PXEChecker for Citrix Provisioning Services

Description PXEChecker is tool designed to troubleshoot configuration and environment related issues during the PXE boot process in Citrix Provisioning Services PVS. PXEChecker has two different tests: 1. Legacy BIOS Test.- Simulates the PXE boot process and analyzes the DHCP options on the DHCP...

Fix Incorrect Service Endpoint in XA/XD sites

Note: This script applies to XA/XD 7.0 and above. Overview This PowerShell script attempts to fix any bad, missing,changed, or incorrect service endpoints in a site. Please note: You can download the required file from the Citrix downloads website by visiting the following...

Self-Service Password Reset Central Store Creation Tool

SSPR Central Store Creation Tool Created Date: Sept 23, 2016 Updated Date: Sept 23, 2016 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to t...

LSQuery - License Server Data Collection Tool

Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. LSQuery Created Date: April 24, 2012 Updated Date: September 13, 20...

Citrix Scout

NOTE: The latest version of Scout 3.x is intended to be run on Citrix Virtual Apps and Desktops 7.14 and newer. For additional information, please refer to Citrix Product Documentation You can download the required file from the Citrix downloads website by visiting the following...

CVE-2014-1910 - SSL Certificate Validation Vulnerability in the Citrix ShareFile Mobile Application for Android and the Citrix ShareFile Mobile for Tablets Application for Android

Description of Problem A vulnerability has been identified in the Citrix ShareFile Mobile application for Android and the Citrix ShareFile Mobile for Tablets application for Android that could result in SSL certificates being incorrectly validated. This vulnerability has been assigned the followi...

Citrix Hypervisor Security Update

Description of Problem An issue has been discovered in Citrix Hypervisor that, if exploited, could potentially allow an attacker on the management network to enumerate valid administrative account usernames. Note that this attack does not disclose the corresponding passwords and does grant not...

Citrix Diagnostics Toolkit - 64bit Edition

Citrix Diagnostic Toolkit x64 – C.D.T Citrix Diagnostic Toolkit x64 – C.D.T| Description| Important Notes about This Release ---|---|--- Citrix Tools Included| Prerequisites| Why does C.D.T. use an Installer Installing C.D.T.| Start Menu Integration| Tracing Options and Setup XenApp Tracing Optio...

Citrix Quick Launch Tool - Testing Application and Desktop Launch

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Citrix QuickLaunch Tool v4.2 Created Date: 12/20/2016 Modified Date: 12/30/2020 Description Citrix QuickLaunch has been written to offer...

Citrix SD-WAN Multiple Security Updates

Description of Problem Multiple vulnerabilities have been identified in the management console of the Citrix SD-WAN Center and NetScaler SD-WAN Center. Multiple Vulnerabilities have also been identified on the Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. Collectively, these...

Secure Mail Test Tool

Citrix Endpoint Management, using technology formerly called XenMobile Introduction Secure Mail Test Toolis designed to help troubleshoot the ActiveSync servers for their readiness to be deployed with XenMobile environment. This tool can be used specifically for ensuring the proper functioning of...

CVE-2016-6276 - Vulnerability in Citrix Linux VDA (formerly known as Linux Virtual Desktop) Could Result in Privilege Escalation

Description of Problem A vulnerability has been identified in the Linux Virtual Delivery Agent VDA component of Citrix XenDesktop that could allow a local user to execute commands as root on the Linux VDA. The vulnerability affects all versions of the Citrix Linux VDA earlier than version 1.4.0...

Smart Scale to Autoscale Migration

Table of Contents Manual Migration --- Automated Migration Prerequisites Migrate Good to know Important: This article is applicable only if you have the Sites section in Smart Scale. Sites that use the Virtual Apps and Desktops service appear as “Cloudxdsite” by default. To view Sites, go to Citr...

Session Recording Migration Tool

Description Use the Session Recording migration tool to facilitate the migration from SmartAuditor to Session Recording. The tool processes the SmartAuditor legacy recording files, and extracts and rebuilds metadata in the Session Recording Database to support the search and playback of the legac...

Citrix App Layering 4.x: PVS Connector Script to Convert VHD to VHDX

Introduction When publishing an image to PVS the Citrix App Layering PVS Connector allows for running a PowerShell script after an image in uploaded to the PVS Store and Added as a vDisk. This sample script is intended to show Citrix customers how this scripting can be used to increase...

