Microsoft Security Update Validation Report March 2022

Microsoft’s March 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

EPA scan Fails. Error: Failed sending epaq

Error: Failed sending Epaq We will see following error in plugin logs: 2022-01-14 07:03:05.860 | Tid: 10876 | ERROR | nsstartepa | 1030 | Failed sending GET epaq. Return code: -4 2022-01-14 07:03:05.860 | Tid: 10876 | DEBUG | nsstartepa returning Failed sending epaq Following message will be seen...

Driver Disk for Qlogic qla2xxx 10.02.06.03-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Version ---|--- qla2xxx| 10.02.06.03-k Note: If you use Dell hardware, ensure that you...

ADC Vulnerability: pwcount Cookie Missing HTTP Only Flag

Customer is failing PCI scan because the ADC Gateway server pwcount cookie is not showing with HTTP only flag set...

Driver Disk for Mellanox mlnxen 5.4-1.0.3.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Mellanox's mlnxen driver and wish to use the latest version of the following: Driver Module| Version ---|--- mlxcompat| Not applicable mlxfw| Not applicable auxiliary| Not applicable mlx5ib|...

Citrix Hypervisor Security Update

An issue has been identified in AMD CPU hardware that may allow code in a guest VM to infer the value of in-memory data in other guest VMs. Although this is not an issue in the Citrix Hypervisor product itself, Citrix is releasinghotfixes that include mitigations for this hardware issue. This iss...

Citrix Federated Authentication Service (FAS) Security Update

An issue has been identified in Citrix Federated Authentication Service FAS which causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider...

What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL

The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...

Citrix PVS 1912: VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule

VDA servers boot fails randomly by error "PXE -32: TFTP open timeout no operating system found" during Restart schedule...

Adding Physical Devices to Citrix Cloud using the Provisioning Devices Export Wizard. "No Devices Found to Export"

When attempting to add Physical Devices to Citrix Cloud using the Citrix Provisioning Devices Export Wizard. Getting a message "No Devices Found to Export" after selected the Device Collection to export. Note:Physical Devices can also be a VM that will not be in a Power Managed Catalog...

Secure Hub fails to authenticate with Citrix Gateway 13.0 83.27 when using an Advanced Authentication policy for LDAP

Secure Hub shows the following error when trying to connect to Citrix Gateway: "You may need to contact your administrator to verify your sign-on credentials". Closer inspection of network traffic through Citrix Gateway shows that there is no 'Set-Cookie' response found in the reply to "GET...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 7

Package name: xms10.13.0.10723.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: March 2022 Languages supported: English US...

MvpnExcludeDomains fails to take effect on iOS when using Citrix WebSSO micro VPN with Microsoft Endpoint Manager MAM (Intune)

Microsoft Edge or Citrix Secure Mail for iOS is configured with 'MvpnExcludeDomains'. When a user browses to a website that is listed under'MvpnExcludeDomains', the traffic is still sent through Citrix Gateway. This traffic is instead expected to be sent directly to the website not through Citrix...

Android Enterprise: Allow cross file copy and paste policy not working as expected after Citrix Endpoint Management upgraded to 22.2.0 (or later).

Customers who's restriction policy setting "Allow cross file copy and paste" is not working as expected after Citrix Endpoint Management CEM upgraded to 22.2.0 or later release...

Failed to start XenServer system with a new grub.cfg copied from another XenServer host.

Customer deleted grub.cfg by mistake, and copied the file from other host, but the affected host cannot boot now...

How to send Application Firewall messages to a separate syslog server

This article describes how to send Application Firewall messages to a separate Syslog Server. Requirements A secure Filetransfer utility such as WinSCP A utility to open a SSH console to the appliance such as PuTTY...

Access to XMLHTTPRequest at <URL> from origin <URL>has been blocked by CORS policy

When navigating to load balanced VIP, 'Cannot Complete Your Request' is seen .HAR file will showAccess to XMLHTTPRequest at from origin has been blocked by CORS policy...

