Registration Request For Worker Was Rejected Due To An Unknown Error

New machines added to the XenDesktop Site failed to register. From the VDA Application logs it was found that the VDA wasdiscovering the Delivery Controller. On the Delivery Controller the below error is logged in the Application Event logs from Citrix Broker Service : Registration request for...

How to disable 'Delete account' option within Secure Hub

To disable the "Delete account" option within the Secure Hub for the environment with Auto Discovery ServicesADSenabled. Note : This can be done only for the environments with Auto Discovery ServicesADS enabled...

NetScaler Gateway 11.0 VPN Client and EPA Plug-in Does Not Work With Chrome Version 42 and Later

The Client and EPA Plug-ins don't work with the latest Chrome versions as support for NPAPI is disabled by default. The support will be deprecated entirely in Chrome version 45 in September 2015. From Chrome version 42, all NPAPI plugins will appear as if they are not installed. This will affect...

How Do I Load Balance FTPS Servers on a NetScaler ADC

This article describes how to load balance FTPS servers on a NetScaler ADC...

Secure Web cannot access external websites

Unable to browse external websites. Error " http 1.1 gateway timeout" on Secure Web. VPN mode : Full VPN Internal websites work fine...

How to collect ActiveSync device logs (EAS logs) from Exchange

...

XenMobile is unable to identify the group membership of users

Although XenMobile can find both user objects and group objects in Active Directory, XenMobile is unable to enumerate the group membership of user objects. This can result in no MAM resources being deployed unless they are bound to the 'All Users' Delivery Group. You may also find that resources...

Removing application from delivery group.

When I remove an application from delivery group, the application is not uninstalling from device...

Failed to update listener certificate in XMS 10.6

While importing renewed SSL listener certificate on XMS 10.6 following error is observed on XMS debug logs. 2017-06-22T11:47:55.251+0300 | A7B895C5041828EC | INFO | http-nio-14443-exec-7 | com.citrix.controlpoint.rest.CertificateMgmtResource | Uploading certificate to be used As : listener . none...

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director when user connected to static Desktops PVS+PvD in one Delivery Group. But when click the “Details” button under Activity Manager, the machine management options like “restart”, “shutdown” and “shadow” are all...

Error : Certificate is Referenced by a CRL, OCSP Responder, vserver" When Deleting a Cert-key

Error : Certificate is referenced by a CRL, OCSP responder, vserver when trying to delete a cert-key even though it is not bound to any vserver , no links , OCSP present. Symptoms : The Citrix ADC may have broken the cert links and unlinked the certificate from vservers while attempting to delete...

New SCSI Controller Causes Windows to Prompt for a Reboot After Installing the Device

When powering on a machine after changing to a new host, you are immediately presented with a dialog box saying: "You must restart your computer to apply these changes"...

WEM 4.4 -Transformer autologon is not launching the Agent at logon

WEM Transformer does not auto-launch after an end user logs onto a WEM Agent machine...

Error "Set device encryption on device to use this app" on Android device

Apps install correctly and no issues are shown on the server. However, while opening the app on the device, the message "Set device encryption on your device to use this app " is displayed. The device storage is encrypted still we see this issue...

WEM SQL Database is growing to over 20 GB

WEM SQL Database is growing to over 20 GB ---...

FAQ: XenMobile Licensing Model

Question: What is difference between XenMobile MDM edition Licenses and Enterprise Edition Licenses? Answer: XenMobile MDM Edition Citrix XenMobile MDM edition is licensed under a per-user or per-device model. User licensing is based on how many unique users have registered devices on the...

While Launching HDX Applications from Secure Hub WorkStore Getting an Error: "Unsupported file type......."

The hdx applications are enumerated in the secure hub store but while launching the application we get error : "Unsupported file type : the provided ica file is malformed or otherwise invalid. Please ensure that the product you are using for launching is correct. Contact you administrator for...

App Layering/Unidesk: Boot failure after windows updates cmimcext.sys

Windows updates causes server to fail boot with error message file missing cmimcext.sys. BSOD with0xc000000f stop code. This can apply to a newly imported OS layer or to a new version of an existing OS layer...

