CVE-2017-15597 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 7.2. The...

Various Connection Method Behaviours of Mobile Citrix Receiver with StoreFront and NetScaler Gateway

The following scenarios provide an understanding of when to use the StoreFront server FQDN and/or NetScaler Gateway FQDN in an App Controller solution when connecting from a mobile device: Internal Users Connecting to StoreFront Server Scenario 1 – Legacy PNA Site and No Store Available Scenario ...

Configure Citrix Profile Management through WEM

Instruct engineers in how to configure citrix profile management through WEM...

Troubleshooting NetScaler and NetScaler Gateway License Issues

Find the resolution based on the exact error message in the /var/log/license.log file. An Invalid Entry in /nsconfig/hosts An Invalid Entry in /nsconfig/rc.conf An Invalid Date in the System An Expired License A Corrupted License File An Invalid Entry in /nsconfig/hosts Error 1:33:22 lmgrd Unknow...

Unable to enroll any device when using Certificate based authentication

Enrollments are failing for all platforms. During the enrollment process,the server logs are showing a failure to sign the CSR, followed by a wipe triggered on the device: 2017-09-10T10:11:12.45+0100 | 32A9CFAD5515A088 | ERROR | http-nio-10443-exec-3 | com.sparus.nps.ios.agent.V10AgentHandler |...

Error 0x7B INACCESSIBLE_BOOT_DEVICE after installing PVS server on a Cisco UCS Server

After installing PVS Server software, or upgrading from a previous version, the first time the server reboots it will not be able to boot successfully anyomre. The server might present a Blue Screen with Error Code 0x7BINACCESSIBLEBOOTDEVICE...

App Layering: Office MCS Rearm failure because kmssetup.cmd is running multiple times

Created a new layer following https://support.citrix.com/article/CTX224566. After publishing the image and using Studio to upgrade catalog using MCS, we receive the following error: Task Information: Start Date: Friday, October 6, 2017 Start Time: 1:46 PM Finish Date: Friday, October 6, 2017 Fini...

Authentication Failure When Password Contains £ Character

Authentication for 401 based failure is observed only oniOS devices ,when the password contains £ character, it works for Form based authentication. Authentication for 401 and Form based is working fine without any issue on Android devices ,when the password contains £ character. Coming to RADIUS...

WEM Agent does not place icons on desktop at first logon

When first logging into a VDA, the WEM Agent does not push out all the Desktop Icons that are assigned to the user. The WEM agent must be manually refreshed to make the Icons appear: Initial Login with no application Icons: Manually refresh the WEM Agent by right clicking the Wem Agent Icon from...

Database Creation Error when creating a new WEM database using a hyphen ("-") in the database name

When attempting to create a new WEM database when using a hyphen '-'in the name, an error appears saying "Database Creation Error". The Citrix WEM Database Management Utility Debug Log contains the following Exception: Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 102 |...

How To Change The Default Password of nsroot User of a NetScaler SD-WAN WANOP Edition Appliance

The objective of this article is to provide the correct procedure to change the default password of nsroot user of a NetScaler SD-WAN WANOP Edition Appliance. SVM and XS instance can be accessed via CLI and customers can potentially change the password via the CLI. In this case the SVM password c...

WEM Agent Machines in a different forest/domain from the Broker are not registering with the WEM Broker

WEM Agent Machines in a different forest/domain from the Broker are not registering with the WEM Broker...

WEM Console Access error: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service..."

When attempting to connect to the WEM site using the WEM Admin console, the following message appears: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management...

SSL Handshake Failure on ADC Because of Unsupported Ciphers

SSL connection failsbetween the client and the ADCappliance ADC responds with a fatal alert. The description of the alert message is “Handshake Failure 40”. The above screenshot is from a NetScaler trace packet capture. Procedure to run a trace on the ADC is explained in the following document:...

Application Shortcuts disappear when connecting to server where the profile already exists

When first logging into a server and the user profile is created for the first time, application shortcuts as configured in WEM appears on Desktop. Application shortcuts configured in WEM: Shortcuts created on desktop of new user profile: Shortcuts deleted after subsequent logins...

