Director showing error "Network unreachable. Check configuration, authentication, or service availability"

While connecting to Citrix ADMMAS from Director customer is getting error "Network unreachable. Check configuration, authentication, or service availability. " For configuring the Director with Citrix ADMMAS follow the...

Citrix XenServer Multiple Security Updates

Important Note Due to concerns about the robustness of some of the Intel microcode updates included in the earlier hotfixes for these issues XS71ECU1009, XS72E013 and XS73E001, Citrix has superseded these hotfixes with new hotfixes listed below. Customers are strongly recommended to apply these n...

RADIUS Group Extraction Failing with Error "Extracted group : Null"

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server"Extracted group : Null" in aaad.debug log...

Citrix App Layering - User Layer Error "We were unable to attach your User Layer"

When end users log into a virtual machine with Elastic layering enabled, they see the error "We were unable to attach your User Layer. Any changes you make to application settings or data will not be saved. Be sure to save any work to a shared network location." Details: "Access to the path...

Receiver 4.10: Grey Screen On Published Desktops After Upgrading To Receiver 4.10

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information After upgrading Receiver from 4.9 to 4.10, some clients cannot access published desktops and apps. On...

Citrix SD-WAN Path State Sensitivity Control Overview

Bad Loss Sensitive – Select a setting from the drop-down menu. The options are: Enable– Default If enabled, paths will be marked BAD due to loss, and will incur a path scoring penalty. Disable – Disabling Bad Loss Sensitive can be useful when the loss of bandwidth is intolerable. Custom – Select...

FAQ: Single-Step Upgrade for SD-WAN Appliances to 9.3.x

Question: Should I use .tar.gz, or single step upgrade .zip package to upgrade to 9.3.x from my current version 8.1.x, 9.1.x, 9.2.x? Answer: Use the .tar.gz files of the concerned platforms to upgrade the SD-WAN software to 9.3.x. After the SD-WAN software is upgraded to 9.3.x version, perform...

How to Collect Diagnostic Data by using the Command Line Interface on a WANOP

This article explains an alternative method for collecting Diagnostic Data by using the command line interface when the Graphical User Interface GUI is not accessible on a NetScaler SD-WAN WANOP appliance or WANOP VPX instance...

Connection failures due to SSL certificate errors with Citrix Workspace app for Chrome / Citrix Receiver for Chrome

Connection to StoreFront/VDA will fail and may show cannot connect to server error or some SSL Certificate error in console logs. One of the reason could be invalid SSL certificate. Applicable Products: Citrix Receiver for HTML5, Citrix Receiver for Chrome, Citrix Workspace app for Chrome, Citrix...

Error: "Backup Failure: Could not find required XVA" on NetScaler SDX

After upgrading NetScaler SDX and Netscaler VPX firmware to any newer version you will get daily notifications about backups failing: For Example the Log Message is as below: Local0.Error 10.xx.xx. svmevent: GMT : EVENT BACKUPFAILED : 127.0.0.1:BackupFailure: - Could not find required XVA for...

On servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start.

On several servers after installing the hotfix XA650R07W2K8R2X64017 the IMA service won't start anymore although no error was returned during Hotfix installation. In the IMA Runtime registry, the Currently Loading Plugin will have MfSrvss.dll. Moreover, when checking the Certificate settings for...

Provisioning Services - Not able to delete vDisk files

When attempting to delete the vDisk Files, we encounter the following error: "The action cannot be completed because the file is open in MgmtDaemon.exe"...

FAQ: What are the recommended virtual machine RAM and CPU specs for Unidesk for the Management Appliance and CachePoints?

Q: What are the recommended virtual machine RAM and CPU specs for Unidesk for the Management Appliance and CachePoints? A : Customers will occasionally change the CPU and RAM settings for their Unidesk appliances. We recommend leaving these at the values defined in the original OVF files: 2 CPUs...

How to gracefully shutdown SD WAN

This articles talks about the procedure on how to shutdown the SD WAN when there is any maintenance activity in place in the DC or Branch...

