App Layering 1908: Getting "User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector".

We get error"User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector"...

How To Troubleshoot And Fix The Situation When The ADM HA Is Not Working

One of the possible error conditions reported in the deployment is where in the GUI System - Deployment the following symptoms are reported: Heartbeats are not received from the secondary Data synchronization has failed on secondary Apart of the information displayed in GUI on primary node, there...

Traffic of any type doesn't pass through SDWAN Firewall

Traffic is sent from Zone A to Zone B. Firewall Policy Policy Ais configured to ALLOW 10.10.10.x IP source to Any destination with Highest Priority. Another Firewall policy Policy Bis set to DENY from Any source to Any destination with Least priority. Issue is that the Traffic always hits the Den...

Processes, Logs And Configuration Files Participating in Citrix ADM High Availability

The following processes participate in Citrix ADM HA operations: /usr/local/bin/python /mps/mashbmonit.py This process is run by both nodes. It is responsible for sending and receiving heartbeats and healthchecks. By default, it uses UDP port 5005. The configuration file for this process...

Storefront upgrade from fails from 3.12 to 3.14 - 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643

Storefront upgrade from fails from 3.12 to 3.14 - 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643 These lines appear in the logs. 09:11:45.4298 : XenDesktopSetup:Starting synchronous process...

How to change subnet mask of NSIP on NetScaler

How to change the subnet mask of NetScaler management IP address when not using Clustering...

Server Host to Client URL Content Redirection and Validation

When using Host to Client URL Redirectiona specific URL may fail to open on the client as expected and instead open on the VDA. Other URL links will succeed in redirecting properly...

Upgrading to Storefront 3.12 CU4 fails - MSI logs shows Citrix Protocol Transition service exception

When attempting to upgrade Storefront 3.12 LTSR to CU4 fails. In the Install wizard the following message is displayed: When checking the MSI Installer logs the following exception is found NOTE: MSI logs are found in C:\Windows\Temp\Storefront\CitrixMsi-CitrixStoreFront-x64-201X.-xx-xx-xx.log...

Intune Support for Windows Gateway Plugin

Configuring Intune for Windows Gateway Plugin on Microsoft Azure and on Windows PC. This is applicable toCitrix Gateway and Windows Gateway Plugin versions13.0.36.x and above or 12.1.51.x and above...

BSOD WDF_VIOLATION - Unable to Boot Target Device After Promoting VDisk Version to Production

When booting a target device after promoting its vDisk from maintenance to production, it will bluescreen and stay on a BSOD/reboot loop, displaying the following screen:...

How to migrate Citrix Licensing Server component

1. Migrating Citrix Licensing Server component from one server to another server 2. Updating Citrix products to use the new licensing server without any production impact...

App Layering - Setting a certificate for LDAP

Connection to LDAP server or synchronizing LDAP entries may fail with the following errors: "There are certificate errors found when connecting to the server" "One or more problems with the service certificate were found. You can enable them to be ignored, or you must update the certificate on th...

Citrix SD-WAN Security Update

Description of Problem Multiple denial of service vulnerabilities have been identified in the Citrix SD-WAN Appliance and Citrix SD-WAN Center Management Console. These vulnerabilities could permit a remote attacker to cause a denial of service by causing a host crash or by causing reduced servic...

When closing and re-opening Workspace on IOS, refreshing or launching apps causes failure.

After IOS has enumerated and/or launched apps through Storefront via Netscaler Gateway, and the Workspace app is closed but not logged out, when re-opening Workspace you get failure when refreshing apps or launching new ones. Error message seen if clicking an app after re-opening workspace -...

StoreFront Cannot Complete your request - Access is denied. Contact your system administrator. - No endpoint listening at net.pipe

StoreFront event log shows Access is denied. Contact your system administrator. System.ServiceModel.EndpointNotFoundException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 There was no endpoint listening at net.pipe://localhost/Citrix/Authentication/Win32...

Collect a complete memory dump on a MCS (non-persistent) machine on XenServer (Citrix Hypervisor)

This article outlines the steps to collect complete memory dump on a MCS non-persistent machine on XenServer Citrix Hypervisor. Often we are not able to get the memory dump in instances where MCS provisioned VDAs show behaviors like unresponsiveness/hang. The reason being the machine fails to sav...

