to check ADM agent to endpoint connectivity issue

Issue : Getting the alert message as ADM agent is down. Tenant ID: XXXXXXX Agent IP: XXXXXXXX Agent Host Name: XXXXXXX Diagnostics Alert: • https://adm-prod-backup-XXXXXXX.s3.amazonaws.com not reachable...

Citrix Xenserver 7.1CU2 to Citrix Hypervisor 8.2 upgrade gets stuck at Boot Screen for servers with HPE Smart Array

After the Host is booted into the installer kernel it gets stuck at following screen...

Citrix Provisioning Services - Slow Target Boot With Sentinel One Client

Provisioned Target Devices boot slow or initially boot ok in small batches but after a certain number of Devices are running Target performance continues to nose dive. Target devices get stuck at a black screen or "found vDisk" early in the PXE boot process. Target Devices show an uptick in the...

Citrix Workspace App for windows - Microphone not detected in MS Teams through HP laptop

When utilizing Microsoft Teams optimization through Citrix Workspace, Teams is unable to access the built-in microphone, despite other applications detecting it without issues...

Automatically launch the downloaded .ica files when using Chrome browser

When you try to launch a published application or desktop from a browser by browsing to storefront or gateway URL, an".ica"file is downloaded. You need to click the .ica file to launch the session instead of auto launch...

Gateway 12.1 55.247- after reboot/restart the Gateway is not working need to Enable/Disabled MBF for get access to the Gateway page

After ADC reboot/restart Customer unable to access Citrix Gateway page. Customer had to toggle MBF mode on ADC for restore access to Citrix Gateway Page...

CVAD Setup Wizard Fails To Complete When Using Citrix Cloud - Index Was Out Of Range

Running the Provisioning Services CVAD Setup Wizard to create or add new machines to a Citrix Cloud catalog fails to create the devices. Upon clicking finish, after specifying wizard parameters, the wizard closes and the following error appears: Error: Index was out of range. Must be non-negative...

Allow Citrix Secure Access app for macOS to access device certificate without asking for system credentials every time

If device certificate check has been configured on ADC, then the client app Citrix Secure Access must provide the device certificate present in the Mac’s Keychain. Since the certificate is placed in “System Keychain”, macOS might prompt for system credentials every time the user logs on. To avoid...

Keyboard layout dynamic sync not working with East Asian, Cyrillic language usernames

When a user using Windows English OS and the username chars are East Asian/Cyrillic Unicode, the Keyboard layout dynamic sync of the Citrix Workspace App will not work. The remote language bar’s language will always be the first-time synced language when the session is created. Changing Microsoft...

Microsoft Security Update Validation Report March 2022

Microsoft’s March 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

EPA scan Fails. Error: Failed sending epaq

Error: Failed sending Epaq We will see following error in plugin logs: 2022-01-14 07:03:05.860 | Tid: 10876 | ERROR | nsstartepa | 1030 | Failed sending GET epaq. Return code: -4 2022-01-14 07:03:05.860 | Tid: 10876 | DEBUG | nsstartepa returning Failed sending epaq Following message will be seen...

Driver Disk for Qlogic qla2xxx 10.02.06.03-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Version ---|--- qla2xxx| 10.02.06.03-k Note: If you use Dell hardware, ensure that you...

ADC Vulnerability: pwcount Cookie Missing HTTP Only Flag

Customer is failing PCI scan because the ADC Gateway server pwcount cookie is not showing with HTTP only flag set...

Driver Disk for Mellanox mlnxen 5.4-1.0.3.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Mellanox's mlnxen driver and wish to use the latest version of the following: Driver Module| Version ---|--- mlxcompat| Not applicable mlxfw| Not applicable auxiliary| Not applicable mlx5ib|...

Citrix Hypervisor Security Update

An issue has been identified in AMD CPU hardware that may allow code in a guest VM to infer the value of in-memory data in other guest VMs. Although this is not an issue in the Citrix Hypervisor product itself, Citrix is releasinghotfixes that include mitigations for this hardware issue. This iss...

What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL

The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...

Citrix Federated Authentication Service (FAS) Security Update

An issue has been identified in Citrix Federated Authentication Service FAS which causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider...

Adding Physical Devices to Citrix Cloud using the Provisioning Devices Export Wizard. "No Devices Found to Export"

When attempting to add Physical Devices to Citrix Cloud using the Citrix Provisioning Devices Export Wizard. Getting a message "No Devices Found to Export" after selected the Device Collection to export. Note:Physical Devices can also be a VM that will not be in a Power Managed Catalog...

Citrix PVS 1912: VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule

VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule...

Secure Hub fails to authenticate with Citrix Gateway 13.0 83.27 when using an Advanced Authentication policy for LDAP

Secure Hub shows the following error when trying to connect to Citrix Gateway: "You may need to contact your administrator to verify your sign-on credentials". Closer inspection of network traffic through Citrix Gateway shows that there is no 'Set-Cookie' response found in the reply to "GET...

MvpnExcludeDomains fails to take effect on iOS when using Citrix WebSSO micro VPN with Microsoft Endpoint Manager MAM (Intune)

Microsoft Edge or Citrix Secure Mail for iOS is configured with 'MvpnExcludeDomains'. When a user browses to a website that is listed under'MvpnExcludeDomains', the traffic is still sent through Citrix Gateway. This traffic is instead expected to be sent directly to the website not through Citrix...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 7

Package name: xms10.13.0.10723.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: March 2022 Languages supported: English US...

Android Enterprise: Allow cross file copy and paste policy not working as expected after Citrix Endpoint Management upgraded to 22.2.0 (or later).

Customers who's restriction policy setting "Allow cross file copy and paste" is not working as expected after Citrix Endpoint Management CEM upgraded to 22.2.0 or later release...

Failed to start XenServer system with a new grub.cfg copied from another XenServer host.

Customer deleted grub.cfg by mistake, and copied the file from other host, but the affected host cannot boot now...