How to Collect Diagnostic Data on NetScaler SD-WAN Appliance

This article describes how to capture diagnostic data on NetScaler SD-WAN WANOP appliance using Graphical User Interface GUI...

EPA for device certificate check fails on NetScaler

Users get the error "access denied" after EPA scan even with valid certificates available in the store...

Error "Windows cannot verify the digital signature for this file referencing unirsd.sys

When trying to edit a layer or publish an image with any Elastic Layering option turned on basically, any operation where our filter drivers are involved, the machine will have a boot failure, referencing File: \Windows\system32\DRIVERS\unirsd.sys, Status: 0xc0000428, Info: Windows cannot verify...

Layering multiple Office Components (Word, Visio, Project, Outlook, etc.)

There are a couple of places this can go bad. One is, never run any Office component in the Install Machine. The first time Office runs, it writes some machine-specific information into the registry, and if that layer then wakes up on another machine, it has to go through the configuration again...

Unable to install Secure Mail Public version for iOS - Incompatible app

Issue --------------- Unable to install Secure Mail Public version for iOS - Incompatible app Logs ------------- Xcode Logs Dec 14 09:29:52 iPhone WorxMailAppStore985 : -NSFileManagerMdxEncryption ctxRemoveItemAtPath:error:: errno=2 Dec 14 09:29:52 iPhone WorxMailAppStorelibsqlite3.dylib985 : BUG...

SDWAN 4000 SE- VWAN service is disabled automatically on SDWAN

MCN not working properly as the Virtual WAN Service got disabled itself. Dashboard showing the following error message: Error: Disabled by dpdkdaemon due to hardware initialization failure 4 times. The Citrix Virtual WAN Service was disabled...

Blocking Windows Update from going to the next Windows 10 Feature Update (for example 1703 or 1709)

Citrix App layering, and probably other Citrix products, may not yet support the very latest version of Windows 10. For instance, Windows 10 1703 Creators Edition was not supported in App Layering until version 4.8. Unfortunately, "Feature Updates" are hard to block, because the Windows Update UI...

How to script removing and rescanning "Ghost NIC" devices in Windows

It's sometimes necessary to run DevMgr in "nonpresent device" mode to remove all nonpresent NIC devices, and sometimes the present NIC too, and then rescan the network to fix problems. It's possible, using the Microsoft Windows Development Kit tool DEVCON.EXE, to script this operation if you know...

How to set customized BIOS strings to HVM VMs

This article describes the method to set customized BIOS strings to HVM VMs through xe CLI of XenServer 7.3 and later, as well as how to get customized BIOS strings on these VMs...

Debugging Layer Integrity Problems in Citrix App Layering

...

XenDesktop Setup Wizard completes without error, but there's no VM has been created in Hyper-V SCVMM

XenDesktop Setup Wizard completes without error, but no VM has been created in Hyper-V SCVMM. And there's noparticular error messages from CDF trace either...

How to use tagged VLAN Network on management interface

This article introduces the configuration details of using tagged VLAN network on management interface on different use scenarios...

App Layering: Test SMB File Share function says permissions incorrect

When configuring a Network File Share for the ELM in App Layering, you get the error "Permissions incorrect on the file share for the path: . Please contact Support for more information."...

Web Insight Data Not Visible on NetScaler MAS

AppFlow aka Insight has been enabled for the VServer and Services. Enabled Web Insights on NetScaler MAS no data is displayed. Firewall port UDP 4739 is allowed from the NetScaler NSIP/SNIP to the MAS appliance. ULFD was disabled and server was removed...

High Mgmt CPU due to nsaaad process

High management CPU CPU spiked to 100% causing VIPs and LDAP server configuration on NS to go down Issue may be intermittent...

Security Update for Citrix XenServer

Description of Problem A security issue has been identified within Citrix XenServer that may allow the malicious administrator of a guest VM to cause the host to crash. This issue affects Citrix XenServer 7.2 and Citrix XenServer 7.1 LTSR CU1. A CVE identifier is not presently available for this...

NetScaler 11.1 - Services flap on VPX/Interface hangs observed on XenServer

Services flaps on VPX/Interface hands observed on XenServer...