Citrix Receiver Diagnostics Tool - For Windows

Citrix Receiver Diagnostics Tool for Windows Created Date: December 16, 2014 Updated Date:September 13, 2023 Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Description The Receiver...

WindowHistory Tool

Created Date: 03/22/2006 Updated Date: 09/29/2017 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Navigate to your...

Profile Management Configuration Checking Tool - UPMConfigCheck

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Profile Management Configuration Check Tool UPMConfigCheck Created Date: February 27, 2012 Updated Date: August 23, 2023 Description...

Citrix preSCAN Tool

About This Release This is an early technical preview release v1.0.0.2 of the preSCAN tool. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now available ...

AppDisks Diagnostic Tool

Description In case of failure during AppDisks creation or delivery, AppDisks Diagnostic Tool can be used to collect the relevant logs and metadata files that can be provided to the Citrix Technical Support team. AppDisks Diagnostic Tool collects the known log files, metadata files and Windows lo...

Cloud Connector Connectivity Check Utility

NOTE: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Deprecated - Jan 21, 2025 The Citrix Cloud Connector Connectivity Check Utility has been replaced by the Connectivity Check tool built into the...

Vulnerabilities in Citrix Workspace app and Receiver for Windows

Description of Problem Vulnerabilities have been identified in Citrix Workspace app and Citrix Receiver for Windows that could result in a local user escalating their privilege level to administrator during the uninstallation process. The issues have the following identifiers: CVE-2020-13884...

Connection Quality Indicator

Connection Quality Indicator Created: Feb 15, 2017 Updated: Oct 16, 2024 SHA 256 Checksum: c79d1dfdfe50b1386a334b4d78f78ced25eb61b8091a2bc8b33f9d9b9014dbd2 Please provide feedback or enhancement requests at https://forms.gle/TwWrKPT6J8u7GdKA6. Description The Connection Quality Indicator CQI is a...

LDAP authentication vulnerability in Access Gateway Advanced Access Control

Description of Problem If the Advanced Access Control option AAC of Access Gateway is configured to use LDAP authentication then it is possible for a user to logon without supplying valid credentials. This vulnerability only affects AAC Version 4.2 deployments that are using LDAP authentication;...

LBDiag - XenApp Load Balancing Diagnostic Tool

LBDiag Created Date: March 17, 2010 Updated Date: March 23, 2012 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location...

XAPI Database Parsing Tool - Windows

Description This script applies an XML stylesheet to the XAPI database and creates a file that can be viewed in a web browser. The style sheet is an example of how data can be extracted from the database for quick offline troubleshooting and configuration analysis. Once the script has been ran...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow: unprivileged code in a PV guest VM to compromise that PV guest VM privileged code in a guest VM to cause the host to crash or become unresponsive privileged code in a...

UPM Policy - "Enable multi-session write back with Fslogix Profile Container" not working for local admins

Changes made in multiple sessions do not persist on logoff even after configuring "Enable multi-session write-back for FSLogix Profile Container" policy Note: The policy is available from Profile Management 2003 onwards...

Error: "Your logon has expired. Please log on again to continue." When Users Logon to StoreFront 1.2

After IT Administrators enable the ‘requireTokenConsistency’ parameter to ‘true ’ on StoreFront’s ‘store’ configuration file C:\inetpub\wwwroot\Citrix\Web.config users might not be able to access the resources. This feature is used to allow SmartAccess conditions to be passed from StoreFront...

Target device boot issue from PVS server - vDisk cannot be accessed (a).

When booting the target device from vDisk we get the following error on pre-boot screen: "vDisk cannot be accessed a."...

Unable to limit visibility of applications to specific user groups

Previously able to restrict apps visibility to specific users or user groups using the 'Limit Visibility' option through the app properties. Now all company's users can see all apps when logging to the Cloud Workspace...

Citrix ADC FIPS Compliance/Validation FAQ

General Overview 1. What are Federal Information Processing Standards FIPS? FIPS are standards and guidelines for federal computer systems that are developed by National Institute of Standards and Technology NIST in accordance with the Federal Information Security Management Act FISMA and approve...

Storefront 1912 - Unable to upgrade the sole SF server

While upgrading the StoreFront server from 1903 to 1912.CU1, we get below error " An error occurred during installation . Please ensure all the required prerequisites have been installed - Citrix storefront"...

