RSA Login Links Do Not Show as Hyperlinks in E-mail in Secure Mail

Secure mail app is unable to open hyperlinks from RSA site. The app is capable of opening other URL links but not this hyperlink. com.rsa.securid://ctf?ctfData=12345...... It shows up as regular text instead of a hyperlink...

Huawei Android User cannot Launch Secure Mail on Home Screen

Partial Android user cannot launch Secure Mail on desktop, error "This app requires a newer version of Secure Hub.Please update Secure Hub to run this app": Besides, Secure Mail can be launched via Secure Hub...

How to Configure NetScaler MAS for readonly access via TACACS using Cisco ACS

Configure NetScaler MAS and Cisco ACS to provide readonly access to users for MAS...

Published desktop is launched in background of local applications

Setting registry key: ForegroundLockTimeout to 0 makes published desktop window to launch in foreground in most cases. HKCU\Control Panel\Desktop name: ForegroundLockTimeout type: REGDWORD data: 0 default: 200000 In some cases, there are applications that set this value to a non 0 value, which...

Gstreamer 1.x Support on Receiver for Linux (Rfl)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver for Linux Rfl leveraged Gstreamer components to decode and play the data streams, which is ...

How do I Set Specific SSL Protocols on XenMobile Server 10.6

With our strong emphasis in security, the ability to specify the SSL protocols supported by XenMobile Server is critical to our customers to help them to control which SSL Protocols they allow to access XenMobile. With XenMobile Server 10.6, we introduce a new CLI option that allows the...

Configure VMAC on Channel Group

To demonstrate how to configure Virtual MAC on NetScaler Interface Channel LACP or LR. The primary reason for using VMACs is that GARP may not be honored by Layer 3 devices in your Network. This can cause communication issues which will present during fail-over of a NetScaler. The resolution to...

High memory usage UPM

There is high memory usage of process userProfileManager.exe on all servers after upgrading to UPM 5.7...

FAQ: XenMobile Derived Credentials

What are Derived Credentials? Derived credentials provide strong authentication for mobile devices. The credentials, derived from a smart card, reside in a mobile device instead of the card. The smart card is either a Personal Identity Verification PIV card or Common Access Card CAC. The derived...

What is the Order of XenMobile Timeouts

Question: What is the order of XenMobile Timeouts? Answer: Forced Time Out under NetScaler gateway Session policies Background Service Ticket Session Timeout NetScaler gateway OS session policies Max Offline PeriodMDX app Inactivity Timerclient properties on XMS. Setting| Component| Default...

XenMobile Policy State Pending or Failed on Windows Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to windows policy deployment failures and also provide additional information on settings up XenMobile server with right values...

Clicking Outlook 2016 search field prompts for install and hangs

Every time the search field in Outlook 2016 is clicked on in an elastically layered image, a prompt for credentials is displayed and an installer launches & hangs. This completely disables the search functionality of Outlook. This error can also occur on Outlook 2013...

UserProfileManger.exe periodically crashes while UPM 5.8 running in a Windows 32-bit OS

While running UPM 5.8 in a Windows 32-bit OS, customer may suffer a periodical UserProfileManger.exe crash, every 7 days exactly. Windows Application Event will log event 1000 for that crash with exception code 0xc0000005, which indicates memory Access Violation...

How to check PVS target device write cache size remotely

...

Delivery Controller cannot contact vCenter server after certificate update on vCenter

Delivery Controller unable to contact the vCenter server aftercertificate update onthe vCenter server...

Issues with public store microsoft dynamic application with per app VPN

,Able to launch the application successfully however after entering the url in the application it gives the error "Your server is not available or doesn’t support this application"...

Citrix Provisioning: How to update a vDisk – Versioning Method

How to update any vDisk using versions without any downtime...

Office not Activating in App Layering (incl. MCS Image Prep OS Rearm Failed)

Due to the complexity of Microsoft licensing, App Layering utilizes our own set of scripts to ensure Windows & Office activation. These scripts are a part of the "Citrix App Layering OS Machine Tools," and their misconfiguration is the leading cause of the "Image Preparation OS Rearm Failed" erro...

Unable to send mails with attachment via Secure Mail.

Unable to send mails with attachments. Error in logs : "failed due to http 413" Error on device : "Can't Send Mail. Your message has been moved to the outbox. Please go to the outbox and try again."...

ISSUE: Policy state pending or failed for Android devices

This purpose of this article is to help Xenmobile administrator troubleshoot issues related to Android policy deployment failures and also provide additional information on settings up XMS server with right values...

How to troubleshoot PVS TD bootup error 'BNIStack failed,network stack could not be initialized'

In PVS environment, a very common error is the 'BNIStack failed' loop restart error During target device boot up, a 'BNIStack failed,network stack could not be initialized' occur, then target device had to reboot again, and the next new bootup encounter same error and reboot again and again. This...

Web-camera redirection not working with Windows N and KN editions

Customers have reported to Citrix Technical Support that web-cameras are not being redirected into ICA sessions if the VDA is of type: Windows 7 N, Windowns 8 N or Windows 10 N or KN. What is Windows N and KN? https://support.microsoft.com/en-ie/help/11529/what-is-a-windows-7-n-edition- Labeled "...

"This page can't be displayed" When Trying to Create a Connector

When attempting to create your first Connector in Citrix App Layering, the new browser tab is created but does not load the Connector Configuration page. Instead you see this error:...