Printer Status changes to "Access denied, unable to connect" after logging out and back in

Network printers that are added from a Citrix Universal Print Server go into an "Access denied, unable to connect" status after a Citrix profile managed user logs off and logs back in...

WEM Database Upgrade Failure "CREATE DATABASE permission denied in database"

When attempting to create a new Database/update an existing database using the Database Creation Wizard, we receive the following error: The following error is is written to the WEM Database Management Utility Log: "CREATEDATABASE permission denied in database"...

WEM 4.3 -Folder redirection discrepancy between "Quick Access" and "This PC"

When configuring WEM USV Settings for folder redirection inside WEM Administration Console, folder redirection settings are not properly applied per settings on WEM Agent machine. FOR EXAMPLE: All of the following folders, should be redirected and have been configured this way via the WEM...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

Error while creating WEM database: "Database creation error!"

Database Creation Wizard produces the following error while creating a new WEM database: "Database creation error!". The Citrix WEM Database Management Utility Debug log file located in "C:\Program Files x86\Norskale\Norskale Infrastructure Services" reports the following error when attempting to...

Move WEM SQL database to a new SQL instance with/without SysAdmin permissions

Unable to perform a migration of the WEM Database to a new SQL Server due to minimal permissions in SQL. SysAdmin permissions on new SQL Server are not allowed and thus can not be used from the WEM broker...

WEM Agent Error: "Connection state changed - WEM agent has detected that the network connection has been lost. Click here to refresh your environment settings"

Random WEM Agent machinesintermittently display the following pop up error message: "WEM Agent Error: "Connection state changed - WEM agent has detected that the network connection has been lost. Click here to refresh your environment settings"...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServe...

WEM error message "Specified license server is not available or appropriate licenses are not installed"

When configuring the license server within the WEM Administration Console, the following error appears: "Specified license server is not available or appropriate licenses are not installed. Retry or Cancel"...

Management CPU Increases Periodically In Citrix ADC

When monitoring CPU utilization on the NetScaler, you will periodically notice Management CPU CPU 0 reporting 100% Utilization. This will most likely appear cyclic recurring at a fairly regular interval...

USB or Audio devices disappear after a desktop or layer boots without the Broker Agent

USB or Audio devices disappear after a desktop or layer boots without the Broker Agent...

UPM settings configured through WEM are not applying after second logon to WEM Agent Machine

UPM settings configured through WEM are not applying after second logon to WEM Agent Machine...

How to Configure Storefront for Authentication using NetScaler Gateway

This article describes how to configure authentication at StoreFront using NetScaler Gateway - StoreFront Configuration...

WEM Admin Console Error: "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again"

After performing in-place upgrade of the WEM Broker, The WEM Admin console gives the following error when trying to connect to the WEM site:. "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again" Plus, when opening t...

How to Configure Authentication at StoreFront using NetScaler Gateway - NetScaler Configuration

This article describes how to configure authentication at StoreFront using NetScaler Gateway - NetScaler Configuration...

WEM 4.3 - Intermittent crashes of Norskale Broker Service.exe on WEM Broker

Norskale Broker Service.exe on WEM Broker randomly crashes on all WEM Brokers present. Crash dump analysis of this service shows the following: PROCESSNAME: Norskale Broker Service.exe ERRORCODE: NTSTATUS 0xc0000374 - A heap has been corrupted. EXCEPTIONCODE: NTSTATUS 0xc0000374 - A heap has been...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

Unable to Connect to PVS After PVS Server Upgrade or Downgrade

After an upgrade of PVS from 7.13 to 7.15, or a downgrade of the PVS server from 7.13 to 7.6, the ELM was no longer able to connect to it. Testing credentials would fail. Note, this probably happens in lots of other circumstances, but these are the two circumstances where we've seen this. If you...

Backend SSL Connection Fails on ADC due to missing extensions

When using Secure-LDAP which uses port 636 TCPs or while making connection to server listening on secure port,it fails in SSL handshake phase...

