How Do I Perform Complete SSL Certificate Monitoring and Management Using NetScaler MAS

NetScaler Management and Analytics System allows you to perform complete SSL Certificate monitoring and management operations from one single console. When a NetScaler appliance is discovered in MAS, all the certificates that reside on the NetScaler appliance also get copied to MAS. This gives MA...

XenMobile 10 MDM SSL Offload Configuration

A Citrix XenMobile environment is typically configured with a NetScaler appliance that front ends and load balances the MDM traffic which it passes on to the XenMobile Servers in the backend. This NetScaler can be configured to handle this traffic in either SSL Bridge or SSL Offload mode. Though...

Profiles Are Not Written Back to User Store on Logoff

Under certain circumstances User Profiles are not written back to the UPM User Store during log off...

Android devices cannot launch apps after updating VDA agent to version 7.11

After upgrading VDA to v7.11; Receiver for Android users cannot launch published Apps or Desktops. The following error message is observed on the Android devices: "The common name on the ID certificate is not what was expected" In addition, the receiver logs shall contain similar stack trace: 09-...

How To Configure Single Sign-on for Receiver for ChromeOS

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver for Chrome now supports single sign-on SSON on Chromebook devices and Citrix Virtual...

Configuring Multi Language Keyboard Layout for the session in Receiver for HTML5 and Receiver for Chrome

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure Multi Language keyboard layout in Receiver for HTML5 and...

Database Creation Error: The login already has an account under a different user name

When running the New Database Creation Wizard on the Workspace Environment Management WEM Infrastructure Services server, the administrator encounters the following error: "Database Creation Error!" A database is partially created on the SQL server, without any tables. TheCitrix Workspace...

Microsoft Excel 2010 crashes when Profile Management is enabled

When a user launches Microsoft Excel 2010 when Profile Management is enabled, Excel crashes and the application closes...

Published Windows Explorer does not retain icon size and layout settings with Profile Management enabled.

Under certain circumstances, users may find that some Windows Explorer settings are not retained after closing a published Windows Explorer session. These settings are saved in the registry under HKEYCURRENTUSER\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags...

How to change the Sync duration of Apple DEP server and Xenmobile 10.x server.

To change the Sync duration of Apple DEP server and Xenmobile 10 server. The default syncduration is 1440 minutes...

X-Forwarded-For Header Insert

Use Case X-Forwarded-For header can be used to pass the Client IP information to the backend server. When HTTP request contains X-Forwarded-For header, the values will be replaced with single client IP address. If there is no X-Forwarded-For header, it will be added and assigned with the client I...

How to Configure Smart Access Filters for Load Balancing Policies in XenApp 6.5

Configure Smart Access filters for load balancing policies in XenApp 6.5...

How to connect to ADFS 3.0 from NetScaler ADC load balancer?

Use Case Use case 1 : Microsoft Active Directory Federation Services ADFS 3.0 which provides single sign-onaccess to enterprise applications, requires server name in client hello extension to identify theapplication to connect to. Use case 2 : Connect to a server with multiple applications runnin...

How to Use NetScaler SNIP for Authentication (AAA) Server Communication

This article describes how to use NetScaler SNIP for authentication server communication. Background Authentication server communication on NetScaler is by default done using the NetScaler IPNSIP. So, apart from it being used for management purposes, it is also used as a source IPfor LDAP, RADIUS...

How to Limit One Session Per User on NetScaler Gateway?

This article describes how to limit one session per user on NetScaler Gateway. Use case An administrator wants to ensure that at any point in time a given user can only have one active session with NetScaler Gateway. Administrators can use a session policy or the global NetScaler Gateway settings...

How Do I Monitor NetScaler MAS Resource Consumption?

This article describes how to monitor NetScaler MAS resource consumption. Background NetScaler Management and Analytics System is a single unified solution that helps administrators perform various tasks such as infrastructure management, application management, orchestration, and gives complete...

Known Issues or Configuration Reasons: OpenGL/DirectX/GPU Acceleration Not Used

Browsers are often an integral part of the operating system and are aware that they are virtualized. As such we would recommend finding those issues within a browser and also test with a standalone benchmark application to verify if it is a configuration issue with GPU/OpenGL usage in general or...

BSOD Error: "STOP 0x0000007E CVhdMp.sys with Kaspersky antivirus

When booting from the Network, to run the Imaging Wizard or simply to boot from a vDisk, the following Blue Screen message is displayed: STOP 0x0000007E CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

CVE-2016-7777 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow malicious user code within an HVM guest VM to read or modify the contents of certain registers belonging to other tasks within that same guest VM. This vulnerability affects all currently...

High Availability Failovers Due to Missed HA HeartBeats of NetScaler VPX on VMware ESX Hypervisor

NetScaler VPX on VMWare hypervisor High Availability failsover due to missed HA heartbeats. Note : This article only pertains to NetScaler VPX on VMWare hypervisor. Background Root cause of the HA failovers is missing heartbeats due to VPX scheduling issues on the VMware host. The NetScaler’s...

Unable to authenticate users to use WiFi using Cisco-ISE.

If you see the following error whilst testing the connectivity from CIsco-ISe to the XenMobile sever. "Connection failed: there is a problem with the server Certificates or ISE trust store."...

Unable to Delete Device From XenMobile Console

Deleting a device from XenMobile console reports an error and the device is not deleted from XenMobile console...

VMWare Tools Auto-Update Renders PVS Target Devices Unresponsive

The PVS target device turn unresponsive a few seconds after booting up correctly. The behavior is only observed after devices are rebooted. The device will be marked as down on the PVS console and there will be no retries registered as the device will not reconnect to PVS...

