How Do I Remove an Inactive or Non-existent License Server From LUI Reports

This article describes how to remove XenApp and XenDesktop license servers from the License Usage Insights LUI service that are no longer in in use. These servers appear in the Server Status page in the LUI service with a “not reporting” status. Who is affected? Citrix Service Provider partners...

"The specified schema name \"dbo\" either does not exist" error when upgrading

Unable to upgrade XenMobile Server from 10.3.5 to 10.5. The specified schema name "dbo" either does not exist or you do not have permission to use it.\nSQL state:42000\nSQL error code:2760"'...

How do I resolve a failed Cloud Connector maintenance

A Cloud Connector will enter maintenance mode for a number of reasons including software updates. Only one connector will be put into maintenance mode at a time. This ensures that there are other connectors available to handle service requests. In some cases, the Cloud Connector may fail to updat...

How Do I Configure Cloud Connector to Support a Web Proxy

The primary intent of this article is to provide steps on how to configure the Cloud Connector to support a web proxy. The Connector supports connection to the internet via a web proxy server. The Connector requires outbound connectivity on port 443. Both the installer and the services it install...

XenMobile Server - Identity credential certificates (PKI) do not auto renew

MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...

Secure Hub Error : Security policy does not allow to connect on Android devices

This article explains on how to troubleshoot the errorSecurity policy does not allow you to connect on Android devices Log analysis : Below error could mean that user is entering an expired pin. "WARNING 3","SHTP:java.io.IOException: Connection failed, status=400 subcode=HTTP/1.1 400 SHTP0005:...

Secure Hub Error: Request Failed on iOS devices

This article explains how to troubleshoot the errorRequest Failed on iOS devices when we have cert+LDAP policy on Netscaler Gateway Below error in the iOS Secure Hub logs indicates that the issue is because two factors Authentication is disabled. ,,ERROR...

Configure post-authentication Endpoint Analysis scan as factor in Citrix ADC nFactor auth

For detailed information refer to Citrix Documentation -Configure post-authentication Endpoint Analysis scan as a factor in Citrix ADC nFactor authentication...

Error: “Connection to PVS Soap Server Failed” While SCOM Management Server Tries To Communicate with PVS Servers

Getting the following error when running: Check Requirements and Configuration for Citrix MPPVS: On PVS server search for below logs: C:\ProgramData\Citrix\Provisioning Services MP Agent\mppvsagt.log says “Security Support Provider Interface SSPI authentication failed” On Event viewer seeing logs...

How Do I Deploy Self-Service Password Reset For the First Time

The primary intent of this article is to provide steps to how to deploy Self-Service Password Reset SSPR environment for the first time...

Citrix ADC: DNS resolution fails towards Name servers.

Citrix ADC is unable to resolve DNS. Effective state of the Name server could bedown...

How to configure NetScaler to send proxy protocol to backend servers

This article describes how to configure NetScaler to send proxy protocol to backend servers. Background Proxy protocol was designed to chain proxies/reverse proxies without losing the client information. Client information refers to the client-ip address and port. Proxy protocol was developed by...

How Do I Set Up Automatic Client Machine Clean Up on NetScaler Gateway?

This article describes how to set up automatic client machine clean up on NetScaler Gateway. Background This article will allow a NetScaler administrator to force clean-up when an user closes a session. You can specify all, none, or any combination of the client-side items. These items are: Cooki...

XenMobile Error :"Certificate not trusted -Cannot connect to company's network "

After putting XMS FQDN in the Secure Hub we get error "Certificate not trusted - We cannot connect securely to your company's network" LOG ANALYSIS : Below error message indicates that there is an issue with incorrect certificate uploaded under the NetScaler offload configuration. ",RECEIVERUI,IN...

Error: "Your account cannot be added using this server address" When Adding a Store on Receiver

The following error is seen whileadding a store on Citrix Receiver: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...

