Cannot download the attachment in Secure Mail

Users cannot download the attachment in Secure Mail, and we see the below errors: "The size exceeds the limit set by your Organization's security policies."...

Citrix Receiver Desktop Viewer Toolbar ‘charms’ and ‘app commands’ don't work

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information In the Citrix Receiver Desktop Viewer Toolbar, we can see the ‘charms’ and ‘app commands’ shortcuts, but...

CVE-2017-9231 - XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.x and 9.x

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix XenMobile Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number:...

Frequently Asked Questions During NetScaler MAS Troubleshooting

Citrix ADM, formerly NetScaler MAS The following section lists some of the frequently asked questions during diagnosis and troubleshooting of NetScaler MAS issues: How to verify the NetScaler MAS build version using CLI and support file? How does MAS fetch all the dashboard related data from...

Support Process for Thin Client Related Issues

Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...

VPP Required Apps Might Fail to Install on XenMobile Managed Devices

When too many VPP apps are pushed as required apps, installation may fail. The logs will show the following error. ErrorCode returned by Apple: code=9632, reason='Too many recent calls to manage licenses with identical requests'...

How to Set Up Office with App Layering (Recipe)

Citrix App Layering - Microsoft Office Overview Microsoft Office is an application that is generally easy to install into a layer, and, if it will be used by itself, there are no complexities other than activation. If your organization's requirements are more complicated, then there will be more...

Power Managed Server VDA's does not receive shutdown request

Randomly some of the Power Managed Server VDA's receive a shutdown request approximately 20 mins after the scheduled reboot and do not power on automatically and remain Turned Off. Scout logs detect the following: Some Power Actions are marked as failures by Broker possibly because VDAs are not...

XenMobile MDX Service

You can use the XenMobile MDX Service to prepare iOS and Android mobile apps by wrapping the apps with MDX, an app container technology. You then manage the apps with XenMobile. You can use the XenMobile MDX Service to wrap apps created within your organization or to wrap the Citrix XenMobile App...

NotNow - Explanation and Cause

There are certain times when the device is not able to do what the server requests. For example, databases cannot be modified while the device is locked with Data Protection. When a device cannot perform a command due to situations like this, it will send the NotNow status without performing the...

How to Configure Microsoft MAK Volume Licensing in Provisioning Services Server

Configuration MAK in Provisioning Services Server...

Windows 10 + Citrix Profile Management : Start Menu Unable to Retain Pinned Items and Becomes Unresponsive

After installing Win10 and Citrix Profile Management 5.x you may notice that the Start menu cannot retain pinned items after restart and sometimes it may not even launch...

Connection error XMM: An error occurred while getting provider information from the database.

XenMobile Mail Manager XMM when clicking "Test Connectivity" getting "Connection error: An error occurred while getting provider information from the database. This can be caused by Entity Framework using an incorrect connection string. Check the inner exceptions for details and ensure that the...

Cannot open PDF files downloaded from Secure Web

Issue: Error while opening a PDF file from Secure Web: "Invalid PDF format."...

How to Manage Scheduled Snapshots?

This article describes the method to manage snapshot schedules...

Troubleshooting XenCenter Proxy Authentication Issues

XenCenter does not connect to a proxy server One common problem with using a proxy server is that the client XenCenter can’t connect to it. You may receive the following error when trying to connect to a XenServer host after configuring to use a proxy server in XenCenter: You may also receive the...

How to Troubleshoot Scheduled Snapshots issues

This article provides general guidance to troubleshoot VM Scheduled Snapshot VMSS issues...

Creating a Seamless User Experience with XenMobile Email Enrollment for Secure Mail SSO

With the recent Secure Mail update, you can now configure Citrix Secure Mail to provide single sign-on SSO for users through the use of an automatic provisioning mechanism during your first-time use. Secure Mail consumes the user credentials that users enter to authenticate to Secure Hub to...

Home Screen Layout Policy and App Uninstall

Q. Does the Home Screen Layout device policy disable the apps from being uninstalled? A. Yes, apps cannot be uninstalled once the Home Screen Layout policy is deployed...

How do I resolve a failed Cloud Connector maintenance

A Cloud Connector will enter maintenance mode for a number of reasons including software updates. Only one connector will be put into maintenance mode at a time. This ensures that there are other connectors available to handle service requests. In some cases, the Cloud Connector may fail to updat...

How Do I Remove an Inactive or Non-existent License Server From LUI Reports

This article describes how to remove XenApp and XenDesktop license servers from the License Usage Insights LUI service that are no longer in in use. These servers appear in the Server Status page in the LUI service with a “not reporting” status. Who is affected? Citrix Service Provider partners...

How Do I Configure Cloud Connector to Support a Web Proxy

The primary intent of this article is to provide steps on how to configure the Cloud Connector to support a web proxy. The Connector supports connection to the internet via a web proxy server. The Connector requires outbound connectivity on port 443. Both the installer and the services it install...

"The specified schema name \"dbo\" either does not exist" error when upgrading

Unable to upgrade XenMobile Server from 10.3.5 to 10.5. The specified schema name "dbo" either does not exist or you do not have permission to use it.\nSQL state:42000\nSQL error code:2760"'...

XenMobile Server - Identity credential certificates (PKI) do not auto renew

MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...

Secure Hub Error : Security policy does not allow to connect on Android devices

This article explains on how to troubleshoot the errorSecurity policy does not allow you to connect on Android devices Log analysis : Below error could mean that user is entering an expired pin. "WARNING 3","SHTP:java.io.IOException: Connection failed, status=400 subcode=HTTP/1.1 400 SHTP0005:...