PVS Imaging Wizard Fails With “ Failed to write disk” Message After It Finishes

Imaging Wizard fails with “ Failed to write disk” message after it finishes. The Imaging Wizard logs show: Failed to write disk \\.\PhysicalDrive1. Access is denied. 0x00000005...

Error: "Detailed license information unavailable"

When accessing the XenDesktop licensing console, you receive the following message: "Detailed license information unavailable" Desktop Studio is unable to retrieve detailed license information from the License Server. This service may not be in use or there aren’t sufficient permissions to access...

How to Upgrade to License Server 11.x on Windows 2008

This article describes how to upgrade Citrix License server to 11.10 and 11.11.1 on a Windows 2008 Server...

Unable to start VMs in new Hosts - An emulator required to run this VM failed to start

Unable to start VM with vGPOU assigned on HOST with NVIDIA Card. Getting error: vm-start failed: "An emulator required to run this VM failed to start" Internal LOG: Dec 6 09:10:13 localhost vgpu-211384: demuinitialize: PLUGIN CONFIG: /usr/share/nvidia/vgx/gridp40-1b.conf,gpu-pci-id=0000:d8:00.0De...

Cryptographic Update in Citrix Workspace App for Android

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Objective This feature is an important change to the secure communication protocol. Cipher suites wi...

CVE-2019-13608 - XML External Entity (XXE) Processing Vulnerability in Citrix StoreFront Server

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix StoreFront Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number: •...

Error Code 42B when using Citrix Gateway Native OTP authentication in Citrix Workspace app for Android upgrade

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error message appears even after upgrading to the latest version of Citrix Workspace...

Citrix Security Acknowledgements

Citrix would like to thank security researchers who have worked with us to secure Citrix products and services. 2019 Vahagn Vardanian Mohammed Israil Nicholis du Toit Archit Garg of Careem Ismail Tasdelen Andrea Pessione of SKIT Cyber Security Armando Huesca of SKIT Cyber Security Asher Bin Khali...

How to Set up App Lock Policy (Blacklisted Apps) Using XenMobile Device Manager

This article explains how to restrict applications using XenMobile Device Manager. You can create a policy in XenMobile to define a list of apps that are allowed to run on a device, or a list of apps that are blocked from running on a device. Please refer to Citrix documentation: Tuning XenMobile...

Workspace App for Linux 1906 giving “Unacceptable TLS Certificate” error

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. With the Citrix Workspace App for Linux 1906 and above, if you are using a SAML store with AuthV3, a...

How to locate and download Citrix Workspace App

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149 for more information. Assist with locating and downloading the latest or earlier versions of Citrix Workspace App or Citrix...

Upgrade cannot proceed because Maintenance Expiration Date of the license must be later than the patch Release Date

After attempting a software upgrade the following error is displayed:...

Workspace App for Android - RSA software token import errors

Unable to import RSA Soft Token file in Workspace App for Android receiving error message: "Token import failed" or “Error code %1$X...

HTML5 receiver - Audio in high quality stops working when Skype for Business loads

The issue originates when a user logs in to a VDA, and in the background automatically launching Skype for Business. As soon as the application launches HDX Audio stops functioning. This only happens if the audio is set to "HIGH" on the VDA. When terminating Skype for Business and you reconnect t...

VDAs are not registering using a published image - Use GPO/GPP/Restricted Groups to add the proper accounts and services

VDAs are not appearing as registered, in Studio, no matter what is done to the image or the configuration of the VDA in the Platform Layer...

How to Migrate PVS server from one datastore to another datastore

Migrate PVS server from one datastore to another datastore...

Customize NetScaler Gateway authentication page to match the modern appearance

This article provides information on customizing the on-premises Citrix Gateway authentication page to use a modern experience. This is recommended when the on-premises Citrix Gateway is used as the identity provider for Citrix Workspace, or when using StoreFront with the modern experience...