XenMobile Policy State Pending or Failed for iOS Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to iOS policy deployment failures and also provide additional information on settings up XenMobile server with right values...

How to Create Web Link for Specific Citrix Secure App in XenMobile Store

This article describes how to create web link for specific Citrix Secure App in XenMobile Store...

SSL configuration on VDA

See Citrix Virtual Apps and Desktops documentation Enable TLS on VDAs...

Allow access to Secure Hub.apk file for Samsung Knox enrollment

Entering the path to the Secure Hub.apk file is not working when trying to enroll in Samsung Knox...

XenMobile Server is in recovery mode "application failed to start"

Could be observed in multiple scenarios 1. Unable to access one of the node in the cluster. 2. Server went into recovery mode while upgrading or applying patch 3. Server went into recovery mode when the database is not accessible 4. SQLserverran out of space for log drive Node in recovery mode an...

Cannot Start App - Federation Authentication Service

The application launch fails with an error "Cannot Start App" once FAS is enabled on the StoreFront. On the StoreFront you will see Event ID 28 and on FAS server you will see Event ID 123...

Users show as Anonymous in XenMobile Server

Users are listed as 'Anonymous' inXenMobile Server after moving their Active Directory Security Group to a new OU...

Per App VPN with Citrix Endpoint Management and XenMobile

You can configure the per-app VPN feature to establish connection to internal resources in full VPN mode...

Difference between Fast Clone and Full Clone

Q : When using Machine Creation Services to create a Machine Catalog containing desktop OS VMs, you can now choose whether MCS provisions thin fast copy clones or thick full copy clones. What's the difference between them? Ans Since Machine Creation Services MCS was first released in XenDesktop...

App Layering 4.1 - Failed to Create Layer, 'A specified parameter was not correct. url'

When attempting to create a layer, the error below is displayed: ​Failed to execute the script: vCenter returned an unexpected failure = Fault Code: 'ServerFaultCode' FaultMessage: 'A specified parameter was not correct. url' Details: "attributes":"xsi:type":"InvalidArgument","invalidProperty":"u...

Access camera role from gallery via Secure Mail

Users wanted to access camera role to attach to an email in android devices. In Secure Mail, if we set the Inbound Document Exchange open in to Restricted, on any Android device, our only options when using Secure Mail to attach a photo are – Last photo taken or to use the camera to take a pictur...

Windows / Office is not activating on App Layering images - "runipkato" file not present

Windows and Office can show as not having activated or not genuine copies of Windows after booting up an image created by Citrix App Layering...

7.13 VDA install hangs installing prerequisites (App Layering)

VDA installation hangs at the prerequisite screen. Depending on your version of the VDA software, it should look similar to this:...

XenMobile not renewing Device Identify Cert automatically on iOS devices

The device identity certificates apple profile, apple mdm , ios agent that are pushed from the Xenmobile is valid from the date of enrollment for 2 years . The certificate shouldrenew automatically. However these three certificates are not renewed and hence the device becomes unamanaged and all...

Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...

FAQ: XenMobile Per App VPN

Can Per App VPN be configured for MAM only devices No, Per App VPN does not support MAM only devices. With the iOS per app-VPN feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed iOS device. There, you can establish an on-demand VPN tunnel to th...

ACR/SR Behavior Change with Receiver for Windows 4.7

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. ACR/SR is enabled out-of-the-box after users upgrade XenApp/XenDesktop to 7.13 or newer along with...

proxy server seeing Android traffic from client IP

Your proxy server may see the client IP from Android devices where as iOS it sees and expects the subnet IP of the NS. How to filter traffic using the Subnet IP address for Android Devices?...

Citrix Receiver Desktop Viewer Toolbar ‘charms’ and ‘app commands’ don't work

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information In the Citrix Receiver Desktop Viewer Toolbar, we can see the ‘charms’ and ‘app commands’ shortcuts, but...

SCOM "StoreFront Store Service Probe Status" failure on credentials

When the store is configured with “Trusted Domains Only”, alerts may be logged in the Operation manager console stating that the Storefront Store Service Probe failed withError description: "Could not get credentials" More information can be obtain about the authentication attempt by enabling...

Cannot download the attachment in Secure Mail

Users cannot download the attachment in Secure Mail, and we see the below errors: "The size exceeds the limit set by your Organization's security policies."...

How to install applications that require joining the domain with Citrix App Layering

Question: During new layer creation, we need to join the domain to successfully install our applications. However, we read that only the platform layer should be joined to the domain - can we join the domain while creating an application layer? Answer: You can temporarily join a packaging machine...

CVE-2017-9231 - XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.x and 9.x

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix XenMobile Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number:...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

XenMobile MDX Service

You can use the XenMobile MDX Service to prepare iOS and Android mobile apps by wrapping the apps with MDX, an app container technology. You then manage the apps with XenMobile. You can use the XenMobile MDX Service to wrap apps created within your organization or to wrap the Citrix XenMobile App...

Support Process for Thin Client Related Issues

Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...

How to Set Up Office with App Layering (Recipe)

Citrix App Layering - Microsoft Office Overview Microsoft Office is an application that is generally easy to install into a layer, and, if it will be used by itself, there are no complexities other than activation. If your organization's requirements are more complicated, then there will be more...