How to add a pre-log in or post-log in message for users in an on-prem Storefront environment

With on-prem Storefront, administrators can customise their users' pre-log in or post log-in experience by adding a pop-up welcome message...

StoreFront Site Connecting Through NetScaler Gateway Gets Stuck at "/cgi/setclient?wica" Page After Authentication

When accessing StoreFront site through NetScaler Gateway, StoreFront site gets stuck at "/cgi/setclient?wica" page after authentication...

Error: "An Error Occurred While Making The Requested Connection"

When starting XenDesktop from the Web Interface screen, the following error message might be displayed: “An error occurred while making the requested connection” Upon examining the broker logs, the following error message is displayed: “The Citrix Broker Service failed to validate a user's...

Supported NFS protocols and how to identify which protocol is being used

Q. What are the supported version of NFS protocol ? How to identify which being used now ? A. NFSv3 is supported with XenServer 6.1,6.2,6.5 and XenServer version 7 supports NFSv3 and NFSv4.If the underlying storage array does not support NFSv4, NFSv3 will be used to mount the share. In order to...

XenServer Host become responsive In Reboot/Shutdown

XenServer hangs on reboot with following message in serial logs Sending all processes the TERM signal... Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time Turning off swap: Unmounting pipe file systems: Unmounting file systems: Please stand by whil...

How to troubleshoot / Useful command around openVswitch in XenServer

This article provides information about ovs and command that can be used to troubleshoot ovs related issues...

How to find the hotfix applied on XenServer ?

Get a list of hotfixapplied on XenServer and when it was applied on the Host both from XenCenter or from the command line...

How to create a raw VDI on XenServer ?

Sometimes when performance is important over other functionalities like snapshot fast clone which are provided by the VHD layer, we need to create raw VDI...

How to collect Logs for Citrix Workspace app for Linux?

This article describes the commands that can be run to collect informationand logs needed to troubleshoot Linux Receiver issues...

Generated troubleshooting for NFS related issues on XenServer

This article will give you guidelines for troubleshooting NFS SR related issues on XenServer...

Error:"An SSL connection to the server couldn't be established" when using Workspace App for Linux

When trying to authenticate to a StoreFrontserver using the StoreFrontURL you get the error: An SSL connection to the server couldn't be established because the server's certificate was not trusted...

How to Verify Active Users or ICA Users on Citrix Gateway

This article describes how to verify Active Users or ICA User on Citrix Gateway...

Error: "xenopsd internal error: Unix.Unix_error(Unix.ENODEV, "write", "") importing VM on XenServer

After exporting a VM into an xva format and trying to import the VM, VM import is successful, but when trying to start the VM, it fails with the following error in the /var/log/xensource.log xenopsd internal error: Unix.UnixerrorUnix.ENODEV, "write", ""...

XNC: How to Block any Device which does not use SecureMail Agent

Question : XNC: How to Block any Device which does not use SecureMail Agent Answer : Rule = Static+XDM: Block mode Made the static XNC rule for "WorxMail" agent. The Above step can also be achieved by allowing Secure Mail agent as "Secure Mail/Secure Mail" in the XNC RegEx build. Perform "Implici...

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

XenCenter System Alerts

The following table displays the system events/conditions that will a trigger an alert to be displayed in XenCenter System Alerts window. XenCenter System Alerts You can view a range of different types of alert in theSystem Alertswindow, including: Performance alerts. Performance alerts may be...

How to view Exchange Archive Folders within Secure Mail

Needs assistance in finding the archive folder in Secure Mail for Xenmobile...

SF Web Page inaccessible after changing Base URL

- Once the SF is configured, there might be a need to change the Base URL. However, the SF page becomes inaccessible and throws below error - You might also get "Cannot complete your request" on this page...

How to check the bond status with OpenVswitch

When the bond status are flapping, it might be necessary to check what the kernel sees. This article describes some useful commands to check Bond status around OVS...

vhd-util tool to inspect the VHD headers of a VHD

vhd-util is a native utility of a XenServer used to inspect the VHD headers of a VHD. This will be useful to inspect the parent child relationship in VHD files...

All paths in multipath are not visible in XenServer after a reboot

After a XenServer Host reboot, some of the paths are not visible when typing the command multipath -ll...

Capturing a continuous network trace( tcpdump ) on XenServer without filling the dom0

In certain situation, we are not sure when will the issue be reproduced and need to keep the network capture running. If the capture is run directly, it may fill up the dom0 filesystem and can crash the XenServer Host...

Measure storage performance on XenServer using dd ?

dd is a native linux command also available on XenServer that can be used to measure the performance of a block device like /dev/sda at a block level. We can use this command to troubleshoot storage performance issues within the Host as well as the guest while clubbing it with other tools like...

How to find the disk associated to a VM from XenServer CLI

While troubleshooting storage issues, we might need to get the VM's disk and its associated Virtual block devices . This article will help to get the desired details from the VM...

Upgrading to Ubuntu 14.04, RHEL 7 and CentOS 7 Guests

Customers who wish to upgrade existing Linux guests to versions which now operate in HVM mode that is, RHEL7, CentOS 7, and Ubuntu 14.04 should perform an in-guest upgrade. At this point, the upgraded Guest will only run in PV mode - which is not supported and has known issues. Customers should r...

XenMotion Compatibility Requirements

When migrating a VM with XenMotion or Storage XenMotion, the new VM host must meet the followingcompatibility requirements in order for the migration to proceed: • XenServer Tools must be installed on each VM that you wish to migrate. • The target host must have the same or a more recent version ...

Set the device_id param on virtual machine

How to set the deviceid param on virtual machine...