Upload Failed due to an Internal Error - When Upgrade SD-WAN Center 9.0.0

When a customer attempts to upgrade their SD-WAN Center from 9.0.0 to versions 9.1.0 or above, they face the below error message in the GUI: Customer can also see the below error message in their browsers: Warning: POST Content-Length of 76632859 bytes exceeds the limit of 62914560 bytes in Unkno...

Secure Mail - Not able to send emails with attachments more than 8MB

Unable to send email with attachments more than 8 MB...

How to configure Monitor to check services status of RADIUS servers ?

Configure Monitor for RADIUS server...

StoreFront monitor shows down if "Check Backend Services" is enabled

When NetScaler admin try to create a service group and bind StoreFront monitor, the effective state shows down...

AppLocker Occasionally Blocking Layered Software

Customer reports that sometimes Office was not running, and it was being blocked by AppLocker...

Configuring Citrix StoreFront with the Secure Browser Service

This article describes how existing on-premise XenApp/XenDesktop customers can integrate and deliver Secure Browser via their existing Storefronts to end users...

App Layering: Published image to PVS prompts user to restart computer

Customer publishes an image to PVS. When the machine boots up, it prompts for a restart with a box like this: "You must restart your computer to apply these changes." This is telling you that a new device has been detected and the driver has been installed, but Windows must restart to properly...

CVE-2017-17549 - Information Disclosure in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway Client TLS Handshake

Description of Problem A vulnerability has been identified in the Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway Packet Engine that could result in the disclosure of cleartext traffic from the backend client TLS handshake. This vulnerability only affects connections...

CVE-2017-17382 - TLS Padding Oracle Vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway Packet Engine that could allow an attacker to exploit the appliance to decrypt TLS traffic. This vulnerability has been assigned the following CVE:...

"An error occurred during the Create Store Wizard. Please check the log in Event Viewer and try again" While Creating Store

The objective of this article is to solve the issue with StoreFront no able to create Stores. Error Message: Here is the error message from event log which is received when trying to create new Store: System.UriFormatException: Invalid URI: The hostname could not be parsed. at...

SSL Handshake Fails When Server Name Indication (SNI) is Enabled on ADC

SSL handshake fails when Server Name Indication feature is enabled on NetScaler Server Name Indication aka SNI is an extension of the TLS protocol. For SNI to work, the server name in the client hello must match the host name configured on the back-end service that is bound to an SSL virtual...

Receiver Warning: "A Potentially UNSAFE Connection to the Computer Has Been Initiated"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. -Getting warning message:"A potentially UNSAFE connection to the computer has been initiated" when...

How to open Secure Mail email links with Native or 3rd party browser on android devices

This article explains how to open secure mail links on a native browser on Android devices...

Password Management for SDX's and VPX's utilizing NMAS

To manage passwords and accounts from one centralized location...

Error: "One or more issues were detected with your licensing configuration" during XenApp/XenDesktop upgrade to 7.16

When upgrading a Delivery Controller to version 7.16, a Citrix licensing error message might appear "One or more issues were detected with your licensing configuration. If unresolved, such issues will affect users' ability to access applications and desktops after the site upgrade"...

Controlling Citrix Workspace app Refresh Time

Note:- This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team. Citrix Workspace app would periodically refresh the resources from the server. By default, periodic refresh happens every 60 minutes after th...

App Layering: Machine Time on a Published Image is Wrong at First Boot

When booting a published machine for instance, the template VM for MCS the first time, the local time for Windows is wrong by hours. The timezone is correct, but the initial time is set incorrectly for that time zone. This can break Windows and Office activation, and potentially cause other...

PowerShell script to check what vdisk version is being used

Looking for assistance with powershell script to check what vdisk version on the PVS is being used by the VDI desktops Target Devices...

How to Troubleshoot Browser Content Redirection

This article provides an overview of the Browser content redirection BCR feature and use cases before providing general troubleshooting guidelines. It is highly recommended that you first read through the Browser content redirection and Browser content redirection policy settings sections of the...