PVS 6.1 - Issues with MAK licensing activation....VAMT Tool will not launch

When try to activate a target device using MAK from the PVS console received: "The Volume Activation Management Tool cannot be found"...

"Attach a smart card reader and insert your smart card to log on" When no Smart Card Authentication Present

When using Citrix Receiver to connect to the NetScaler Gateway, StoreFront users get "Attach a smart card reader and insert your smart card to log on" however smart authentication is not configured...

StoreFront Header Branding Logo Display shows distorted when zoom is applied to browser (chrome, IE, Edge, Firefox)

When a custom logo is applied to a StoreWeb in Storefront 3.x and zoom feature on browser is used, the logo will be cut off and will not be displayed properly. This behavior can be seen in multiple browser versions...

StoreFront Upgrade Fails with Large Subscription Database

Note: This issue is not found in Storefront 3.11 and later versions. StoreFront upgrade fails with large subscription database. C:\Windows\Temp\StoreFront\CitrixMSI-CitrixStoreFront log points to following error: An error occurredcreating the snapshot: 'System.IO.IOException: The file is too long...

Error: "Error while changing IO Priority to High for Process" for Processes Related to Antivirus Software

The Windows Event Log on a machine running Workspace Environment Management may contain many events from the WEM Agent Service. These events all relate to processes for Antivirus software installed on the device...

How to Perform a Backup of License File of Legacy CloudBridge Platforms and VPX Appliances

This article describes how to perform a backup of the license file of legacy CloudBridge platforms and VPX appliances...

How to Configure NetScaler EPA Expression to Validate if "Windows Update" Date is Within Specific Time Period

This article describes how to configure NetScaler EPA expression to validate if "Windows Update" date of client machine is within a specific time period. Note : The NetScaler should be running version 11.1 as this feature is not present in builds prior to 11.1 builds...

NetScaler Gateway EPA Scan Fails When Checking for "Windows Update" on Client Machine

When NetScaler Gateway EPA scan is configured to validate if the Windows update on client machine has been performed within X days, the scan fails on client machine...

NetScaler Gateway: Could not add account. Check your account settings and try again.

When accessing the Store externally we would get the error Could not add account. Check your account settings and try again. If we access the Storefront Base URL, we are able to enumerate the applications and desktops just fine...

Unable to Add/Upload an SSL Certificate/Key Pair to the CloudBridge: “Execution Error”

When configuring an SSL Profile the ssl certificate/key pair must be previously uploaded. The following error message is displayed when trying to upload the Certificate file extension .cer: Please correct any problems and resubmit your request Execution error...

XenMobile: Error during enrollment "could not connect to the server"

During the enrollment for IOS devices you receive the error "Could not connect to the server " during the installation of the Profiles. In the XMS Server debug logs we would see: "UserDeviceLimitExceededException"...

XMS is unable to connect to DEP - Error: "Connection failed" when testing the connection

In the XMS console, inside iOS Bulk Enrollment DEP Configuration, when importing the Token file from the DEP Portal, the connectivity test is failing with error "Connection Failed". However, XMS connectivity tests are showing that XMS is able to reach Apple's websites, the ports are correctly...

XenMobile Domain users unable to authenticate - LDAP response read timed out, timeout used

If domain users or admins are failing to authenticate to XenMobile, verify if the following error appears in the debug log 2016-04-05T10:25:50.128+0000 | 5EAF1FBBC192FC0D | WARN | http-nio-10080-exec-77 | com.sparus.nps.apple.security.AuthUtils | Forcing LDAP auth: cannot refresh user data:...

CVE-2016-9637 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow malicious privileged-mode code running within an HVM guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix...

Second profile fails on iOS enrollments - Connection to the server could not be established

Second profile installation failing on iOS device: "Error: Connection to the server could not be established" Device logs: Desc : Profile Installation Failed Sugg : A connection to the server could not be established. Domain : MCInstallationErrorDomain Code : 4001 Server logs: Refused request...

Prerequisite Failure Error When Upgrading from StoreFront 2.6 to 3.0

Prerequisite failure error when upgrading from StoreFront 2.6 to 3.0: An error occurred during installation. Please ensure all the required prerequisites have been installed and run the installer again...