'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists' App Layering/Unidesk 2.x: Desktop Task Fails

Desktop edit fails with 'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists'. Note, "A configuration error exists" could also apply to an inconsistent snapshot configuration on the VM, so see this KB article as well...

Unidesk - New desktops show black screens in VMware Horizon View

When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...

HDX applications fails to launch and errors out with an error message “Engine was not loaded, There is no Citrix SSL Server configured on the specified address. Error Number 183”.

HDX applications fail to launch and error out with an error message “Engine was not loaded, There is no Citrix SSL Server configured on the specified address. Error Number 183”. From the Client side trace we see that theclient is unable to make TCP connection with the Second AG Vserver on custom...

WEM - Some Agents are not showing in WEM Console Agent List

Only one machine at a time within a particular group of WEM Agent machines is showing in the Agent list inside the WEM Administration Console. All machines in this group are receiving policies from WEM whether they appear in this list or not 1: Upon first enumerating the Agent List from inside th...

Mouse and Keyboard functions become unresponsive when launching or refreshing agent if it is not bound to a WEM Configuration Set.

If the WEM agent, vuemUIAgent.exe, is launched or refreshed when it is not bound to a "Configuration Set" inside the WEM Administration Console, the keyboard and mouse functions lock. The WEM Agent in question is in the following screenshot: This is a known issue where keyboard/mouse hooks are no...

WEM Agent Connection error: "Broker Server Name or Broker Port Error"

WEM Agent fails to connect to the WEM Broker and shows the following error when manually refreshing the WEM cache using this command: AgentCacheUtility.exe -refreshcache: "Broker Server Name or Broker Port Error"...

WEM agent is not able to connect/synchronize with the WEM Broker Server

ISSUE: WEM Agent is not able to connect and synchronize with the WEM Broker servers ERRORS PRESENT: The WEM Agent session & Debug logs show the following error: Exception - AgentLocalCacheSync. : The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communicati...

WEM : "No available configuration source detected, Local cache Not Found or not initialized!"

WEM Agent not registering with WEM Broker and the following WEM Agent error is present in the Agent Session Logs: "No available configuration source detected, Local cache Not Found or not initialized!"...

MAM Enrollment failing with Error Message"Request Failed"

You will see the following error messages in the Secure Hub Logs: 2016-09-06T22:55:17.691+0400INFO 4called for store with error Error Domain=com.citrix.Receiver.AuthManager Code=6 "CAMAuthManErrorCodeOutOfLicences" UserInfo=com.citrix.Receiver.AuthManager.DiagnosticDescription=The gateway is out ...

Guidance on configuring WEM settings per user/user groups

How to set up WEM configuration specifically for user/user groups...

How to verify when WEM Agent applied CPU Clamping policy

Verify whether WEM Agent applied CPU Clamping policy...

Some WEMs Agent are failing to check in with WEM Broker

Many WEM Agents do not check in with the WEM Broker Server and they are missing from the Agent List inside of the WEM Administration Console. For example, this screenshot shows only 4 Agents checking in but dozens more WEM Agents are configured and should be present in this list: The Debug logs o...

KMS is not Activating Windows on PVS 7.1

PVS: 7.1 : KMS is not activating Windows...

How to enable/collect logs on WEM Agent machine

Type of logs available: There are a number of logs that can be collected from the WEM Agent to help with troubleshooting/diagnosing an issue Note:Please make sure to revert all changes after completing log collection. For logging information related to WEM Brokers, see CTX228742 1. WEM Agent...

How to enable/collect logs on WEM Broker

Enable logging on WEM Broker servers...

Error "Access is Denied" When Launching Published Applications or Desktops

Unable to launch published Desktop or apps. Error: Access denied Following event logs can be seeing on the VDAs: Source: Citrix Desktop Service Event ID: 1050 Message: Connection validation failed on domain domain.local for user username for reason "Unlicensed" Studio reports all licenses being...