VDAs are still trying to register with old DDCs post changing the list of DDCs

Post changing the Delivery Controllers list, VDAs are still trying to register with the old Controllers. Deletes the old Delivery Controllers FQDN on "ListOfDDCs" key in "HKLM\Software\Citrix\VirtualDesktopAgent\Policy" registry and restarts the Citrix desktop service, however the VDAs are still...

App Layering - User's not getting assigned app layers at login - Elastic layer assignment JSON files changing or being reset to default

Users with elastically assigned app layers do not have those app layers showing up at login. Elastic layering assignment files are changing on the network share used for elastic app layers. Layers.json ElasticLayerAssignments.json...

Citrix Provisioning Services - How To Gather CDF Traces

Starting in 1912 LTSR Citrix Provisioning Services improves on the CDF integration that kicked off in the earlier 7.0 days. This now includes the ability to natively maintain persistent rolling CDF trace logs on each PVS Server and Targets if necessary without the need for additional capture...

PVS Login error: Error "the domain\user does not have access to the farm" or "The specified AuthGroup does not exist" when Trying to Connect to PVS Farm

When trying to connect to a PVS Farm through the PVS Console, the following error is displayed and you cannot connect to the Farm. Error : "the domain\user does not have access to the farm" Error : "The specified AuthGroup does not exist"...

After upgrading to XS71ECU2065, failed to create vm snapshot

1. All vms with data on nfs Tintri storage take snapshot failed: 'The SR failed to complete the operation.' 2. The issue occurs on 3 pools with the same storage attached. 3. Vms on local storage can take snapshot successfully...

screen sharing on applications (Teams, WebEx and GoToMeeting) will not display screen properly until Workspace is minimized.

screen sharing on applications Teams, WebEx and GoToMeeting will not display screen properlyblack screen until Workspace is minimized...

Active Sync Gateway Connector isn't working with new devices since Update to 10.14 RP4

After upgrading from 10.14 RP3 - 10.14 RP4 any new enrolled device can't access to our Exchange Server via Active Sync Connector. After rebooting XenMobile server during the update process, we observe errors in the RemoteConfigService.log file as follows: Error |...

ELM : When we click on upgrade and try to browse we get the error : there was an error on processing web request : status code 400 (bad Request ) : Bad Request

Error : there was an error on processing web request : status code 400 bad Request : Bad Request...

Citrix SF Server Group - Tech Query

Is it possible to change the name of a Storefront Server that already belongs to a Server Group? When a Storefront Server belongs to an SF Server Group, it is not possible to change its name and, it is not recommended to do it even if the Storefront Server does not belong to any SF Server Group d...

Driver Disk for Microsemi smartpqi 2.1.16-030 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.16-030 Issues Resolved In this Driver Disk Includes general...

Error: Identity Assertion Logon failed Unrecognized Federated Authentication Service

Citrix FAS configured for authentication. Published Desktop or Published Application fails to launch with error: "Identity Assertion Logon failed. Unrecognized Federated Authentication Service"...

Citrix SSO on iOS fails to connect to Citrix Gateway, when using a port other than 443

Citrix SSO on iOS fails to connect to Citrix Gateway, when the connection URL uses a port other than 443...

Incoming audio issue on Microsoft Teams optimization for CWA Chrome OS

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet the below conditions are likely to see the issue are on Citrix Workspace app for Chrome OS AND have enabled Microsoft Teams optimization...

Microsoft Security Update Validation Report February 2022

Microsoft’s February 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Incoming audio issue on Microsoft Teams optimization for CWA HTML5

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet below conditions are likely to see the issue are on Citrix Workspace app for HTML5 AND have enabled Microsoft Teams optimization...

Session getting lost after few minutes if Citrix Workspace App for iOS is not running in the foreground

When launching a VDI session from an iOS device, if Citrix Workspace App for iOS CWA is not always on the front, then the session will be disconnected and lost after 5 minutes. End users would have to download a new ICA file again...