How to delete the Device Entry for a User directly from the SQL Database

For some reason like datacorruption or some null pointers, device information is not getting removed fromthe XenMobile Console. This can be deleted directly from the Database by running the below SQL command. Please take the DB back up before we run the below SQL query First obtain the Device ID...

WEM - how to setup load balancing via NetScaler for multiple WEM Brokers

Setup load balancing via NetScaler for multiple WEM Brokers...

Error "Your smart card does not have a valid certificate" when using Citrix Receiver for iOS 7.3 with iOS 11

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When users try to connect to Storefront orNetScaler Gateway using smart cards PIV or CAC using Citri...

Secure Web Error Connection has timed out reconnect to Secure Home to access work resources.

When Secure Web for iOSislaunched. We receivean error right away "Your connection has timed out. Please reconnect to Secure Hub to access work resources "Cancel, connect. If users clicks connect it redirects back to Secure Hub, prompts users to enter PIN/password. Then it redirects back to Secure...

App Layering PVS Agent error registering to ELM "Could not create SSL/TLS secure channel"

When configuring the App Layering Provisioning Services PVS Agent on the PVS server, the error"Could not create SSL/TLS secure channel" occurs...

Receiver For iOS 7.2.3 Smart card users are unable to launch VDA 7.13 applications

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Error: "The operation couldn't be completed HdxSdkErrorDomainSessionerror 8."...

How to Configure Syslog for XenMobile

How to enable Syslog/Sys logging for XenMobile. Note- Syslog is a standard logging protocol with two components: an auditing module which runs on the appliance and a server, which can run on a remote system. The Syslog protocol uses UDP or data transfer. Admin events and User events are recorded...

How to obtain expiration date of the "Distribution Provisioning Profile (.MOBILEPROVISION)" file of an iOS (.iPA) application

What is the "Distribution Provisioning Profile .MOBILEPROVISION" File used by Apple Xcode, a software developmentIDEoften used for creating iPhone apps; contains a provisioning profile, which allows an app to be uploaded to a limited number of iPhones or iPads while it is still in development. Yo...

MDM/MAM Enrollment flow for Secure Hub IOS devices-On Prem Setup.

This article explains the MDM/MAM Enrollment flow for IOS devices for-On Prem Setup...

Secure App's access on Android devices Hung with the Screen "please wait"

End user accesses Secure App's on Android device which flips to SecureHub forauthentication and will get stuck on the screen 'Please wait' and circle keep on spinning endlessly. Screenshot Below for reference:...

Xenmobile Certificate based authentication--Unable to push VPN policy to iOS device.

Error : In the software inventory for the device we can see the error “Could not create mobilecofig ” Server logs 2017-02-24T10:35:05.236+0100 | | INFO | http-nio-10080-exec-72 | com.sparus.nps.apple.push.ApplePush | Installing profile /cfg/VPNtest on device 522. 2017-02-24T10:35:05.298+0100 |...

NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 Builds Temporarily Offline

Citrix SD-WAN, formerly NetScaler SD-WAN UPDATE: New builds are now available. Please seehttps://support.citrix.com/article/CTX227928 for more information. Original article text: Due to an issue found in the builds, NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 builds are not available for download...

MDM/MAM Enrollment flow for Secure Hub Android devices-On Cloud Setup.

This article explains the MDM/MAM Enrollment flow for Android devices for-On Cloud Setup Where XMS Load Balance on cloud and Netscaler Gateway is on Premise...

XenMobile Authentication Prompt Scenarios.

Question : What are the scenarios in XenMobile where users are prompted to authenticate. Answer :The scenarios change depending on these factors: Your MDX app policy and Client Property configuration in the XenMobile console settings. Whether the authentication occurs offline, or needs to be an...

How to configure Applock device Policy on IOS

How to configure Applock device Policy on IOS...

Block Screen capture option in MDX policies for IOS devices

Question : Block Screen capture option is not available in SecureMail MDX policies for IOS devices. Answer :​ Block screen capture option is available only on Android and not on iOS. Any option which is not available under MDX policies is by default On. Hence the Screen capture/snapshots will be...