XenMobile Error : Incorrect credentials while enrollment

This article describes few reasons for the error "Incorrect credentials" and how to troubleshoot them a Below error indicates that the user might be typing incorrect credentials or typing sAMAccountName instead of UserPrincipalName vice versa. ,,ERROR 2,"request with id 5 failed with httpResponse...

How to troubleshoot error " Access to company network not available" while enrolling to xenmobile ?

Symptoms : After putting XMS FQDN if we receive error "Access to company network not available " , click on Report and collect logs LOG ANALYSIS : Below error message indicates that user is entering incorrect FQDN or the DNS is unable to resolve the FQDN. HTTPClientCertCredID=null,...

How to Configure Multiple License Types within a Single XenApp and XenDesktop Site

A XenApp and XenDesktop license specifies 3 things: Product, Edition, and Model. Previously, each XenApp and XenDesktop site could only consume one type of license product and model at a time. The 7.14 release of XenApp and XenDesktop now includes support for multiple license products and models...

Error: "Stop error code 0x00000074 (BAD_SYSTEM_CONFIG_INFO)" When You Start VDI

The following error is displayed when you boot VDI: Stop error code 0x00000074 BADSYSTEMCONFIGINFO...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...

How to Add Receiver Store Using Registry

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article explains how to add Receiver store using registry...

Microsoft Visual C redistributable fails to install during VDA installation

While installing VDA in a platform layer. The VDA has MS VC redistributable pre-reqs and the pre-reqs were failing to install...

How to Add StoreFront Site to Client Trust Site Zone

This article explains how to add StoreFront site to client trust site zone, via group policy...

License Count Mismatch for XenMobile Server

Licenses not being released back into pool of available licenses after deleting them from console. However when devices enroll count will go up consuming licenses, but it will never go back down...

VPP Apps May Not be Installed from XenMobile Store for Paid Apps

No errors seen. Paid apps are not installed unless they set to required apps...

How to Add a Domain Admin Group to Local Admin Group Using Role Based Access Control on XenMobile

This article describes how to add a group of domain admins to the local admin group within XenMobile Server so they have access to the console...

How to Attach Additional Disk to NetScaler MAS 12.0

Citrix ADM, formerly NetScaler MAS The article describes how to attach an additional disk to NetScaler MAS 12.0 and lower versions. Points to Note You can only add one additional disk to NetScaler MAS apart from the default 120 GB disk. Adding more than one additional disk is not supported. The...

Implementing out of compliance actions with restrictions

In our example: We want to mark the device to “Out of Compliance” if an app is installed on the device forbidden app We then want to restrict this device so user cannot use the “Camera”. Furthermore, once the user removes the forbidden app, we want the device to be marked “In- Compliance” and...

How to Generate Tech support bundle for Citrix ADM from CLI

The articles describes how to generate the technical support bundle of Citrix ADM...

Client Based Certificate Authentication fails for NS GW with 503 error

The CBA fails with this error : Fetcher : getagclientcert got a fail response 503 - we see the 401 error in the IIS logs below: 10.99.60.190, -, 5/8/2017, 11:22:16, W3SVC1, WIN0215, 10.99.60.31, 170, 1573, 1605, 401, 5, POST, /certsrv/certfnsh.asp, -, 10.99.60.190, -, 5/8/2017, 11:31:44, W3SVC1,...

QuickBooks Recipe

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

How to use Safari instead of Secure Web to open the links from Secure Mail?

In order to achieve the desired behavior, change the Allowed URL filed in MDX policies of Secure Mail Refer to Citrix documentation - Allow Secure Web domains MDX policy for Secure Mail...

XenMobile: Cannot login to the console, Authentication fails

Unable to login to the XenMobile console. Cannot check the LDAP connections/ bindings from the console. The users are not connecting from the devices. We get "Incorrect Credentials" error message on the devices...

Adobe Reader Recipe

Adobe Reader is used to open and read PDF’s. It is distributed by Adobe. It is easy to install into an application layer...