XenMobile Apps in authentication loop or crashing when returning to Secure Hub to do authentication

Secure Hub and apps for example Secure Mail end up in an authentication loop with Secure Hub showing the error message "Verify your credentials and try again", with the following options "Sign On" or "Quit". Sign On would bring you back to Secure Hub and start the loop all over again...

The Connection to "App/Desktop Name" Failed With Status (There is no Citrix XenApp Server Configured on the Specified Address)

Users receive this error when trying to launch externally: "The connection to "App/Desktop Name" failed with status There is no Citrix XenApp server configured on the specified address.."...

How to Silently Remove and Clean-up Application Shortcuts from Citrix Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. To have the Citrix Receiver silently remove application shortcutsfrom their Citrix Receiver thatthe...

How to restrict access to the XenMobile Server Admin console

This will allow us to restrict the access and allow only specific IP addresses to reach the management portal of the XenMobile Server...

What is promiscuous mode for a NIC (interface)

Question: What is promiscuous mode for a NIC interface? Answer: In a network,promiscuous modeallows a network device to intercept and read each network packet that arrives in its entirety. In anEthernetlocal area network LAN, promiscuous mode is a mode of operation in which...

Full Control Permissions Granted to All Users in Profile Management

The Full Control permission has been granted to each user. For example, when a new user is created in Active Directory and logs on for the first time, a folder is created for that user in the user store. However, all users have permission to access that folder and perform operations on it...

Error: "Your sign on has expired. Please sign on again to continue." When Accessing XenMobile Store

Error message on SecureHub while accessing WorxStore "Your sign on has expired. Please sign on again to continue.". Screenshot below. Note : This is affecting both iOS and Android users. Error Message in SecureHub Logs "Secure Hub","WARNING 3","AuthControllerImpl:getKeyManager is going to return...

Citrix ADC Gateway EPA Scans Deny Access Randomly With Error Code 12029

Citrix ADC Gateway EPA scans deny access randomly with error code 12029...

XenMobile user shows as "Anonymous" in XenMobile Admin Console

Within the XenMobile console, under the user column, few users started showning as anonymous. In zdm.logs we might see:User '[email protected]' not found or is disabled. Switching to anonymous mode...

Secure Mail strips attachments from digitally signed emails

Attachments are not being shown on digitally signed emails in Secure Mail. Information Secure Mail supports Secure/Multipurpose Internet Mail Extensions S/MIME, enabling users to sign and encrypt messages for greater security. Signing assures the recipient that the message was sent by the...

Provisioning Services and Daylight Saving Time

During a Target Device TD boot or reboot, after Daylight Saving Time DST but prior to any vDisk maintenance, you might notice that the TD system time is not consistent with the system time of the PVS Server. A user has reported the inability to log on to the domain. Log on with a local user accou...

Secure Ticket Authority (STA) Status Is Marked As DOWN on Citrix Gateway Virtual Server

The CitrixGateway virtual server configured with Secure Ticket Authority STA is marked as DOWN, as shown in the following screen shot:...

Error: "Connection Failed due to Security Policy" on Citrix XenMobile Apps

The following error is displayed on Citrix XenMobile Apps: "Connection failed due to a security policy"...

Preparing iOS Devices for Supervised Mode.

The objective of this document is to explain how user can prepare his device in Supervise Mode using Apple Configurator 2 and enroll his device with XenMobile to apply iOS device policies...

Error: "Security policy does not allow you to connect" when trying to do Secure Hub Enrollment

When logging into Secure Hub you get "Security policy does not allow you to connect"...

Wyse Zero Client Unable to Log On to StoreFront

Wyse Zero Clients are unable to log on to StoreFront. The following error is received: Start roaming account , Citrix Sign-On failed This issue occurs after rebooting one of the devices. The devices that are not yet rebooted are working without any issues...

When Launching an Application Internally via Netscaler User Receives Error: "Cannot Connect To The Citrix XenApp Server. There Is No Citrix XenApp Server Configured On The Specified Address"

With a NetScaler Gateway and StoreFront setup, while launching application users get following or similar errors: "Unable to launch your application. Contact your help desk with the following information. Cannot connect to the Citrix XenApp server. There is no Citrix XenApp server configured on t...