Secure Hub Error: Request Failed on iOS devices

This article explains how to troubleshoot the errorRequest Failed on iOS devices when we have cert+LDAP policy on Netscaler Gateway Below error in the iOS Secure Hub logs indicates that the issue is because two factors Authentication is disabled. ,,ERROR...

Configure post-authentication Endpoint Analysis scan as factor in Citrix ADC nFactor auth

For detailed information refer to Citrix Documentation -Configure post-authentication Endpoint Analysis scan as a factor in Citrix ADC nFactor authentication...

How to configure NetScaler to send proxy protocol to backend servers

This article describes how to configure NetScaler to send proxy protocol to backend servers. Background Proxy protocol was designed to chain proxies/reverse proxies without losing the client information. Client information refers to the client-ip address and port. Proxy protocol was developed by...

Citrix ADC: DNS resolution fails towards Name servers.

Citrix ADC is unable to resolve DNS. Effective state of the Name server could bedown...

Error: “Connection to PVS Soap Server Failed” While SCOM Management Server Tries To Communicate with PVS Servers

Getting the following error when running: Check Requirements and Configuration for Citrix MPPVS: On PVS server search for below logs: C:\ProgramData\Citrix\Provisioning Services MP Agent\mppvsagt.log says “Security Support Provider Interface SSPI authentication failed” On Event viewer seeing logs...

How Do I Deploy Self-Service Password Reset For the First Time

The primary intent of this article is to provide steps to how to deploy Self-Service Password Reset SSPR environment for the first time...

How Do I Set Up Automatic Client Machine Clean Up on NetScaler Gateway?

This article describes how to set up automatic client machine clean up on NetScaler Gateway. Background This article will allow a NetScaler administrator to force clean-up when an user closes a session. You can specify all, none, or any combination of the client-side items. These items are: Cooki...

Error: "Your account cannot be added using this server address" When Adding a Store on Receiver

The following error is seen whileadding a store on Citrix Receiver: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...

How to Configure Multiple License Types within a Single XenApp and XenDesktop Site

A XenApp and XenDesktop license specifies 3 things: Product, Edition, and Model. Previously, each XenApp and XenDesktop site could only consume one type of license product and model at a time. The 7.14 release of XenApp and XenDesktop now includes support for multiple license products and models...

How to troubleshoot error " Access to company network not available" while enrolling to xenmobile ?

Symptoms : After putting XMS FQDN if we receive error "Access to company network not available " , click on Report and collect logs LOG ANALYSIS : Below error message indicates that user is entering incorrect FQDN or the DNS is unable to resolve the FQDN. HTTPClientCertCredID=null,...

XenMobile Error : Incorrect credentials while enrollment

This article describes few reasons for the error "Incorrect credentials" and how to troubleshoot them a Below error indicates that the user might be typing incorrect credentials or typing sAMAccountName instead of UserPrincipalName vice versa. ,,ERROR 2,"request with id 5 failed with httpResponse...

XenMobile Error :"Certificate not trusted -Cannot connect to company's network "

After putting XMS FQDN in the Secure Hub we get error "Certificate not trusted - We cannot connect securely to your company's network" LOG ANALYSIS : Below error message indicates that there is an issue with incorrect certificate uploaded under the NetScaler offload configuration. ",RECEIVERUI,IN...

How to Add Receiver Store Using Registry

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article explains how to add Receiver store using registry...

Error: "Stop error code 0x00000074 (BAD_SYSTEM_CONFIG_INFO)" When You Start VDI

The following error is displayed when you boot VDI: Stop error code 0x00000074 BADSYSTEMCONFIGINFO...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...

Microsoft Visual C redistributable fails to install during VDA installation

While installing VDA in a platform layer. The VDA has MS VC redistributable pre-reqs and the pre-reqs were failing to install...

How to Add StoreFront Site to Client Trust Site Zone

This article explains how to add StoreFront site to client trust site zone, via group policy...

VPP Apps May Not be Installed from XenMobile Store for Paid Apps

No errors seen. Paid apps are not installed unless they set to required apps...

How to Add a Domain Admin Group to Local Admin Group Using Role Based Access Control on XenMobile

This article describes how to add a group of domain admins to the local admin group within XenMobile Server so they have access to the console...

License Count Mismatch for XenMobile Server

Licenses not being released back into pool of available licenses after deleting them from console. However when devices enroll count will go up consuming licenses, but it will never go back down...

How to Attach Additional Disk to NetScaler MAS 12.0

Citrix ADM, formerly NetScaler MAS The article describes how to attach an additional disk to NetScaler MAS 12.0 and lower versions. Points to Note You can only add one additional disk to NetScaler MAS apart from the default 120 GB disk. Adding more than one additional disk is not supported. The...

Adobe Reader Recipe

Adobe Reader is used to open and read PDF’s. It is distributed by Adobe. It is easy to install into an application layer...

QuickBooks Recipe

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

Device limit per user in Enrollment profiles not being enforced MAM-only

Enrollment Profiles has been set to limit users on specific delivery groups to a certain limit of devices per user. This should prevent people on these delivery groups from activating Secure Hub on more devices than they are allowed. However, these users are still able to activate with no...

Client Based Certificate Authentication fails for NS GW with 503 error

The CBA fails with this error : Fetcher : getagclientcert got a fail response 503 - we see the 401 error in the IIS logs below: 10.99.60.190, -, 5/8/2017, 11:22:16, W3SVC1, WIN0215, 10.99.60.31, 170, 1573, 1605, 401, 5, POST, /certsrv/certfnsh.asp, -, 10.99.60.190, -, 5/8/2017, 11:31:44, W3SVC1,...