Average Logon Duration Is Not Available In Citrix Director

When an administrator logs in Citrix Director and goes to "trends" to look for Average Logon Duration, the information is not available. Logon Duration in MonitorData.Session Table in Monitoring Database also shows "Null" value for "Logon Duration" Restarting the Monitoring Service on Delivery...

Device limit per user in Enrollment profiles not being enforced MAM-only

Enrollment Profiles has been set to limit users on specific delivery groups to a certain limit of devices per user. This should prevent people on these delivery groups from activating Secure Hub on more devices than they are allowed. However, these users are still able to activate with no...

Secure Mail gives Error: Your organization does not allow this action

- User opens Secure Mail. - Goes into Contacts. - Selects a contact. - Clicks on the contacts phone number. - Sees error message:Your organization does not allow this action...

Firefox Recipe

Firefox is a web browser distributed by Mozilla. This article includes information on installing Firefox to an application layer...

How to Collect Client VPN Logs for ADC Gateway

This article describes how to collect VPN logs from Windows XP, Windows Vista, Windows 7, or Windows 8 for analyzing VPN connection issues in an ADC Gateway appliance...

Secure Mail : Email Sync is not possible for a single user.

Exchange error : Seeing error for the user wd0283 Error - 4023,MSExchangeADAccess : locked out until 5/3/2017...

Preventing the Cache-Control Response Header from being Set to private

Q: When Compression is enabled on a NetScaler appliance, can you prevent the Cache-Control response header being set to the value private? A: Yes. You can prevent the Cache-Control response from being set to the value private when compression is enabled on a NetScaler appliance. To prevent the...

Nutanix AHV Connector Failure: "The storage container cannot be accessed"

Error observed: "The storage container cannot be accessed. Please check that the ELM is in the container's 'white list'. " When deploying App Layering to Nutanix AHV: You are able to "check credentials" on the left half of the connector screen successfully, and it enumerate templates and storage...

AD Account Lockouts Due to Citrix PIN Password Caching

After a password change at ActiveDirectory, users are seeing account lockouts. XenMobile was causing these lockouts as the password cached with Citrix PIN was not updated...

Secure Mail : Error Processing STA Ticket. Bad Request, Cannot Connect to Company Network

Cannot connect to company network and Error Processing STA Ticket. Bad Request. Seems to be happening when entering passcode. NetScalers went down due to network trouble between datacenters...

Users get multiple OTP Push Notifications, Radius servers see multiple Auth requests & Auth Failures

Users will receive authentication denials, may receive multiple Push Notifications, Radius servers will log multiple simultaneous authentication requests for the same user with different Radius IDs, or user One Time Password tokens will become locked out. If you review traces, you will see multip...

Citrix Cloud Connector Installation does not complete: Unable to validate certificate chain

Citrix Cloud Connector does not complete its initial installation or is unable to upgrade to the latest Cloud Connector version. The installation is blocked because it’s not able to validate the code signing certificate of the Citrix Cloud Components downloaded, which may be due to the certificat...

Citrix Endpoint Management: Deployment Use Cases

Citrix Endpoint Management and its Deployment Use Cases Citrix Endpoint Management: Citrix Cloud is a platform that hosts and administers Citrix services. It connects to your enterprise resources, via the Citrix Cloud Connector, on any cloud or infrastructure you choose. It allows you to create,...

XenServer Cannot Read the License From the License Server

XenServer cannot read the license from the license server...

Slow Login Times and Intermittent Slowness in Session On PVS 7.6

Logon time very high for end users. Targets responding slowly in session. Users intermittently unable to login...

How to Disable Single Sign-On in NetScaler

This article describes how to disable Single Sign-On in NetScaler. Background In XenMobile, in some use cases the app may want to perform NTLM authentication of a user that was not used during enrollment. In such situation, the app uses Full Tunnel mode and so would like to send the credentials...