Issue launching sessions after setting up FAS Server - Event ID 101

After setting up FAS, apps / desktops are failing to launch. On FAS servers we see event ID 101. Log Name: Application Source: Citrix.Authentication.FederatedAuthenticationService Date: Date and Time Event ID: 101 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Descriptio...

MCS catalog creation fails when using dedicated host

Administrators may encounter the following error message when using MCS with Amazon AWS hosting connections: Transaction ID: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX Action Name: MCAddMachineInitialzation Exception: : Domain name\machine-name$, Failed to create the virtual machine; Domain...

Remote sessions are abruptly disconnected on Endpoints for Mac

Citrix Virtual Apps and Desktops sessions get abruptly disconnected on endpoints for Mac, which use Microsoft Defender...

Customize message on logon page

This article helps you to display a customized message below 'Log On' button...

Unable to delete expired certificate with no bindings

The following error is returned when trying to delete a certificate that has no bindings when clicking on "show bindings" "Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or...

Security Advisory for Citrix Hypervisor

Several security issues have been identified that affect Citrix Hypervisor: An issue has been identified that may allow privileged code in a PV guest VM to cause the host to crash. This issue has the following identifier: CVE-2022-23034 Note that PV guests are supported in Citrix XenServer 7.1 LT...

EPA fails after Chrome/Edge version 98 update

NOTE: It’s recommended to have latest version of EPA and Gateway Plugins to get optimum User experience as several items have been addressed in recent versions such as disconnection on reboot and standalone setup for plugin. Few of the issues in feedback , “disconnection on reboot”, and “standalo...

Adobe Acrobat PDF Maker Outlook Add-in not working when elastically layered.

Outlook add-in not working for Adobe PDF Maker. Attempting use Adobe Acrobat Reader and Acrobat Pro with one on the base image and the other as an elastic layer...

How to resolve certificate errors encountered after an upgrade of the ELM

Unable to create layers after an upgrade, One of the below errors is seen. "The issuing certificate does not have a usable private key" "Certificate doesn't contain private key"...

App Layering | How to take App layering Backup

...

Citrix Workspace App for Mac 2111: Zoom VDI Plugin and Cisco JVDI plugin failed to work after CWA for Mac 2111 upgrade

After upgrade to CWA for Mac 2111, Zoom VDI plugin and Cisco Jabber JVDI plugin failed to connect Zoom VDI and Cisco Jabber in Citrix Session...

Unable to start self-service on RHEL with CWA for Linux 21.x

This article is intended for Citrix administrators and technical teams only. The self-servicerun using CWA Linux 21.x in distributions like RHEL 7.x and CentOS 7.x will fail with ‘CXXABI1.3.8’ not found and ‘GLIBCXX3.4.20’ not found...

Citrix Workspace for Linux on Linux Mint : HDX optimization fails for MS Teams published App

MS Teams do not show as HDX Optimized status in MS Teams- About-Version. Microphone and Camera fail to get redirected...

Citrix Workspace App for iOS 22.1.0.5 on devices managed using SecureHub crashes during Application Launch

Citrix Workspace App 22.1.0.5 on iOS devices managed by Secure Hub crashes during Application launch. As of now ,this problem occurs with both on Prem and Cloud CVAD store and XenMobile...

PVS image process gets BSOD on boot up

Using the PVS Upgrade wizard to upgrade the PVS drivers failed. Because of this, we used reverse imaging to remove the PVS drivers and install the 1912 CU4 drivers. On the reboot, during creation of a new vdisk, BSOD encountered. ERROR: BNIStack faile. netork stack col not e initialie -This error...

Unable to Logon to Workspace Application externally, throws error "Unable to connect to the server"

Unable to connect to the server on Citrix workspace client when logging into it. It throws an error "unable to connect to the server". This happens on the Citrix Workspace app. However, when we use the workspace URL on the browser, then, we can authenticate successfully and also launch...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 4

Package name: xms10.14.0.10424.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: January 2022 Languages supported: English US Important notes about this update As a best practice, Citrix...