Citrix Cloud Connector Upgrade Waiting on .NET 4.7.2 Prerequisite

Navigate to Add/remove programs If you see the Connector version with anything less than version 6.8.0 The installer logs for the connector will be in the following locations: C:\ProgramData\Citrix\WorkspaceCloud\InstallLogs C:\Windows\Temp\CitrixLogs\CloudServicesSetup You may see an error relat...

Error: Cannot create BDM partition for device <device name> while using XenDesktop Setup Wizard

The XenDesktop Setup Wizard might fail when creating target VMs on VmWare environmentunder the following scenario: Same service account is used; which is able to create Vms in Citrix Studio via MCS but failing in PVS All permissions are provided as per article CTX214389 vSAN is encrypted The Vm i...

MAC Receiver/Workspace app sporadically closes

Customer's will start a published application or desktop and at random intervals the Viewer application will close with no errors or messages. This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and ca...

Workspace app for ios default display settings

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. What is the default setting for Workspace app for iOS on iPhones? Display settings are not all the...

Master VM Gets Error "The Trust Relatioship Between This Workstation and The Primary Domain Failed" When Trying to Logon to it Using a Domain Account

When trying to log on to master VM using a domain account right after capturing a vDisk from it, an admin user gets error "The trust relationship between this workstation and the primary domain failed." Resetting or deleting and recreating machine account from PVS console does not resolve issue...

StoreFront 1906.1.0.27 upgrade and installation issues

The following issues have been discovered with StoreFront1906.1.0.27concerning upgrading and uninstalling: 1. If you attempt to upgrade to StoreFront 1906 from StoreFront 3.7, or from a version of StoreFront that was upgraded from StoreFront 3.7, the upgrade fails. WSP-4386 2. Uninstallation of...

Citrix Hypervisor Security Update.

Description of Problem A vulnerability has been found in Citrix Hypervisor formerly Citrix XenServer that may allow an unauthenticated attacker with the ability to send traffic to a host over a management or storage network to cause the host to crash. This vulnerability is identified as: •...

Updates to Citrix Workspace app installer

Objective This update is applicable to Citrix Workspace app 1904 and above Citrix Workspace app installer starts certain processes during the installation of the software. Citrix Workspace app 1904 for Windows onwards certain changes have been made to the process handling in the installer. Althou...

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...

Citrix SDWAN : Branch to Branch Virtual Path down because of CGNAT on the WAN link

The path created using a WAN link with CGNAT configured remains in dead state for Branch to Branch communication. No issues seen between Branch and MCN. Check the topology below to understand the scenario : In the above topology, at Branch1, the LTE link is getting CGNAT by the provider i.e. the...

iOS Public App Store app uploads are not working when using the App Store app URL

With Endpoint Management, when an Administrator attempts to upload an iOS and/or iPadOS public App Store app by enteringthe URL by using the new app URL on the App Store, the app is not found and the error below is displayed...

SD-WAN QoS - FAQ

1. What are the different QoS components? 1. IP Rules 2. QoS classes 3. Application QoS. 2. What type of traffic is allocated by default to different Classes? In the SD-WAN environment, we think of applications as falling into one of the following three classes: Real-time –VoIP or VoIP like...

Troubleshooting HDX Optimization for Microsoft Teams

This is a Live article - updated frequently with the latest info and known issues ------------------------------------------------------------------------------------------------------------------------------------------------- Recommended Teams version :latest version. Update history for...

Fair Share calculation for Bandwidth provisioning on SD-WAN

By default, all branches and WAN services Virtual Path/Internet/Intranet receive equal share of the bandwidth. When there is high difference in terms of bandwidth requirement or availability between the connecting sites, provisioning can be changed accordingly. By default, the ratio is 1000 Share...

Workspace App for mobile devices not showing apps - no apps available at this time - error 451

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. - iOS throws "No apps available at this time"after login attempt -Android throws Error code 451 afte...

CVE-2019-11634 - Improper Access Control Vulnerability in AppDNA

Description of Problem A vulnerability has been identified in AppDNA that could result in access controls not being enforced when accessing the web console potentially allowing privilege escalation and remote code execution. This vulnerability has been assigned the following CVE number: •...