Secure Mail Error: "Access to company is not currently available"

Worx/Secure Mail Error: "Access to your company is not currently available" Errors found in the client logs: AGTunnel fails to start when attempting to proxy traffic from the NSG " 2016-11-14T11:22:11.535+0000 ",AGTunneler ,WARNING 3,"Failed to read in AGSOCKSClient, err = -8000...

Some Workspace Environment Management security settings are not getting applied

Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...

Users not Being Prompted for Citrix Receiver Upgrade Upon Logon to Storefront Web URL

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users not being prompted to upgrade Citrix Receiver when it is available...

MDM enrollment failing for iOS and Android devices, but MAM enrollment works fine

On iOS, the enrollment fails during the second profile installation - The error is "Profile installation failed: profile failed to install" On Android, you see "Access to your company network is not available" Enrolling directly against the Gateway MAM works fine. The server-side logs are showing...

Error: General error while launching applications through android receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Getting following error when launching applications through android receiver when coming through...

Some UPM or WEM Agent parameters may not be applied by the agent after switching from GPO settings to Workspace Environment Management settings.

Symptom 1: WEM Policy/Settings are not applying, and the old Citrix Profile Management items are applying instead Symptom 2: WEM Policies are not applying to the WEM Agents...

Could not sign CSR Caused by: java.io.IOException: Cannot obtain certificate from certsrv authority: 403 Forbidden (ZDM-certsrv/1.0 - 403 16)

XenMobile Client Certificate request responded with a HTTP Response 403 16 Forbidden by the issuing server IIS Log : 2016-10-11 14:42:18 10.1.1.51 POST /certsrv/certfnsh.asp - 443 - 192.168.100.100 ZDM-certsrv/1.0 - 403 16 2148204809 31...

Secure Mail - Error: Access to your company network is not available

Secure Mail Client when entering the Mail Server FQDN for first time sync returns the Error "Access to your company network is not available"...

Error: "Server sent back a fault indicating it is too busy to process the request" and the WEM Agent fails to connect to the Broker Service

The Citrix Workspace Environment Management Agent fails to connect to the Norskale Infrastructure Service, and the Citrix WEM Agent Service log contains the following error: ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient : System.ServiceModel.ServerTooBusyException : Server...

Error: "The Citrix WEM Agent Host Service service hung on starting", Netlogon prevented from starting

The Citrix WEM Agent Host Service fails to start with the following error message: "The Citrix WEM Agent Host Service service hung on starting." As a result,the Netlogon service is prevented from starting becauseNetlogon depends on the Citrix WEM Agent Host Service...

Getting "Request not supported" while launching a published Desktop with FAS enabled

Launching of a published desktop fails when StoreFront server is configured to use FAS. You will get an error "Request Not Supported ". The below error may be seen in Kerberos event logs on the VDA when attempting to launch. 0x10 - KDCERRPADATATYPENOSUPP: KDC has no support for padata type Kerber...

Error: "Logon failure: the user has not been granted the requested logon type at this computer."

Under certain circumstances, the Citrix WEM Agent log may show the following message: "Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Logon failure: the user has not been granted the requested logon type at this computer."...

Secure Web - Error: Cannot open the page - too many http redirections

After the NSG Session times out and the user attempts to start Secure Web, the following error message appears "Cannot open the page - too many http redirections " - then it disappears and a message "Check your credentials - Logon " appears. " 2016-11-11T08:02:45.345+0100 ",,INFO...

Warning message on storefront console "There are no certificates associated with this storefront server."

...

UPM Failing for account with error "The specified account does not exist."

Users not receiving a UPM profile when logging into application. When logging in UPM fails, within the UPM logs we only see the following logged :- 2016-08-25;14:11:45.659;INFORMATION;EXTRANET;x9027690;3;15276;CADUser::Init: Determined user and DNS domain name: ,...

Boot Signal fails while reboot and shutdown signal works properly

The machines created from Streaming VM setup wizard are unable to boot when boot signal is sent from the PVS console. If we send the reboot or shutdown signal it reboots or shuts down the machines...

How to Configure Internal Beacon for Single FQDN on StoreFront

This article describes how to Configure Internal Beacon for Single FQDN on StoreFront. Background When you access any URL in Citrix Receiver, it tries to resolve both internal and external beacons. First it will resolve the internal beacon, followed by the external beacon, and then Citrix Receive...