Unable to access HDX apps from XenApp. Error "HdxSdkErrorDomain_Session error 8."

Unable to access the XA application. Error on the device : iPhone: "HdxSdkErrorDomainSession error 8." iPad: "The session launch ended; either the session was not visible to the user, or the ICA engine did not load properly"...

To delete two headers in HTTP Response

In certain cases, we do not want to parse the HTTP headers to the end Client. NetScaler can do this job by deleting the HTTP header received from the Server. We can use Rewrite feature of NetScaler to achieve this. Configuration AppExperts Rewrite. Step 1 : To remove HTTP header named "Server" CL...

StoreFront 3.11 >>How to get the login banner on Storefront page

Storefront customization for the scremear is not working...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServe...

SAML with limit visibility on the application on the Delivery Controller using a Security Group

When we publish new App in Delivery Group that uses SAML and set limit visibility on the application for an Active Directory Security Group, application icon will not enumerate. The application will enumerate when through Storefront Server. If user is added explicitly to the application visibilit...

Unable to Configure Citrix App Layering ELM PVS Connector

The App Layering Agent PVS Agent on the PVS server is registered with the App Layering ELM virtual appliance, and the PVS Server enumerates on the App Layering PVS connector screen. However,clicking "check credentials" an error is displayed stating that the ELM cannot use the credentials on the P...

Android Secure Mail Error "THE VPN SERVICE HAS FAILED TO CONNECT"

Secure Mail users receive an error : The VPN service has failed to connect. In the Secure mail logs we find : "2017-03-21T15:30:42.260+0800","MDX-ErrorCodes","WARNING 3","ErrorCodes = 507 507 = Vpn "2017-03-21T15:30:43.946+0800","MDX-ErrorCodes","WARNING 3","ErrorCodes = 602 602 = VpnFailedOption...

Shared device requirements and Prerequisites for Enrolling Shared Devices in XenMobile.

Shared Device Requirements For the best user experience, including silent installation and removal of apps, Citrix recommends configuring shared devices on the following platforms: iOS 10 iOS 9 Android M Android 5.x Android 4.4.x Android 4.0.x MDM-only mode Prerequisites for Enrolling Shared...

Citrix Provisioning Services Boot Process

This article explains Citrix PVS boot process in details...

Provisioning services 7.x vdisk Imaging Procedure

To perform imaging sometimes after performing reverse imaging to create a new vDisk from a virtual machine on any residing hypervisor...

Storefront services such as "Peer Resolution Service" does not start.

A new Storefront 3.12 server is added to a server group. The join is successful .However the services do not start. Event Id 7036 The citrix peer resolution service on local computer started and then stopped Other dependent services such as "CitrixCredential Wallet" and "Default Domain Domain...

How to Create a Perl Based Custom Monitor on NetScaler

This article describes how to create a Perl based Custom Monitor on NetScaler. Background The NetScaler appliance has a lot of different monitors inbuilt, but there are use cases these monitors do not cover. For this NetScaler supports monitors of type USER, which brings the possibility to run...

Error: "No Entry Found in Database for Device" While booting Target Device

Target devices are unable to PXE boot with the following error message: "No entry found in database for device."...

Bypass iCloud/Activation Lock using XenMobile

An end user may return an iOS device to the I.T. department and does not supply their iCloud account information. After a restore, the I.T. department cannot enroll the device as the device cannot be unlocked without iCloud credentials. XenMobile can issue a 'Activation Bypass Code' as per Apple...

XenMobile Server and support for Cisco AnyConnect and Legacy AnyConnect clients

Last June 9 2017, Cisco announced the transition from the VPNPlugin deprecated VPN framework to the latest iOS VPN framework Network Extension in order to provide a more reliable connection to internal resources and support for UDP and TCP applications with Per-App VPN. On June 14 2017, Cisco...

Error Deleting an App layer due to a Template

Trying to delete unused version of Acrobat Pro 11 and i get error below that says it's being used in two temp plates. However looking at Layer Information says this app is used in one template and no desktops are using this version, version 1. Location:...