Unable to access internal Websites with Android Secure Web using MAM SDK

On Android Secure Web with MAM SDK, accessing internal websites shows error 'ERREMPTYRESPONSE'. Further checking the logs, we see that Secure Web does not tunnel the connection to AG for internal websites. But for Legacy SDK, it works fine. Split Tunne - ON DNS suffixes - ADDED In the logs, we se...

Windows Media redirection fails on Citrix Workspace app for Mac

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Attempts to use Windows Media Redirection might fail even after choosing to be Allowed in theWindows...

SSL Renegotiation Process and Session Reuse on ADC Appliance

This article contains information about the SSL renegotiation and session reuse on a ADC appliance. SSL Renegotiation Process on a ADC Appliance The SSL renegotiation process is the new SSL handshake process over an established SSL connection. The SSL renegotiation process can establish another...

Gateway: Cannot connect to the Citrix XenApp Server. Protocol Driver Error.

Launch Fails with Error: "Cannot connect to the Citrix XenApp Server. Protocol Driver Error."...

Gateway: "Cannot connect to the Citrix XenApp Server. The Network is down."

Launch Fails with Error: "Cannot connect to the Citrix XenApp Server. The Network is down."...

How to Configure ICA Session Timeout Values for Access Gateway Enterprise Edition Sessions

This article describes how to configure different ICA session timeout values for the same ICA-published resource when Access Gateway Enterprise Edition is using secure gateway proxy mode. This involves creating an additional ICA listener on each XenApp server, modifying the terminal server settin...

Slow Response to the Client Requests when USIP Mode is Enabled on ADC

When using ADC inUse Source IP USIP mode, a slow response to the client requests is experienced. Servers had requests in surge queues that were not processed. Background The USIP mode enables the NetScaler appliance to communicate with the backend servers by using the original Client IP address a...

Time Display on NetScaler Does Not Sync Using NTP

Time display on NetScaler does not sync using NTP...

How to Create Custom Theme for Logon Page of NetScaler Gateway 10.1 and 10.5

This article describes how to create custom theme for logon page of NetScaler Gateway virtual server...

FAQ: Citrix Secure Hub for Mobile Devices and MicroVPN Technology

Citrix Endpoint Management, using technology formerly called XenMobile This article contains frequently asked questions about MicroVPN with XenMobile App or Enterprise editions and NetScaler Gateway deployments. Q: What are the recommended versions of components for MicroVPN? Q: What is MicroVPN?...

General Information on NetScaler SDX LOM

This article provides general information on Lights Out Management LOM on the NetScaler SDX appliance and also about how to configure the NetScaler SDX appliance, initial settings and commands to troubleshoot. Background All NetScaler SDX devices are shipped with a LOM. The LOM has a separate CPU...

Radius Challenge Response Timeout Between NetScaler Gateway and Radius Server

When using two-factor challenge/response authentication through RADIUS, the NetScaler Gateway imposes a session timeout for the RADIUS challenge/response dialogue. In case of SMS token code delivery, there might be long delays between the challenge displayed to the user and the actual submission ...

StoreFront Logon Error: "Incorrect user name or password"

Domain users are unable to logon to StoreFront and receive an error message: “Incorrect user name or password” with Event ID: 4625 and Failure Reason: “The user has not been granted the requested logon type at this machine”. The error can be seen on Citrix Receiver and on the StoreFront StoreWeb...

NetScaler Appliance System Limits

This article contains information about various system limits for a NetScaler appliance with NetScaler software release 13.1 installed on the appliance. LSN Entities and Bindings Base System Limits Base Networking Limits Load Balancing and Monitoring Limits Advanced Policy/Expression Limits Rewri...

How to create message action to log to syslog in Citrix NetScaler

This article describes how to create a message action that can be bound to a responder or rewrite policy that logs to syslog in NetScaler...

Traffic Management Logout Functionality on NetScaler

This article covers the Traffic Management TM logout functionality on NetScaler which is added in 10.0 and 9.3.e releases. The TM logout functionality triggers AAA session logout on traffic action hit. NetScaler can be configured for "Initiate Logout" option in the TM traffic profile. The followi...

Citrix Gateway Plug-in for Windows Security Update

Description of Problem Vulnerabilities have been identified in Citrix Gateway Plug-in for Windows that, if exploited, could result in a local user escalating their privilege level to SYSTEM. The vulnerabilities have the following identifiers: CVE-2020-8257 CVE-2020-8258 These vulnerabilities affe...